Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Trojaner: Ransom und PUM.UserWLoad

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 28.01.2013, 14:14   #1
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Hallo,

ich würde mich sehr freuen, wenn Ihr mir bei meinem Problem helfen könntet.
Ich habe mir leider was auf meinem Rechner eingefangen:
Laut Malwarebytes sind es die Trojaner Ransom und PUM.UserWLoad.

Trotz mehrfachen Versuches mit Malwarebytes, das Problem zu beheben, hat es nicht funktioniert.
Könnt Ihr mir witerhelfen?

Danke im Voraus.

Nachfolgend die Log-Datei von Malwarebytes:

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.01.21.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
RM :: RM-PC [Administrator]

24.01.2013 19:22:00
mbam-log-2013-01-24 (19-22-00).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 283513
Laufzeit: 7 Minute(n), 11 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 2
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (PUM.UserWLoad) -> Daten: C:\Users\RM\LOCALS~1\Temp\msvyvqy.bat -> Löschen bei Neustart.
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (Trojan.Ransom) -> Daten: C:\Users\RM\LOCALS~1\Temp\msvyvqy.bat -> Löschen bei Neustart.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Alt 28.01.2013, 16:54   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Hallo und

Aus welchem Anlass hast du mit MBAM gescannt? Einfach so oder weil du iwelche Probleme hast? Wenn ja bitte genauer beschreiben

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner?
Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs posten!
__________________

__________________

Alt 28.01.2013, 17:15   #3
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Hallo,

erst mal Danke für den Willkommensgruß.

Ich habe den Scan gemacht, da mir mein Virusprogramm, ich nutze Antivir, Malware gefunden hat.
Hab alles per Avira beheben können und laut dem Programm ist auch alles sauber.
Nach einigen Recherchen im Internet bin ich auf Malwarebytes aufmerksam geworden und habe es mir runtergeladen.
Ich wollte einfach nur sichergehen, daß wirklich alles sauber ist, jedoch findet mir Malwarebytes jedes mal die angegebenen beiden Trojaner.
Wenn ich auf Löschen gehe und Neustart mache, passiert nichts. Bei jedem Suchlauf von Malwarebytes kommt dieselbe Meldung.
Leider habe ich im Inet keine weitere Lösung finden könden, um das zu beheben.
__________________

Alt 28.01.2013, 17:19   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Zitat:
ich nutze Antivir, Malware gefunden hat.
Hab alles per Avira beheben können und laut dem Programm ist auch alles sauber.
Schön und wo sind die Logs dazu?

Solche Angaben reichen nicht, bitte poste die vollständigen Angaben/Logs der Virenscanner siehe http://www.trojaner-board.de/125889-...tml#post941520


Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 29.01.2013, 12:08   #5
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Hallo,

anbei die gesamten Funde von Avira, hoffe ich habs jetzt richtig gemacht:

Code:
ATTFilter
Exportierte Ereignisse:

21.01.2013 21:03 [System Scanner] Malware gefunden
      Die Datei 'C:\Users\RM\AppData\Roaming\Fuyno\okred.exe'
      enthielt einen Virus oder unerwünschtes Programm 'TR/Crypt.XPACK.Gen7' [trojan].
      Durchgeführte Aktion(en):
      Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler 
      aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
      Die Quelldatei konnte nicht gefunden werden.
      Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
      Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
      Die Datei existiert nicht!

15.01.2013 17:00 [Echtzeit Scanner] Malware gefunden
      In der Datei 'C:\Users\RM\AppData\Local\Temp\tmp28d6dc8c\ork.exe'
      wurde ein Virus oder unerwünschtes Programm 'TR/PSW.Zbot.258048.270' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\1a48cd8c-5d50d515
      '
      enthielt einen Virus oder unerwünschtes Programm 'EXP/JAVA.Ternub.Gen' 
      [exploit].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5c902ee6.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\1398270c-2522ccb6
      '
      enthielt einen Virus oder unerwünschtes Programm 'JAVA/Inject.AX' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '45f5150f.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\726df90a-2fdc8632
      '
      enthielt einen Virus oder unerwünschtes Programm 'JAVA/Jogek.OS' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '29aa393e.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\70daf090-787297db
      '
      enthielt einen Virus oder unerwünschtes Programm 'EXP/2008-5353.AK.2' [exploit].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '71ba01e5.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\16282de9-29eee189
      '
      enthielt einen Virus oder unerwünschtes Programm 'EXP/2012-0507.CY' [exploit].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '3e735fa3.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\2290d867-4732827f
      '
      enthielt einen Virus oder unerwünschtes Programm 'JAVA/Jogek.AC' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '41676dc1.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\aa1d4df-5dc20035'
      enthielt einen Virus oder unerwünschtes Programm 'JAVA/Strex.BD' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0dd741e4.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\1fe6b2f-2f63c29e'
      enthielt einen Virus oder unerwünschtes Programm 'EXP/CVE-2012-4681' [exploit].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7b8472ef.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\61cac833-42432918
      '
      enthielt einen Virus oder unerwünschtes Programm 'TR/Spy.ZBot.245760.84' 
      [trojan].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1db13d69.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 
      'C:\Users\RM\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\2f9cfd08-43397f0b'
      enthielt einen Virus oder unerwünschtes Programm 'JAVA/Dldr.Retty.A' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4f9067dd.qua' 
      verschoben!

13.01.2013 17:50 [System Scanner] Malware gefunden
      Die Datei 'D:\RM-PC\Backup Set 2012-09-09 102318\Backup Files 2012-09-09 
      102318\Backup files 2.zip'
      enthielt einen Virus oder unerwünschtes Programm 'EXP/CVE-2012-4681' [exploit].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5779480c.qua' 
      verschoben!
         


Alt 29.01.2013, 12:44   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Bevor wir uns an die Arbeit machen, möchte ich dich bitten, folgende Punkte vollständig und aufmerksam zu lesen.
  • Lies dir meine Anleitungen, die ich im Laufe dieses Strangs hier posten werde, aufmerksam durch. Frag umgehend nach, wenn dir irgendetwas unklar sein sollte, bevor du anfängst meine Anleitungen umzusetzen.

  • Solltest du bei einem Schritt Probleme haben, stoppe dort und beschreib mir das Problem so gut du kannst. Manchmal erfordert ein Schritt den vorhergehenden.

  • Bitte nur Scans durchführen zu denen du von einem Helfer aufgefordert wurdest! Installiere / Deinstalliere keine Software ohne Aufforderung!

  • Poste die Logfiles direkt in deinen Thread (bitte in CODE-Tags) und nicht als Anhang, ausser du wurdest dazu aufgefordert. Logs in Anhängen erschweren mir das Auswerten!

  • Beachte bitte auch => Löschen von Logfiles und andere Anfragen

Note:
Sollte ich drei Tage nichts von mir hören lassen, so melde dich bitte in diesem Strang => Erinnerung an meinem Thread.
Nervige "Wann geht es weiter" Nachrichten enden mit Schließung deines Themas. Auch ich habe ein Leben abseits des Trojaner-Boards.


Erstmal eine Kontrolle mit OTL bitte:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Setze oben mittig den Haken bei Scanne alle Benutzer
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles hier in CODE-Tags in den Thread.
__________________
--> Trojaner: Ransom und PUM.UserWLoad

Alt 29.01.2013, 14:59   #7
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Anbei nun die Log-Files von Otl:

Code:
ATTFilter
OTL logfile created on: 29.01.2013 14:45:31 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\RM\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,91 Gb Total Physical Memory | 1,49 Gb Available Physical Memory | 38,12% Memory free
7,83 Gb Paging File | 5,08 Gb Available in Paging File | 64,86% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74,52 Gb Total Space | 5,78 Gb Free Space | 7,75% Space Free | Partition Type: NTFS
Drive D: | 202,08 Gb Total Space | 194,20 Gb Free Space | 96,10% Space Free | Partition Type: NTFS
 
Computer Name: RM-PC | User Name: RM | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\RM\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_146_ActiveX.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe (Adobe Systems, Inc.)
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - D:\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
PRC - D:\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
PRC - D:\Kies\Kies.exe (Samsung)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe (Vodafone)
PRC - C:\Windows\AsScrPro.exe (ASUS)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\d0e1cdaff8f9055187f8e7b52c060dff\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\26e0457a9776a0e9f23e3986686d90a5\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\63bc6e391de5014965039e100ce1e9d5\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\b68bee05c7e518172982cc92059c3315\System.Xaml.ni.dll ()
MOD - C:\Users\RM\AppData\Local\Temp\d6ebea43-a7f6-428d-ab33-ddb1ea1983ec\CliSecureRT.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\d239f585ee55f833dbe21e897e1265ac\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b7de318e9fd1ef519ca6c1f3b5dba8e0\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\00a4922fbf869a79c043b665035516b6\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\09bd2126bba2ab4f29ed52afde1470d7\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\608d29d7cc89f3a9a195c91354561915\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\a6e37a05b8d0cedbc5c3ea266ae3fc31\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9abe44a0f82070ead5f1256683a4d25a\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\4230ed1c7990e4ee8352baf67a2a85fa\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\a84262e1224189f93e10cd3c403a9527\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\a6be120e49f895ef6b00e9918402395b\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\c1af4ec9a36f671617a8ecaec00373f4\mscorlib.ni.dll ()
MOD - D:\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll ()
MOD - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (Amsp) -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe File not found
SRV:64bit: - (NitroReaderDriverReadSpool2) -- C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe (Nitro PDF Software)
SRV:64bit: - (AFBAgent) -- C:\Windows\SysNative\FBAgent.exe (ASUSTeK Computer Inc.)
SRV:64bit: - (TiMiniService) -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe (Trend Micro Inc.)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (Application Updater) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (sftvsa) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (VmbService) -- C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe (Vodafone)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (HP LaserJet Service) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ATKGFNEXSrv) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (dg_ssudbus) -- C:\Windows\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (ssudmdm) -- C:\Windows\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira GmbH)
DRV:64bit: - (Sftvol) -- C:\Windows\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)
DRV:64bit: - (Sftplay) -- C:\Windows\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)
DRV:64bit: - (Sftredir) -- C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (Sftfs) -- C:\Windows\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (huawei_cdcacm) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (huawei_enumerator) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (huawei_ext_ctrl) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (hwdatacard) -- C:\Windows\SysNative\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (huawei_wwanecm) -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (ew_usbenumfilter) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (ew_hwusbdev) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (nvpciflt) -- C:\Windows\SysNative\drivers\nvpciflt.sys (NVIDIA Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (IntcDAud) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV:64bit: - (tmcomm) -- C:\Windows\SysNative\drivers\tmcomm.sys (Trend Micro Inc.)
DRV:64bit: - (tmtdi) -- C:\Windows\SysNative\drivers\tmtdi.sys (Trend Micro Inc.)
DRV:64bit: - (tmactmon) -- C:\Windows\SysNative\drivers\tmactmon.sys (Trend Micro Inc.)
DRV:64bit: - (tmevtmgr) -- C:\Windows\SysNative\drivers\tmevtmgr.sys (Trend Micro Inc.)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (vodafone_K3805-z_dc_enum) -- C:\Windows\SysNative\drivers\vodafone_K3805-z_dc_enum.sys (Vodafone)
DRV:64bit: - (RSUSBVSTOR) -- C:\Windows\SysNative\drivers\rtsuvstor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (kbfiltr) -- C:\Windows\SysNative\drivers\kbfiltr.sys ( )
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (SiSGbeLH) -- C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (cpuz135) -- C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys (CPUID)
DRV - (ATKWMIACPIIO) -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys (ASUS)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (ASMMAP64) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS)
 
 
========== Standard Registry (All) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ASUT_deDE461
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.1
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ [2011.04.18 08:36:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.01.21 22:53:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.01.16 16:14:18 | 000,000,000 | ---D | M]
 
[2011.11.21 12:08:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\RM\AppData\Roaming\mozilla\Extensions
[2011.11.21 12:08:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\RM\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2013.01.15 08:35:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.11.05 11:18:12 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013.01.21 22:53:53 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013.01.21 22:53:53 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2009.05.01 22:02:48 | 001,044,480 | ---- | M] (The OpenSSL Project, hxxp://www.openssl.org/) -- C:\Program Files (x86)\mozilla firefox\plugins\libdivx.dll
[2007.04.10 17:21:08 | 000,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll
[2009.05.12 19:46:20 | 001,650,992 | ---- | M] (DivX,Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdivx32.dll
[2008.09.16 01:12:12 | 000,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files (x86)\mozilla firefox\plugins\npDivxPlayerPlugin.dll
[2012.12.18 15:28:14 | 000,186,584 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll
[2009.05.01 22:02:48 | 000,200,704 | ---- | M] (The OpenSSL Project, hxxp://www.openssl.org/) -- C:\Program Files (x86)\mozilla firefox\plugins\ssldivx.dll
[2013.01.05 16:11:17 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.01.05 16:11:17 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2013.01.05 16:11:17 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2013.01.05 16:11:17 | 000,002,669 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\google.xml
[2013.01.05 16:11:17 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.01.05 16:11:17 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.01.05 16:11:17 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
[2011.11.21 14:38:42 | 000,000,894 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo.xml
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No CLSID value found.
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.8\pdfforgeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.8\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll ()
O4:64bit: - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [KiesTrayAgent] D:\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [ctfmon.exe] C:\Windows\SysWOW64\ctfmon.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [KiesAirMessage] D:\Kies\KiesAirMessage.exe -startup File not found
O4 - HKCU..\Run: [KiesPDLR] D:\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [KiesPreload] D:\Kies\Kies.exe (Samsung)
O4 - HKCU..\Run: [syshost32] C:\Users\RM\AppData\Local\{FE65F03A-7610-0FB6-92BD-A28F7195183E}\syshost.exe File not found
F3:64bit: - HKCU WinNT: Load - (C:\Users\RM\LOCALS~1\Temp\msvyvqy.bat) -  File not found
F3 - HKCU WinNT: Load - (C:\Users\RM\LOCALS~1\Temp\msvyvqy.bat) -  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1DFDB45E-B539-4935-8C4A-21FB10AA0B70}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5C56A932-0B3A-4807-93DF-E5A38BF76187}: DhcpNameServer = 192.168.0.3 192.168.0.150
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{62139292-9DD5-4F90-B35C-08BB6903237E}: NameServer = 212.65.129.2 212.65.140.142
O18:64bit: - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
O18:64bit: - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O18:64bit: - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O30:64bit: - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corp.)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corp.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{01b8f3ca-922c-11e1-89ab-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{01b8f3ca-922c-11e1-89ab-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmb_lite.exe /checkApplicationPresence
O33 - MountPoints2\{01b8f3d6-922c-11e1-89ab-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{01b8f3d6-922c-11e1-89ab-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{01b8f3d8-922c-11e1-89ab-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{01b8f3d8-922c-11e1-89ab-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{0561b5b8-f0d4-11e1-ad1c-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{0561b5b8-f0d4-11e1-ad1c-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{0561b5ba-f0d4-11e1-ad1c-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{0561b5ba-f0d4-11e1-ad1c-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{059fb3a3-f282-11e1-b73d-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{059fb3a3-f282-11e1-b73d-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{094abb4c-7e41-11e1-984b-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{094abb4c-7e41-11e1-984b-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{5618a702-c5c9-11e1-87e8-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{5618a702-c5c9-11e1-87e8-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{5618a704-c5c9-11e1-87e8-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{5618a704-c5c9-11e1-87e8-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{6458dbf8-4410-11e1-bdac-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{6458dbf8-4410-11e1-bdac-f46d042511bc}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\{972d3197-96d4-11e1-9199-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{972d3197-96d4-11e1-9199-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{972d319b-96d4-11e1-9199-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{972d319b-96d4-11e1-9199-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{a9b9151f-6dc7-11e1-810d-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{a9b9151f-6dc7-11e1-810d-f46d042511bc}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{a9b915a3-6dc7-11e1-810d-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{a9b915a3-6dc7-11e1-810d-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{f916a1a1-91cb-11e1-b8e9-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{f916a1a1-91cb-11e1-b8e9-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmb_lite.exe /checkApplicationPresence
O33 - MountPoints2\{f916a1aa-91cb-11e1-b8e9-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{f916a1aa-91cb-11e1-b8e9-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmb_lite.exe /checkApplicationPresence
O33 - MountPoints2\{f916a1bb-91cb-11e1-b8e9-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{f916a1bb-91cb-11e1-b8e9-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmb_lite.exe /checkApplicationPresence
O33 - MountPoints2\{f916a266-91cb-11e1-b8e9-f46d042511bc}\Shell - "" = AutoRun
O33 - MountPoints2\{f916a266-91cb-11e1-b8e9-f46d042511bc}\Shell\AutoRun\command - "" = G:\setup_vmb_lite.exe /checkApplicationPresence
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\setup_vmb_lite.exe /checkApplicationPresence
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.01.29 14:14:42 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\RM\Desktop\OTL.exe
[2013.01.29 12:11:16 | 000,000,000 | ---D | C] -- C:\Users\RM\Desktop\Is aktuell
[2013.01.25 16:34:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.01.25 16:34:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013.01.25 09:43:32 | 000,000,000 | ---D | C] -- C:\Users\RM\Desktop\Privat
[2013.01.22 20:42:08 | 000,000,000 | ---D | C] -- C:\Users\RM\Desktop\Neuer Ordner
[2013.01.17 18:44:04 | 000,000,000 | ---D | C] -- C:\Users\RM\Desktop\stick
[2013.01.14 19:15:21 | 000,000,000 | ---D | C] -- C:\Users\RM\Desktop\Alte Firefox-Daten
[2013.01.14 09:24:37 | 000,000,000 | ---D | C] -- C:\Users\RM\AppData\Roaming\Malwarebytes
[2013.01.14 09:24:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.01.14 09:24:27 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013.01.14 09:24:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013.01.14 09:24:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.01.14 09:20:53 | 000,000,000 | ---D | C] -- C:\Users\RM\Desktop\rkill
[2013.01.13 16:01:27 | 000,000,000 | ---D | C] -- C:\Users\RM\AppData\Local\{FE65F03A-7610-0FB6-92BD-A28F7195183E}
[2013.01.13 15:59:23 | 000,000,000 | ---D | C] -- C:\Users\RM\Local Settings
[2013.01.11 10:52:25 | 000,000,000 | ---D | C] -- C:\Users\RM\AppData\Roaming\Unuvus
[2013.01.11 10:52:25 | 000,000,000 | ---D | C] -- C:\Users\RM\AppData\Roaming\Ozpyki
[2013.01.11 10:52:25 | 000,000,000 | ---D | C] -- C:\Users\RM\AppData\Roaming\Fuyno
[2013.01.10 19:15:16 | 000,000,000 | ---D | C] -- C:\Users\RM\AppData\Roaming\Skype
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Users\RM\Desktop\*.tmp files -> C:\Users\RM\Desktop\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.01.29 14:37:00 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.01.29 14:14:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\RM\Desktop\OTL.exe
[2013.01.29 12:00:40 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.01.29 12:00:40 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.01.29 11:57:11 | 001,645,920 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.01.29 11:57:11 | 000,708,946 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.01.29 11:57:11 | 000,664,224 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.01.29 11:57:11 | 000,152,292 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.01.29 11:57:11 | 000,125,238 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.01.29 11:52:46 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.01.29 11:52:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.01.29 11:52:25 | 3151,839,232 | -HS- | M] () -- C:\hiberfil.sys
[2013.01.29 11:17:02 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2013.01.27 20:58:37 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013.01.27 20:58:37 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013.01.15 08:35:06 | 000,001,149 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.01.14 12:35:37 | 000,002,257 | ---- | M] () -- C:\Users\RM\Desktop\Internetbrowser.lnk
[2013.01.14 09:24:28 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.01.13 20:46:41 | 000,011,368 | -HS- | M] () -- C:\Users\RM\AppData\Local\1pb78m8n6he1l1565b3k36w7o7of8ksb88y53s63tpqg0vl
[2013.01.13 20:46:41 | 000,011,368 | -HS- | M] () -- C:\ProgramData\1pb78m8n6he1l1565b3k36w7o7of8ksb88y53s63tpqg0vl
[2013.01.01 14:41:15 | 000,213,355 | ---- | M] () -- C:\Users\RM\Desktop\Dr.MauchGesundheitsfuehrer(ueberarbeitet).pdf
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Users\RM\Desktop\*.tmp files -> C:\Users\RM\Desktop\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.01.15 08:35:06 | 000,001,161 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013.01.15 08:35:06 | 000,001,149 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.01.14 10:33:01 | 000,002,257 | ---- | C] () -- C:\Users\RM\Desktop\Internetbrowser.lnk
[2013.01.14 09:24:28 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.01.13 16:00:10 | 000,011,368 | -HS- | C] () -- C:\Users\RM\AppData\Local\1pb78m8n6he1l1565b3k36w7o7of8ksb88y53s63tpqg0vl
[2013.01.13 16:00:10 | 000,011,368 | -HS- | C] () -- C:\ProgramData\1pb78m8n6he1l1565b3k36w7o7of8ksb88y53s63tpqg0vl
[2013.01.01 14:41:15 | 000,213,355 | ---- | C] () -- C:\Users\RM\Desktop\Dr.MauchGesundheitsfuehrer(ueberarbeitet).pdf
[2012.07.30 13:16:20 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012.07.30 13:16:18 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2012.07.30 13:16:18 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012.07.30 13:16:18 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012.07.30 13:16:18 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2012.06.26 17:24:27 | 000,007,597 | ---- | C] () -- C:\Users\RM\AppData\Local\Resmon.ResmonCfg
[2012.04.29 20:07:20 | 000,000,600 | ---- | C] () -- C:\Users\RM\PUTTY.RND
[2012.03.19 22:31:16 | 000,963,912 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2012.03.19 22:31:16 | 000,261,208 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2012.03.19 22:25:58 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2012.03.19 21:21:14 | 013,212,672 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2012.01.28 10:58:44 | 000,080,896 | ---- | C] () -- C:\Windows\cadkasdeinst01.exe
[2011.12.26 20:33:22 | 000,063,488 | ---- | C] () -- C:\Windows\SysWow64\EZTW32.DLL
[2011.12.02 22:03:15 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2011.12.02 22:03:11 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011.12.02 22:03:11 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011.12.02 22:03:11 | 000,074,752 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011.11.18 23:39:50 | 001,623,814 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.04.18 14:39:56 | 000,226,364 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4
[2011.04.18 08:32:04 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2011.04.18 06:56:04 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >
         
Hier der zweite:

Code:
ATTFilter
OTL Extras logfile created on: 29.01.2013 14:45:31 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\RM\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,91 Gb Total Physical Memory | 1,49 Gb Available Physical Memory | 38,12% Memory free
7,83 Gb Paging File | 5,08 Gb Available in Paging File | 64,86% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74,52 Gb Total Space | 5,78 Gb Free Space | 7,75% Space Free | Partition Type: NTFS
Drive D: | 202,08 Gb Total Space | 194,20 Gb Free Space | 96,10% Space Free | Partition Type: NTFS
 
Computer Name: RM-PC | User Name: RM | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\Orbitdownloader\orbitdm.exe" = C:\Program Files (x86)\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
"C:\Program Files (x86)\Orbitdownloader\orbitnet.exe" = C:\Program Files (x86)\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
"C:\Program Files (x86)\Orbitdownloader\orbitdm.exe" = C:\Program Files (x86)\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
"C:\Program Files (x86)\Orbitdownloader\orbitnet.exe" = C:\Program Files (x86)\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{10A3A4C4-D535-44F7-AF03-D3842618B488}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{193A0B8A-D12B-479A-8516-A92C598EC39D}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{27AC2CAD-AB1C-4332-A409-4F1CD9CCA81C}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{2AF1705F-AF85-48EA-AC62-6A9045722076}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{36474965-0726-4862-9160-169C42B907DC}" = lport=8182 | protocol=6 | dir=in | name=java(tm) platform se binary | 
"{4D3AEA01-5F74-4810-A946-EF51A0923968}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{62077DC6-3595-4A8C-B71F-2E60387A709E}" = rport=445 | protocol=6 | dir=out | app=system | 
"{623E5DAB-14AF-4195-BE86-1D7BE781513F}" = rport=138 | protocol=17 | dir=out | app=system | 
"{65C493F4-B0B0-4958-B611-33F420E0A715}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{6CD6F138-4B18-4D3B-9D9A-841C7AEE56C4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{71BB7BA7-BC49-487E-BD90-FA5F243A8801}" = lport=139 | protocol=6 | dir=in | app=system | 
"{77C23848-550A-4CB9-B062-2182126FA7D0}" = lport=445 | protocol=6 | dir=in | app=system | 
"{78C32B9B-803C-4DAE-B40F-BCCB21720EC9}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{7DC5FD13-3197-4EBB-B38B-1BBEB882E848}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{8A7CBA76-8F44-41B4-9736-F1B8F2EFED73}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{8F10134F-DF96-4CB0-B9BD-6B062268E04A}" = lport=138 | protocol=17 | dir=in | app=system | 
"{912E66DA-5320-44F1-85AB-191FC3AFC356}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{ACD0B406-5C5E-43C3-84BB-7D8091714E14}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{B4DA49AF-BCF5-47A4-9ABB-EFC05CB19C6B}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{CABCA414-0E26-4B16-B1B4-85254EA73721}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{CF3C2DC4-9BF8-410A-AF87-7F3FBDEB2997}" = lport=5353 | protocol=17 | dir=in | name=java(tm) platform se binary | 
"{D8640F52-02EE-4243-99E4-776A7F78EF38}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{DC68C7A7-6DC5-4A52-8770-4C30D854D77D}" = rport=139 | protocol=6 | dir=out | app=system | 
"{DD6F6446-2187-4F20-B4E8-DC649E4D2DE9}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{E28487F7-BC3D-4051-A6C2-4AB6C501851C}" = rport=137 | protocol=17 | dir=out | app=system | 
"{EED2B4F5-1A33-4550-BD46-852B15BE7EA0}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{EFDB426A-F9CA-402A-84C8-11BC6DFF31F4}" = lport=137 | protocol=17 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0300B615-169B-4483-8BCB-FF21FD2CD74A}" = protocol=17 | dir=in | app=c:\windows\system32\spoolsv.exe | 
"{0397E381-FA52-48A9-BDC2-21EE4245B9FD}" = protocol=17 | dir=in | app=c:\program files\winhttrack\winhttrack.exe | 
"{04C10ED8-FDB5-44BD-800D-92C7DD9984EA}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe | 
"{06074D2A-5158-4471-8479-ED477EA4D080}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{15390B71-8B92-4531-982F-1E8E50551C8B}" = protocol=6 | dir=out | app=system | 
"{17547657-6B86-4406-B40E-A627D17735D9}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{1D414148-18EC-42A8-9A21-AF0190706D1D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{21AE3589-0D66-4CDB-9F0C-B62454DC7CBB}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe | 
"{236A3B81-8252-43B6-AA59-4884055F6B83}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{2805D3AF-A713-4BC0-9CFF-CC2E7E97DB27}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | 
"{2C1635E6-F82D-4F7D-B65B-ECA44539C723}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{355C2DD5-FCA6-41BF-96BA-A8DB72164E36}" = protocol=6 | dir=in | app=c:\users\rm\appdata\roaming\dropbox\bin\dropbox.exe | 
"{3585CF57-D31B-4272-8EEC-CF84D67C8670}" = protocol=6 | dir=in | app=c:\windows\system32\spoolsv.exe | 
"{39A6534D-0EC0-4B82-9E95-2C0CEA1DACB2}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{3C0EAD3F-B46B-42DB-B3F8-D6E61C7670DA}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{44A71846-A6AC-4D3A-8B54-FCFDAA31C643}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{4AFA5D74-4AF3-4E30-A935-B0A22EF2110E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{4F9753B3-ED17-4AB4-A276-620747193D8A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{53937A7F-D5D1-4940-8EE9-9CFC6AE2BB9D}" = protocol=17 | dir=in | app=c:\users\rm\appdata\roaming\dropbox\bin\dropbox.exe | 
"{57B397C3-F28C-4F26-8266-0EB12A989006}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{5845912F-3935-4BC5-AB6F-FFB5408830F5}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe | 
"{61721674-CD00-439D-82A8-F03109D3DB8E}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{6240CC34-D9E5-4C4B-9899-1FF1E1C48339}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | 
"{636DDF34-7E72-47A0-ACA0-CA9F00C856FD}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{6C3418A2-9C10-4F12-B9C4-C3B10C88E932}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{82FF8CF1-1300-46A4-BC19-27A599870711}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{877177A9-7479-4764-95FF-2C9E2EB95467}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{88FD23AA-2BDE-4DF9-8E83-E84E56CE3F78}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe | 
"{8A0303D6-17CB-4D72-907C-AA8C13172CFA}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe | 
"{942CFB45-04A7-4EA5-BDCC-06A661F4FB17}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9C19C7BD-7181-4FE4-9590-60650A41737F}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{A69626F2-B999-43FD-9635-94287B551B04}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{A6967408-1452-475D-948B-E1EDDF1D0388}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{AA850C36-363D-401D-A2C0-EB961B19B81D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{B19B8A51-4417-40FF-A666-CF46742E0018}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{B45231CB-DF91-4CA1-B1E3-12743B236541}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{BACE5DF8-6775-4D0E-BE92-77AE836ADC08}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{C65EE8EB-6D14-4F76-86DF-DA4908E4B07A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{CEA5FCCC-A822-40BB-B4AB-EE6848FC99DB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D39EFB5B-3ECC-4192-8D3A-3A39CACB0CCC}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{F15BD83D-6DCD-4B71-8223-BD245A7900BA}" = protocol=6 | dir=in | app=c:\program files\winhttrack\winhttrack.exe | 
"{F63F869B-ECC7-4A51-BBDF-8DFFA23D709B}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe | 
"{FD5DABCB-325E-41AF-9ABB-67A3B34ABFDF}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"TCP Query User{12203E37-1961-4BC4-9F0C-8BA4FFCC29D6}C:\program files (x86)\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files (x86)\orbitdownloader\orbitnet.exe | 
"TCP Query User{154B98D6-F124-40D0-A843-3A87D2382025}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | 
"TCP Query User{193B6079-DD5A-44A5-80C3-136568B22ABE}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"TCP Query User{23D61310-2780-43E7-8DB5-8F2CE067B0DC}C:\users\rm\appdata\roaming\fuyno\okred.exe" = protocol=6 | dir=in | app=c:\users\rm\appdata\roaming\fuyno\okred.exe | 
"TCP Query User{2BBF0BBC-6474-4404-90C8-8D1EFE3454F8}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{3BA5E084-44D9-4D65-81D0-7F3F8E982F19}C:\users\rm\appdata\local\temp\rar$ex06.304\u1203.exe" = protocol=6 | dir=in | app=c:\users\rm\appdata\local\temp\rar$ex06.304\u1203.exe | 
"TCP Query User{52B88726-61B8-4BA9-8024-7116601602D0}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe | 
"TCP Query User{646B8E91-1DAC-4E72-9C28-C83096FBF535}C:\program files (x86)\nimbuzz\nimbuzz.exe" = protocol=6 | dir=in | app=c:\program files (x86)\nimbuzz\nimbuzz.exe | 
"TCP Query User{69C77E88-6C9D-4802-80E1-944C655853D0}C:\windows\syswow64\svchost.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\svchost.exe | 
"TCP Query User{8A524C66-5EB0-492B-B5F2-1E4E21A63F2D}C:\users\rm\appdata\roaming\fuyno\okred.exe" = protocol=6 | dir=in | app=c:\users\rm\appdata\roaming\fuyno\okred.exe | 
"TCP Query User{8AA05044-3D7A-4AA2-A831-C064C14D385F}C:\program files (x86)\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files (x86)\orbitdownloader\orbitnet.exe | 
"TCP Query User{91C53FB9-06A9-46E5-89F7-EC40F8E8F09F}C:\program files\winhttrack\winhttrack.exe" = protocol=6 | dir=in | app=c:\program files\winhttrack\winhttrack.exe | 
"TCP Query User{949B491D-0EE4-4E96-B9E0-92C4E8BB93ED}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe | 
"TCP Query User{DFB9EDB9-5086-4228-A8FD-997C296BDA4F}C:\windows\syswow64\svchost.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\svchost.exe | 
"TCP Query User{F39E1DAB-B41D-45B5-B131-9B7BA4880C78}C:\users\rm\appdata\local\temp\rar$ex50.600\u1203.exe" = protocol=6 | dir=in | app=c:\users\rm\appdata\local\temp\rar$ex50.600\u1203.exe | 
"UDP Query User{078179D4-7D55-436C-A53F-5FF53C7F1627}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{144DD26E-6243-4982-8838-0235B2FA2A7C}C:\program files (x86)\nimbuzz\nimbuzz.exe" = protocol=17 | dir=in | app=c:\program files (x86)\nimbuzz\nimbuzz.exe | 
"UDP Query User{40373981-24C3-43D4-B6A9-DB7A9D7224C4}C:\program files (x86)\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files (x86)\orbitdownloader\orbitnet.exe | 
"UDP Query User{56F785AD-FA4C-4E7C-80BD-3CFE1D2BF6AC}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe | 
"UDP Query User{59578A1A-11AA-472E-A41E-7CE8D56054E2}C:\users\rm\appdata\local\temp\rar$ex50.600\u1203.exe" = protocol=17 | dir=in | app=c:\users\rm\appdata\local\temp\rar$ex50.600\u1203.exe | 
"UDP Query User{6E72BE20-DC5D-4676-87AC-8D344A4066E3}C:\program files\winhttrack\winhttrack.exe" = protocol=17 | dir=in | app=c:\program files\winhttrack\winhttrack.exe | 
"UDP Query User{7A110688-FA36-4DC4-876F-A17E168A5220}C:\users\rm\appdata\local\temp\rar$ex06.304\u1203.exe" = protocol=17 | dir=in | app=c:\users\rm\appdata\local\temp\rar$ex06.304\u1203.exe | 
"UDP Query User{7E9F986C-4FF0-4D28-89EA-098CF0C3B583}C:\windows\syswow64\svchost.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\svchost.exe | 
"UDP Query User{81A9B80C-5B54-4DF8-99A8-22108BFA9CF7}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"UDP Query User{85E3A0CF-0411-4A18-A534-3B5737063F13}C:\program files (x86)\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files (x86)\orbitdownloader\orbitnet.exe | 
"UDP Query User{BE1D029A-AB08-4599-9FBA-0D1EC03D09AF}C:\users\rm\appdata\roaming\fuyno\okred.exe" = protocol=17 | dir=in | app=c:\users\rm\appdata\roaming\fuyno\okred.exe | 
"UDP Query User{BE8FDBCF-BF76-4619-AB80-C160AA29D27B}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe | 
"UDP Query User{C13957CC-02A6-4237-8FF9-0EC81C516204}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | 
"UDP Query User{C989CC7F-ED0E-4300-B3D7-32955EF37631}C:\windows\syswow64\svchost.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\svchost.exe | 
"UDP Query User{F0BAF490-E670-4F27-8172-0FE051AFB8C5}C:\users\rm\appdata\roaming\fuyno\okred.exe" = protocol=17 | dir=in | app=c:\users\rm\appdata\roaming\fuyno\okred.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{26A24AE4-039D-4CA4-87B4-2F86417007FF}" = Java 7 Update 7 (64-bit)
"{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}" = Paint.NET v3.5.10
"{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile-Gerätecenter
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6E206106-BD80-4D56-8F74-FE43AA1C7160}" = Nitro PDF Reader 2
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010
"{90140000-006D-0407-1000-0000000FF1CE}" = Microsoft Office Klick-und-Los 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Titanium Internet Security
"{ABBD4BA9-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Titanium Internet Security
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 266.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 266.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.18
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C788B026-20BD-4E96-B698-533F1D6C5013}" = 64 Bit HP CIO Components Installer
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Elantech" = ETDWare PS/2-X64 8.0.5.0_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"WinHTTrack Website Copier_is1" = WinHTTrack Website Copier 3.45-3 (x64)
"WinRAR archiver" = WinRAR 4.01 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}" = Sonic Focus
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{229D6185-BD7E-494B-A73B-C5215BE0690E}" = HPLJUT
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 9
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{2FB1052B-2F3D-48CE-A65D-006240516ECE}_is1" = Office 2010 Trial Extender
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{33286280-8617-11E1-8FF6-B8AC6F97B88E}" = Google Earth Plug-in
"{341697D8-9923-445E-B42A-529E5A99CB7A}" = syncables desktop SE
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{38253529-D97D-4901-AE53-5CC9736D3A2E}" = ASUS AI Recovery
"{4006E354-3D24-49BA-A36F-7EB75D50D575}" = hppLaserJetService
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{4422D20B-F530-4E65-8504-31396C9BC066}" = Google SketchUp 8
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{62BBB2F0-E220-4821-A564-730807D2C34D}" = Realtek USB 2.0 Reader Driver
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C29152D-3FF9-43B2-84E4-9B35FC0BF5C2}" = Vodafone Mobile Broadband
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74280B5D-A0AF-46c5-9C85-D9EA078262F1}" = HP LaserJet Professional M1530 MFP Series
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{807B5468-0F57-4844-B9A6-E5E5E888F419}" = pdfforge Toolbar v4.8
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{865E1902-B6FE-4AF0-B61D-A82EBC53569E}" = hppSendFaxM1530
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0407-1000-0000000FF1CE}_Office14.SingleImage_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{9112FEA9-0F64-453C-BEA5-9A782F87EDAA}" = hppTLBXFXM1530
"{915B91B8-4001-4DCA-805C-177B29215643}" = PHP 5.3.10
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack
"{A1D53426-D6F3-4886-A72B-E1A8C82259E9}" = hppM1530LaserJetService
"{A3A18593-62BE-4AE1-AF3F-E35179CF042E}" = hpzTLBXFX
"{A6E92CAB-9E63-46DC-8ABF-0CAFF7B7CD02}" = eXPert PDF 6
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch
"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update
"{B2AA0F22-E167-4C4A-BAE2-E0025028E61B}" = HPLaserJetHelp_LearnCenter
"{B480904D-F73F-4673-B034-8A5F492C9184}" = Nuance PDF Reader
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B8B4D43C-EAA0-4EEC-B93E-D4D012316286}" = Free DWG Viewer 7.1
"{BF6379E6-9936-46B0-B6AC-C56EE3987D2E}" = inSSIDer
"{C05002F1-06F8-4A15-B6F8-E4DC655C28AA}" = HP LJ M1530 MFP Series HP Scan
"{C462F75B-9A35-4A84-AE52-E8C9112AAE87}" = hppFaxUtilityM1530
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
"{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1" = Game Park Console
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}" = ASUS Live Update
"{FD575F8B-6141-455A-8AE5-F2D2E08520FC}" = hppFaxDrvM1530
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"ASUS K3 Series ScreenSaver" = ASUS K3 Series ScreenSaver
"Asus Vibe2.0" = AsusVibe2.0
"ASUS WebStorage" = ASUS WebStorage
"Avira AntiVir Desktop" = Avira Free Antivirus
"DAEMON Tools Lite" = DAEMON Tools Lite
"FLV Player" = FLV Player 2.0 (build 25)
"Google Chrome" = Google Chrome
"Governor of Poker" = Governor of Poker
"Hotel Dash Suite Success" = Hotel Dash Suite Success
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"Jewel Quest 3" = Jewel Quest 3
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 8.0.0
"Luxor 3" = Luxor 3
"Mahjongg dimensions" = Mahjongg dimensions
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100
"Mozilla Firefox 18.0.1 (x86 de)" = Mozilla Firefox 18.0.1 (x86 de)
"Nimbuzz" = Nimbuzz 2.3.0
"Office14.Click2Run" = Microsoft Office Klick-und-Los 2010
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Orbit_is1" = Orbit Downloader
"PC Wizard 2012_is1" = PC Wizard 2012.2.0
"PDF Editor 3" = PDF Editor 3
"Plants vs Zombies" = Plants vs Zombies
"Revo Uninstaller" = Revo Uninstaller 1.93
"STvcard gold_is1" = STvcard 3.0.0 gold
"Visitenkarten in 2 Minuten" = Visitenkarten in 2 Minuten
"VLC media player" = VLC media player 1.1.11
"World of Goo" = World of Goo
"XMedia Recode" = XMedia Recode 3.0.5.6
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 29.01.2013 08:26:51 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 08:35:12 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 08:35:12 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 08:55:53 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 08:55:54 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 08:55:54 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 09:15:27 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 09:17:07 | Computer Name = RM-PC | Source = Application Hang | ID = 1002
Description = Programm OTL.exe, Version 3.2.69.0 kann nicht mehr unter Windows ausgeführt
 werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 2378    Startzeit:
 01cdfe22b5c731a2    Endzeit: 0    Anwendungspfad: C:\Users\RM\Desktop\OTL.exe    Berichts-ID:
   
 
Error - 29.01.2013 09:17:20 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 09:43:01 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
Error - 29.01.2013 09:43:02 | Computer Name = RM-PC | Source = Microsoft-Windows-CAPI2 | ID = 256
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
 werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und
 nicht lesbar.  .
 
[ System Events ]
Error - 29.01.2013 09:43:01 | Computer Name = RM-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:   %%-2140993535
 
Error - 29.01.2013 09:43:01 | Computer Name = RM-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
Error - 29.01.2013 09:43:01 | Computer Name = RM-PC | Source = PNRPSvc | ID = 102
Description = 
 
Error - 29.01.2013 09:43:01 | Computer Name = RM-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
Error - 29.01.2013 09:43:01 | Computer Name = RM-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:   %%-2140993535
 
Error - 29.01.2013 09:43:01 | Computer Name = RM-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "OS" den Befehl "chkdsk" aus.
 
Error - 29.01.2013 09:43:02 | Computer Name = RM-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "OS" den Befehl "chkdsk" aus.
 
Error - 29.01.2013 09:48:40 | Computer Name = RM-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "OS" den Befehl "chkdsk" aus.
 
Error - 29.01.2013 09:48:40 | Computer Name = RM-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "C:" den Befehl "chkdsk" aus.
 
Error - 29.01.2013 09:48:40 | Computer Name = RM-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "C:" den Befehl "chkdsk" aus.
 
 
< End of report >
         

Alt 29.01.2013, 15:13   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Bitte nun Logs mit GMER (<<< klick für Anleitung) und aswMBR (Anleitung etwas weiter unten) erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim zweiten Mal nicht will, lass es einfach weg und führ nur aswMBR aus.

aswMBR-Download => aswMBR.exe - speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 29.01.2013, 16:52   #9
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Hallo,

also hier erst mal der GMER-LOG.
Ich weiß leider nicht ob das so richtig ist, denn es ist ziemlich lang.
Bin eigentlich so vorgegangen wie beschrieben.
Falls ich was falsch gemacht haben sollte, bitte einfach kurz mitteilen.
Habe das ganze aufteilen müssen, da es nicht mit einem Mal geht.

Der aswMBR Log kommt auch gleich.

Code:
ATTFilter
GMER 2.0.18454 - hxxp://www.gmer.net
Rootkit scan 2013-01-29 16:40:57
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD32 rev.01.0 298,09GB
Running: gmer_2.0.18454.exe; Driver: C:\Users\RM\AppData\Local\Temp\pxldrpoc.sys


---- User code sections - GMER 2.0 ----

.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17       0000000076281401 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17         0000000076281419 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17       0000000076281431 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42       000000007628144a 2 bytes [28, 76]
.text  ...                                                                                                                                                        * 9
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17          00000000762814dd 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17   00000000762814f5 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17          000000007628150d 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17   0000000076281525 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17         000000007628153d 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17              0000000076281555 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17       000000007628156d 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17         0000000076281585 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17            000000007628159d 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17         00000000762815b5 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17       00000000762815cd 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20   00000000762816b2 2 bytes [28, 76]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3660] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31   00000000762816bd 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                      0000000076281401 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                        0000000076281419 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                      0000000076281431 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                      000000007628144a 2 bytes [28, 76]
.text  ...                                                                                                                                                        * 9
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                         00000000762814dd 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                  00000000762814f5 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                         000000007628150d 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                  0000000076281525 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                        000000007628153d 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                             0000000076281555 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                      000000007628156d 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                        0000000076281585 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                           000000007628159d 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                        00000000762815b5 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                      00000000762815cd 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                  00000000762816b2 2 bytes [28, 76]
.text  C:\Windows\AsScrPro.exe[3808] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                  00000000762816bd 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\SysWOW64\ntdll.dll!DbgUiRemoteBreakin                                                        000000007778f85a 1 byte [C3]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll!getJit + 32                                    0000000074319348 4 bytes [C8, 10, 01, 10]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                 0000000076281401 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                   0000000076281419 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                 0000000076281431 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                 000000007628144a 2 bytes [28, 76]
.text  ...                                                                                                                                                        * 9
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                    00000000762814dd 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                             00000000762814f5 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                    000000007628150d 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                             0000000076281525 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                   000000007628153d 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                        0000000076281555 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                 000000007628156d 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                   0000000076281585 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                      000000007628159d 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                   00000000762815b5 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                 00000000762815cd 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                             00000000762816b2 2 bytes [28, 76]
.text  D:\Kies\External\FirmwareUpdate\KiesPDLR.exe[4596] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                             00000000762816bd 2 bytes [28, 76]

---- Files - GMER 2.0 ----

File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2560656_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2560656_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2560656~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2562937_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2562937_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2562937~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2563227_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2563227_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2563227~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2564958_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511455_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2515325_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2515325_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2515325~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2518867_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2518867~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2522422_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2522422_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2563227~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12113 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat                             22895 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2567680~31bf3856ad364e35~amd64~~6.1.1.2.cat                             42832 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2570947~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2572076~31bf3856ad364e35~amd64~~6.1.1.0.cat                             22280 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2579686~31bf3856ad364e35~amd64~~6.1.1.1.cat                             11840 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2585542~31bf3856ad364e35~amd64~~6.1.1.3.cat                             15232 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2588516~31bf3856ad364e35~amd64~~6.1.1.1.cat                             33037 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2604114~31bf3856ad364e35~amd64~~6.1.1.5.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2604115~31bf3856ad364e35~amd64~~6.1.1.3.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2617657~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2620712~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat                             11792 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2631813~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2632503~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2541014~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544521_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544521_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544521~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544893_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544893_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2545698_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2545698_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2545698~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2547666_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2547666_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2547666~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2552343_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2552343_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2552343~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2556532_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2556532_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506014_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506014~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506212_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506212_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506212~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506928_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506928_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506928~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2507618_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2560656~31bf3856ad364e35~amd64~~6.1.1.2.cat                             14740 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2562937~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2563227~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12401 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat                             27553 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2567680~31bf3856ad364e35~amd64~~6.1.1.2.cat                             32489 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2579686~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2585542~31bf3856ad364e35~amd64~~6.1.1.3.cat                             29887 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2586448~31bf3856ad364e35~amd64~~6.1.1.2.cat                             37653 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2598845~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2603229~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2604114~31bf3856ad364e35~amd64~~6.1.1.5.cat                             25292 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2604115~31bf3856ad364e35~amd64~~6.1.1.3.cat                             25292 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2598845_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2598845~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2603229_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2603229_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2603229~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2604114_RTM~31bf3856ad364e35~amd64~~6.1.1.5.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2604114~31bf3856ad364e35~amd64~~6.1.1.5.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2604115_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2604115~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2617657_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2617657_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2617657~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2505438~31bf3856ad364e35~amd64~~6.1.1.1.cat                             15336 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2506928~31bf3856ad364e35~amd64~~6.1.2.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2508272~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2511250~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2515325~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11228 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2518867~31bf3856ad364e35~amd64~~6.1.1.0.cat                             25792 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2522422~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2529073~31bf3856ad364e35~amd64~~6.1.1.1.cat                             16392 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2532531~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11260 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2536275~31bf3856ad364e35~amd64~~6.1.1.2.cat                             12984 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2539634~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2541014~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2507618~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2508272_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2508272_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2508272~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2509553_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2509553_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2509553~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2510531_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2510531_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2510531~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511250_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511250_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511250~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2529073_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2529073_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2529073~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2532531_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2532531_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2532531~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2533552_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2533552~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2535512_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2535512~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2536275_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2536275_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2536275~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2536276_RTM~31bf3856ad364e35~amd64~~6.1.2.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2536276_SP1~31bf3856ad364e35~amd64~~6.1.2.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2536276~31bf3856ad364e35~amd64~~6.1.2.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2539634_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2539634~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2541014_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2510531~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2511250~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat                             14740 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2518867~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2522422~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2529073~31bf3856ad364e35~amd64~~6.1.1.1.cat                             16392 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2533552~31bf3856ad364e35~amd64~~6.1.1.1.cat                             34277 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2535512~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2536276~31bf3856ad364e35~amd64~~6.1.2.1.cat                             12984 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2539634~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat                             32816 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2545698~31bf3856ad364e35~amd64~~6.1.1.3.cat                             14676 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2552343~31bf3856ad364e35~amd64~~6.1.1.0.cat                             16881 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2572076_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2572076~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2579686_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2579686_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2579686~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2584146_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2584146_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2585542_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2585542_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2585542~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2586448_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2586448_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2586448~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2588516_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2588516_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2588516~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2572076~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2579686~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2585542~31bf3856ad364e35~amd64~~6.1.1.3.cat                             29887 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2604114~31bf3856ad364e35~amd64~~6.1.1.5.cat                             24020 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2604115~31bf3856ad364e35~amd64~~6.1.1.3.cat                             24020 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2617657~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2620712~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2639417~31bf3856ad364e35~amd64~~6.1.1.3.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat                             30329 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2522422~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2529073~31bf3856ad364e35~amd64~~6.1.1.1.cat                             16392 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2560656~31bf3856ad364e35~amd64~~6.1.1.2.cat                             18848 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2567680~31bf3856ad364e35~amd64~~6.1.1.2.cat                             35661 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2570947~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2579686~31bf3856ad364e35~amd64~~6.1.1.1.cat                             11840 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2586448~31bf3856ad364e35~amd64~~6.1.1.2.cat                             110212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2604114~31bf3856ad364e35~amd64~~6.1.1.5.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2604115~31bf3856ad364e35~amd64~~6.1.1.3.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2618444~31bf3856ad364e35~amd64~~6.1.1.2.cat                             110212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2620704~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2620712_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2620712_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2620712~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2621440_RTM~31bf3856ad364e35~amd64~~6.1.1.5.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2621440_SP1~31bf3856ad364e35~amd64~~6.1.1.5.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2631813_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2631813_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2567680_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2567680_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2567680~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2570791_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2570791_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2570947_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2570947_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2631813~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2641690_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2654428_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656411_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660075~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2677070_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2688338_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2699779_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709715_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2719985_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974332_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975053_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2547666~31bf3856ad364e35~amd64~~6.1.1.0.cat                             28432 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2562937~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2570947~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2572076~31bf3856ad364e35~amd64~~6.1.1.0.cat                             22280 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2579686~31bf3856ad364e35~amd64~~6.1.1.1.cat                             11840 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2598845~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2603229~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2604114~31bf3856ad364e35~amd64~~6.1.1.5.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2604115~31bf3856ad364e35~amd64~~6.1.1.3.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2618451~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat                             14740 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2522422~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2529073~31bf3856ad364e35~amd64~~6.1.1.1.cat                             16392 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2536276~31bf3856ad364e35~amd64~~6.1.2.1.cat                             12984 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat                             32816 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2547666~31bf3856ad364e35~amd64~~6.1.1.0.cat                             28432 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2570947~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2586448~31bf3856ad364e35~amd64~~6.1.1.2.cat                             489563 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2588516~31bf3856ad364e35~amd64~~6.1.1.1.cat                             32749 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2604114~31bf3856ad364e35~amd64~~6.1.1.5.cat                             27532 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2604115~31bf3856ad364e35~amd64~~6.1.1.3.cat                             27532 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~tr-TR~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~uk-UA~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~zh-CN~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~zh-HK~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~zh-TW~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~~6.1.7601.17514.cat                         7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB977074_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB977074~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB977863_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB977863~31bf3856ad364e35~amd64~~6.1.1.2.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978207_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978207~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978251_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978251~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~fi-FI~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~fr-FR~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~he-IL~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~hr-HR~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~hu-HU~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~it-IT~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~ja-JP~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~ko-KR~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~lt-LT~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~lv-LV~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~nl-NL~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~pl-PL~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~pt-BR~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~pt-PT~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~ro-RO~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~ru-RU~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~sk-SK~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~sl-SI~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~sr-LATN-CS~6.1.7601.17514.cat               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~sv-SE~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2281679~31bf3856ad364e35~amd64~~6.1.1.0.cat                             32015 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2284742~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2300535~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11518 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat                             17350 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2347290~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2362765~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2378111~31bf3856ad364e35~amd64~~6.1.1.1.cat                             35059 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2387149~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10906 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2387530~31bf3856ad364e35~amd64~~6.1.1.1.cat                             0 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2416471~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2423089~31bf3856ad364e35~amd64~~6.1.1.0.cat                             13870 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11422 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2447568~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1.cat                             116430 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0.cat                             116430 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2467659~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2479943~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2483614~31bf3856ad364e35~amd64~~6.1.1.1.cat                             19154 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2484033~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11228 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2488113~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10068 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB975053~31bf3856ad364e35~amd64~~6.1.1.1.cat                              10522 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB975364~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10522 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB975560~31bf3856ad364e35~amd64~~6.1.1.0.cat                              24544 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB975599~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB976002~31bf3856ad364e35~amd64~~6.1.1.14.cat                             10320 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB976264~31bf3856ad364e35~amd64~~6.1.2.0.cat                              9144 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB976422~31bf3856ad364e35~amd64~~6.1.1.0.cat                              12294 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB976902~31bf3856ad364e35~amd64~~6.1.1.17514.cat                          34277 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB977863~31bf3856ad364e35~amd64~~6.1.1.2.cat                              18222 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB978258~31bf3856ad364e35~amd64~~6.1.1.0.cat                              11928 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB978262~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9144 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB978535~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB978637~31bf3856ad364e35~amd64~~6.1.1.1.cat                              12140 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB979099~31bf3856ad364e35~amd64~~6.1.1.0.cat                              23900 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB979309~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10321 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB979688~31bf3856ad364e35~amd64~~6.1.1.3.cat                              9153 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB979900~31bf3856ad364e35~amd64~~6.1.1.0.cat                              31150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB979916~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9450 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB980195~31bf3856ad364e35~amd64~~6.1.1.3.cat                              9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB980302~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10336 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB981078~31bf3856ad364e35~amd64~~6.1.1.3.cat                              10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB981287~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9153 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                              15932 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB982132~31bf3856ad364e35~amd64~~6.1.1.3.cat                              10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB982214~31bf3856ad364e35~amd64~~6.1.1.3.cat                              12665 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB982519~31bf3856ad364e35~amd64~~6.1.1.1.cat                              9144 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB982632~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10339 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB982664~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10329 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB982665~31bf3856ad364e35~amd64~~6.1.1.2.cat                              9746 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_201_for_KB2677070~31bf3856ad364e35~amd64~~6.1.1.2.cat                           27081 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_217_for_KB2677070~31bf3856ad364e35~amd64~~6.1.1.2.cat                           30609 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_222_for_KB2677070~31bf3856ad364e35~amd64~~6.1.1.2.cat                           9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_223_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                           9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_223_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                           9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_237_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                           9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_237_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                           9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_253_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                           10068 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_253_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                           10052 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_260_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                           9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_260_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                           9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2305420~31bf3856ad364e35~amd64~~6.1.1.3.cat                             14402 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2385678~31bf3856ad364e35~amd64~~6.1.1.0.cat                             13170 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2388210~31bf3856ad364e35~amd64~~6.1.1.1.cat                             13210 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2393802~31bf3856ad364e35~amd64~~6.1.1.1.cat                             24647 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2416471~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2436673~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8554 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1.cat                             8272 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0.cat                             8272 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2475792~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2479628~31bf3856ad364e35~amd64~~6.1.1.4.cat                             8554 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2479943~31bf3856ad364e35~amd64~~6.1.1.0.cat                             17704 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2484033~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11228 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2485376~31bf3856ad364e35~amd64~~6.1.1.2.cat                             12383 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2487426~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8554 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2488113~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10068 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                             13532 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2503665~31bf3856ad364e35~amd64~~6.1.1.0.cat                             34905 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2506014~31bf3856ad364e35~amd64~~6.1.1.0.cat                             20668 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2506212~31bf3856ad364e35~amd64~~6.1.1.2.cat                             24076 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2507618~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12705 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB976264~31bf3856ad364e35~amd64~~6.1.2.0.cat                              13220 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB976325~31bf3856ad364e35~amd64~~6.1.1.1.cat                              197333 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB976662~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10522 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB976749~31bf3856ad364e35~amd64~~6.1.1.0.cat                              192049 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB977074~31bf3856ad364e35~amd64~~6.1.1.1.cat                              11117 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB977863~31bf3856ad364e35~amd64~~6.1.1.2.cat                              21058 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB978251~31bf3856ad364e35~amd64~~6.1.1.3.cat                              10916 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB978258~31bf3856ad364e35~amd64~~6.1.1.0.cat                              11943 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB978542~31bf3856ad364e35~amd64~~6.1.1.1.cat                              11821 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB978601~31bf3856ad364e35~amd64~~6.1.1.1.cat                              11694 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2388210~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat                             14192 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2544521~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2620704~31bf3856ad364e35~amd64~~6.1.1.0.cat                             13016 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2667402~31bf3856ad364e35~amd64~~6.1.2.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB974476~31bf3856ad364e35~amd64~~6.1.2.0.cat                              11943 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB978886~31bf3856ad364e35~amd64~~6.1.1.0.cat                              32443 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB979482~31bf3856ad364e35~amd64~~6.1.1.1.cat                              9160 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB979538~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9160 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB979559~31bf3856ad364e35~amd64~~6.1.1.3.cat                              8557 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB979683~31bf3856ad364e35~amd64~~6.1.1.1.cat                              10223 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB979687~31bf3856ad364e35~amd64~~6.1.1.2.cat                              11521 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB979688~31bf3856ad364e35~amd64~~6.1.1.3.cat                              9153 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB979916~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9450 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB980218~31bf3856ad364e35~amd64~~6.1.1.2.cat                              12386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB980232~31bf3856ad364e35~amd64~~6.1.1.0.cat                              12672 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB980436~31bf3856ad364e35~amd64~~6.1.1.2.cat                              9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB980846~31bf3856ad364e35~amd64~~6.1.1.0.cat                              24633 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB981078~31bf3856ad364e35~amd64~~6.1.1.3.cat                              18029 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB981208~31bf3856ad364e35~amd64~~6.1.2.0.cat                              10916 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB981332~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10336 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB981852~31bf3856ad364e35~amd64~~6.1.1.1.cat                              10210 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB981957~31bf3856ad364e35~amd64~~6.1.1.2.cat                              8554 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB982110~31bf3856ad364e35~amd64~~6.1.1.0.cat                              16416 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB982519~31bf3856ad364e35~amd64~~6.1.1.1.cat                              13223 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB983590~31bf3856ad364e35~amd64~~6.1.1.0.cat                              21958 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2160329~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9153 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2183461~31bf3856ad364e35~amd64~~6.1.1.2.cat                             74725 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2207566~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2272691~31bf3856ad364e35~amd64~~6.1.1.1.cat                             12098 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2284742~31bf3856ad364e35~amd64~~6.1.1.0.cat                             30222 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2296011~31bf3856ad364e35~amd64~~6.1.1.0.cat                             52803 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2296199~31bf3856ad364e35~amd64~~6.1.1.1.cat                             12575 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2305420~31bf3856ad364e35~amd64~~6.1.1.3.cat                             19686 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2385678~31bf3856ad364e35~amd64~~6.1.1.0.cat                             14178 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2388210~31bf3856ad364e35~amd64~~6.1.1.1.cat                             12098 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2393802~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10210 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.cat                             37179 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2416471~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat                             13580 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2425227~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2436673~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1.cat                             28498 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0.cat                             28498 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2467023~31bf3856ad364e35~amd64~~6.1.1.1.cat                             14466 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2479628~31bf3856ad364e35~amd64~~6.1.1.4.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2485376~31bf3856ad364e35~amd64~~6.1.1.2.cat                             12575 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2487426~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat                             14192 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12420 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2505438~31bf3856ad364e35~amd64~~6.1.1.1.cat                             15336 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2506212~31bf3856ad364e35~amd64~~6.1.1.2.cat                             26380 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2506928~31bf3856ad364e35~amd64~~6.1.2.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2507618~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12897 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2508272~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2510531~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2515325~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11228 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2518867~31bf3856ad364e35~amd64~~6.1.1.0.cat                             24036 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2532531~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11260 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2536275~31bf3856ad364e35~amd64~~6.1.1.2.cat                             12984 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2541014~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2544521~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2545698~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10036 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2547666~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2552343~31bf3856ad364e35~amd64~~6.1.1.0.cat                             18773 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB978542~31bf3856ad364e35~amd64~~6.1.1.1.cat                              32797 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB978601~31bf3856ad364e35~amd64~~6.1.1.1.cat                              12333 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB979482~31bf3856ad364e35~amd64~~6.1.1.1.cat                              9163 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB979538~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9368 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB979559~31bf3856ad364e35~amd64~~6.1.1.3.cat                              9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB979683~31bf3856ad364e35~amd64~~6.1.1.1.cat                              9395 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB979687~31bf3856ad364e35~amd64~~6.1.1.2.cat                              52407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB980182~31bf3856ad364e35~amd64~~6.1.1.1.cat                              74735 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB980218~31bf3856ad364e35~amd64~~6.1.1.2.cat                              12578 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB980436~31bf3856ad364e35~amd64~~6.1.1.2.cat                              9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB981078~31bf3856ad364e35~amd64~~6.1.1.3.cat                              26710 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB981852~31bf3856ad364e35~amd64~~6.1.1.1.cat                              9382 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB981957~31bf3856ad364e35~amd64~~6.1.1.2.cat                              9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB982018~31bf3856ad364e35~amd64~~6.1.1.0.cat                              15610 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                              15932 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB982110~31bf3856ad364e35~amd64~~6.1.1.0.cat                              19869 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB982381~31bf3856ad364e35~amd64~~6.1.1.3.cat                              74722 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB982519~31bf3856ad364e35~amd64~~6.1.1.1.cat                              12108 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB982799~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10351 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB2677070~31bf3856ad364e35~amd64~~6.1.1.2.cat                            9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB2158563~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                            9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB976098~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB979306~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9160 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2183461~31bf3856ad364e35~amd64~~6.1.1.2.cat                             499369 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB980408~31bf3856ad364e35~amd64~~6.1.1.0.cat                              342897 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB982799~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10159 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2360131~31bf3856ad364e35~amd64~~6.1.1.3.cat                             37107 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2475792~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2556532~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9704 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2617657~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2656355~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB978207~31bf3856ad364e35~amd64~~6.1.1.1.cat                              74684 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB980846~31bf3856ad364e35~amd64~~6.1.1.0.cat                              29940 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB2443685~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB981793~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2393802~31bf3856ad364e35~amd64~~6.1.1.1.cat                             31963 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.cat                             109594 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2416471~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12984 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat                             49736 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10906 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0.cat                             10906 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2467023~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10906 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2484033~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11228 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2488113~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10068 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB982381~31bf3856ad364e35~amd64~~6.1.1.3.cat                              494649 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                            10052 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_55_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_56_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                            13532 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB2158563~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB2443685~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                            12420 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                            9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB2677070~31bf3856ad364e35~amd64~~6.1.1.2.cat                            27081 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB979306~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9160 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB981793~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2360131~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2416471~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12984 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1.cat                             11502 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0.cat                             11502 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2467023~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10906 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2479943~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2484033~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11228 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2488113~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10068 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2503665~31bf3856ad364e35~amd64~~6.1.1.0.cat                             34545 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2509553~31bf3856ad364e35~amd64~~6.1.1.2.cat                             20781 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2360131~31bf3856ad364e35~amd64~~6.1.1.3.cat                             512449 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2393802~31bf3856ad364e35~amd64~~6.1.1.1.cat                             8554 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.cat                             514333 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1.cat                             11800 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0.cat                             11800 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2467023~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2479628~31bf3856ad364e35~amd64~~6.1.1.4.cat                             8554 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2479943~31bf3856ad364e35~amd64~~6.1.1.0.cat                             17704 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2482017~31bf3856ad364e35~amd64~~6.1.1.1.cat                             37179 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2485376~31bf3856ad364e35~amd64~~6.1.1.2.cat                             12383 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2506212~31bf3856ad364e35~amd64~~6.1.1.2.cat                             24076 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2507618~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12705 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2552343~31bf3856ad364e35~amd64~~6.1.1.0.cat                             16881 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2556532~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10532 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2563227~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12113 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat                             22895 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2579686~31bf3856ad364e35~amd64~~6.1.1.1.cat                             15400 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2585542~31bf3856ad364e35~amd64~~6.1.1.3.cat                             15232 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2604114~31bf3856ad364e35~amd64~~6.1.1.5.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2604115~31bf3856ad364e35~amd64~~6.1.1.3.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2617657~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2620712~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_73_for_KB981793~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9746 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_78_for_KB2677070~31bf3856ad364e35~amd64~~6.1.1.2.cat                            9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_78_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                             15932 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2425227~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1.cat                             52623 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0.cat                             52623 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2467023~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2475792~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2479628~31bf3856ad364e35~amd64~~6.1.1.4.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2482017~31bf3856ad364e35~amd64~~6.1.1.1.cat                             109762 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2485376~31bf3856ad364e35~amd64~~6.1.1.2.cat                             12575 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2506014~31bf3856ad364e35~amd64~~6.1.1.0.cat                             20668 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2506212~31bf3856ad364e35~amd64~~6.1.1.2.cat                             26380 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2507618~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12897 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2510531~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2539634~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2547666~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2552343~31bf3856ad364e35~amd64~~6.1.1.0.cat                             18773 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2556532~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9704 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2563227~31bf3856ad364e35~amd64~~6.1.1.0.cat                             12401 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2641690_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2641690~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2644615_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2644615_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2645640_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2645640_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2645640~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2653956_RTM~31bf3856ad364e35~amd64~~6.1.1.5.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2653956_SP1~31bf3856ad364e35~amd64~~6.1.1.5.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2653956~31bf3856ad364e35~amd64~~6.1.1.5.cat                               7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2654428_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2511250~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB982018~31bf3856ad364e35~amd64~~6.1.1.0.cat                              64406 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB976098~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2511250~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2618444~31bf3856ad364e35~amd64~~6.1.1.2.cat                             489731 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2305420~31bf3856ad364e35~amd64~~6.1.1.3.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2487426~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8554 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2631813~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_73_for_KB979306~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9756 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2487426~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat                             27553 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2653956~31bf3856ad364e35~amd64~~6.1.1.5.cat                             22847 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2709162~31bf3856ad364e35~amd64~~6.1.1.2.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                             15932 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_85_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2388210~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9730 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2467023~31bf3856ad364e35~amd64~~6.1.1.1.cat                             97898 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2475792~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2618444~31bf3856ad364e35~amd64~~6.1.1.2.cat                             37653 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2618451~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2620704~31bf3856ad364e35~amd64~~6.1.1.0.cat                             13016 bytes
         

Alt 29.01.2013, 16:54   #10
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Hier nun der Zweite Teil von Dreien des GMER-Log:

Code:
ATTFilter
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2620712~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat                             11808 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2639417~31bf3856ad364e35~amd64~~6.1.1.3.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat                             30185 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2653956~31bf3856ad364e35~amd64~~6.1.1.5.cat                             22847 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat                             17421 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2655992~31bf3856ad364e35~amd64~~6.1.1.3.cat                             28935 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10052 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2510531~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2518867~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11228 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2545698~31bf3856ad364e35~amd64~~6.1.1.3.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2560656~31bf3856ad364e35~amd64~~6.1.1.2.cat                             14740 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2567680~31bf3856ad364e35~amd64~~6.1.1.2.cat                             42832 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat                             11792 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2676562~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10516 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat                             13564 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                              9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_94_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                             9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2467023~31bf3856ad364e35~amd64~~6.1.1.1.cat                             292873 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2158563_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2158563~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2160329_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2160329~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2183461_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2183461~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2207566_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2207566~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2249857~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2272691_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2272691~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2281679_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2281679~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2284742_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2284742~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2286198_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2286198~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2296011~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2296199_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2296199~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2300535_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2300535~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2305420_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2305420~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2345886_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2347290~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2360131_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2360131~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2362765_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2362765~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2378111_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2378111~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2385678_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2385678~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2387149~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2387530_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2387530~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2388210_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2388210~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2393802_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2393802~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2416400_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2416471_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2416471~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2419640_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2423089_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2423089~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2425227_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2425227~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2436673_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2436673~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2442962_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2443685_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2443685~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2447568_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2482017~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10326 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2482017~31bf3856ad364e35~amd64~~6.1.1.1.cat                             514309 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2120976_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2249857_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2296011_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2347290_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2387149_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2425227_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2447568~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2454826_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2454826_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2467023_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2467023~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2467659_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2467659~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2475792_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2475792~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2479628_RTM~31bf3856ad364e35~amd64~~6.1.1.4.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2479628_SP1~31bf3856ad364e35~amd64~~6.1.1.4.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2479628~31bf3856ad364e35~amd64~~6.1.1.4.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2479943_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2479943_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2479943~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2482017_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2482017_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2482017~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2483614_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2483614~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2484033_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2484033_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2484033~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2485376_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2485376_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2487426_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2487426_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2487426~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2488113_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2488113_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2488113~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2491683_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2491683_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2492386_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2492386_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2503665_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2503665_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2503665~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2505438_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2505438_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2505438~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974332~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974431_RTM~31bf3856ad364e35~amd64~~6.1.1.5.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974431~31bf3856ad364e35~amd64~~6.1.1.5.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974455_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974455~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974476_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                            7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974476~31bf3856ad364e35~amd64~~6.1.2.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974571_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB974571~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975053~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975364_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975364~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975467_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975467~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975496_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                            7694 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975496~31bf3856ad364e35~amd64~~6.1.2.0.cat                                7697 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975560_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975560~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975599_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB975599~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976002_RTM~31bf3856ad364e35~amd64~~6.1.1.14.cat                           7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976002~31bf3856ad364e35~amd64~~6.1.1.14.cat                               7407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976098~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976264_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                            7407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976264~31bf3856ad364e35~amd64~~6.1.2.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976325_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976325~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976422_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976422~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976662_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976662~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976749~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976902_RTM~31bf3856ad364e35~amd64~~6.1.1.17514.cat                        7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976902~31bf3856ad364e35~amd64~~6.1.1.17514.cat                            7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976932~31bf3856ad364e35~amd64~~6.1.1.17514.cat                            7684 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~ar-SA~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~bg-BG~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~cs-CZ~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~da-DK~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~el-GR~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~es-ES~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978258~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978262_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978262~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978506_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978506~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978535_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978535~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978542_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7697 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978542~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7697 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978601_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978601~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978637~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978886_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978886~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979099_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979099~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979306_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979306~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979309_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7389 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979309~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7389 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2485376~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2506014_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2507618_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511455_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2522422~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2541014_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2556532~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2564958_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2570947~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2598845_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2618444_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979482~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979538_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979538~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979559_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979559~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979683_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979683~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979687_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979687~31bf3856ad364e35~amd64~~6.1.1.2.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979688~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979900_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7697 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979900~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7694 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979916_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7694 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979916~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7694 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980182_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980182~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980195_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980195~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980218_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980218~31bf3856ad364e35~amd64~~6.1.1.2.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980232_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980232~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980302~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980408_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980408~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980436_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980436~31bf3856ad364e35~amd64~~6.1.1.2.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980846_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980846~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981078_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981078~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981208~31bf3856ad364e35~amd64~~6.1.2.0.cat                                7407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981287_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981287~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981332_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981332~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981793_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981793~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981852_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981852~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981957~31bf3856ad364e35~amd64~~6.1.1.2.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982018_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982018_RTM~31bf3856ad364e35~amd64~~6.1.3.2.cat                            7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982018_SP1~31bf3856ad364e35~amd64~~6.1.3.2.cat                            7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982018~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                                7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982110_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982110~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982132_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982132~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982214_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982214~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982381~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982519_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982519~31bf3856ad364e35~amd64~~6.1.1.1.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982632_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982632~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982664_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982664~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982665_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982665~31bf3856ad364e35~amd64~~6.1.1.2.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982799_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982799~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB983590_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB983590~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr002.cat                                                                            24741 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr003.cat                                                                            12569 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr004.cat                                                                            12271 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr005.cat                                                                            16621 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr006.cat                                                                            14301 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr007.cat                                                                            11386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr008.cat                                                                            8776 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr009.cat                                                                            12851 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr00a.cat                                                                            9081 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca003.cat                                                                            10523 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00a.cat                                                                            16185 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00b.cat                                                                            23202 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00c.cat                                                                            18247 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00d.cat                                                                            20310 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2640148~31bf3856ad364e35~amd64~~6.1.2.0.cat                             344008 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2641690~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat                             24977 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2645640~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2653956~31bf3856ad364e35~amd64~~6.1.1.5.cat                             11683 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat                             18093 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2655992~31bf3856ad364e35~amd64~~6.1.1.3.cat                             14281 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2656355~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2656356~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2656372~31bf3856ad364e35~amd64~~6.1.2.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2656373~31bf3856ad364e35~amd64~~6.1.2.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2659262~31bf3856ad364e35~amd64~~6.1.1.2.cat                             51188 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat                             43320 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2676562~31bf3856ad364e35~amd64~~6.1.1.3.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2679255~31bf3856ad364e35~amd64~~6.1.2.0.cat                             10194 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2685939~31bf3856ad364e35~amd64~~6.1.1.2.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2686830~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2686831~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2688338~31bf3856ad364e35~amd64~~6.1.1.2.cat                             32989 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat   35290 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7600.16385.cat        20943 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7601.17514.cat        21346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientProfessional~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat  36748 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientProfessional~31bf3856ad364e35~amd64~~6.1.7600.16385.cat       21523 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientProfessional~31bf3856ad364e35~amd64~~6.1.7601.17514.cat       21926 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981208_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                            7407 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB981957_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB982381_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00e.cat                                                                            15276 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00g.cat                                                                            12844 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm005.cat                                                                            9355 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx008.cat                                                                            9050 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnok702.cat                                                                            8783 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnxx002.cat                                                                            9340 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat   33727 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientProfessional~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat  34895 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat      35483 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256.cat                    9738 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-CoreComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat              8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB978506~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10537 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB978637~31bf3856ad364e35~amd64~~6.1.1.1.cat                              10948 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2360131~31bf3856ad364e35~amd64~~6.1.1.3.cat                             109522 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB981793~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9153 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2475792_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2620704_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976098_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB980302_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00f.cat                                                                            19431 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00g.cat                                                                            22204 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00h.cat                                                                            15574 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00i.cat                                                                            17361 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00x.cat                                                                            19634 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00y.cat                                                                            8470 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00z.cat                                                                            19431 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep002.cat                                                                            8776 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep003.cat                                                                            17564 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep004.cat                                                                            19320 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep005.cat                                                                            7898 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00a.cat                                                                            16499 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00b.cat                                                                            32933 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00c.cat                                                                            17499 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00d.cat                                                                            15477 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00e.cat                                                                            15783 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00f.cat                                                                            12859 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00l.cat                                                                            43209 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep704.cat                                                                            9677 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnfx002.cat                                                                            11668 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnge001.cat                                                                            10837 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt002.cat                                                                            20085 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt003.cat                                                                            20085 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt004.cat                                                                            20085 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp002.cat                                                                            62391 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp003.cat                                                                            77664 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp004.cat                                                                            25465 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp005.cat                                                                            36236 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin002.cat                                                                            18055 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin003.cat                                                                            18055 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin004.cat                                                                            18055 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm002.cat                                                                            12835 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm003.cat                                                                            13118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm004.cat                                                                            8470 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky002.cat                                                                            16315 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky003.cat                                                                            16606 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky004.cat                                                                            13134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky005.cat                                                                            9645 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky006.cat                                                                            12545 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky007.cat                                                                            12561 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky008.cat                                                                            13415 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky009.cat                                                                            12836 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle002.cat                                                                            20955 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle003.cat                                                                            20955 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle004.cat                                                                            20955 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx002.cat                                                                            11370 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx003.cat                                                                            12545 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx004.cat                                                                            8775 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx005.cat                                                                            10805 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx006.cat                                                                            8180 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx007.cat                                                                            10515 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx009.cat                                                                            8180 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00a.cat                                                                            8195 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00b.cat                                                                            10515 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00c.cat                                                                            8485 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00d.cat                                                                            9050 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00e.cat                                                                            8180 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00v.cat                                                                            8486 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00w.cat                                                                            7913 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00x.cat                                                                            8501 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00y.cat                                                                            9089 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00z.cat                                                                            7913 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnms002.cat                                                                            9403 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr002.cat                                                                            20085 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr003.cat                                                                            20085 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr004.cat                                                                            20085 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnod002.cat                                                                            11103 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnok002.cat                                                                            20101 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc002.cat                                                                            8195 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc003.cat                                                                            8195 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc004.cat                                                                            8195 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc005.cat                                                                            19795 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc006.cat                                                                            19780 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc007.cat                                                                            19795 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00a.cat                                                                            9959 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00b.cat                                                                            13690 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00c.cat                                                                            8791 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsa002.cat                                                                            26207 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsh002.cat                                                                            18933 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnso002.cat                                                                            11104 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv002.cat                                                                            20360 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv003.cat                                                                            20375 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv004.cat                                                                            20360 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnts002.cat                                                                            9355 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnts003.cat                                                                            9653 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat      37336 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~~6.1.7600.16385.cat           21798 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~~6.1.7601.17514.cat           22216 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\windows-legacy-whql.cat                                                                 351022 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows7SP1-KB976933~31bf3856ad364e35~amd64~~6.1.1.17514.cat                            7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2632503~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2639417~31bf3856ad364e35~amd64~~6.1.1.3.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat                             24977 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2653956~31bf3856ad364e35~amd64~~6.1.1.5.cat                             11683 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat                             18093 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2655992~31bf3856ad364e35~amd64~~6.1.1.3.cat                             14281 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2659262~31bf3856ad364e35~amd64~~6.1.1.2.cat                             51188 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2679255~31bf3856ad364e35~amd64~~6.1.2.0.cat                             10194 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2709162~31bf3856ad364e35~amd64~~6.1.1.2.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2709715~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10516 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2718523~31bf3856ad364e35~amd64~~6.1.1.2.cat                             8538 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB974431~31bf3856ad364e35~amd64~~6.1.1.5.cat                              29886 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_73_for_KB2158563~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9749 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_73_for_KB2443685~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9746 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_73_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                            10068 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_73_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                            10052 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_73_for_KB2677070~31bf3856ad364e35~amd64~~6.1.1.2.cat                            30681 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_73_for_KB976098~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9942 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat           9142 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat                10334 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-MiniLP~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat            7386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256.cat               7386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat                   7386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~~7.6.7600.256.cat                        7386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-AdmComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat          8256 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-AdmComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat               8256 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-CoreComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat         8264 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-MiniLP~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat           7386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256.cat              7386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-UIComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat           8264 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-UIComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat                8264 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat                  7386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~~7.6.7600.256.cat                       7386 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2688338_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2688338~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2690533_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2690533_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2690533~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2691442_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2691442_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2691442~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2695962_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2695962_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2695962~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2698365_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2698365_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2699779_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2655992_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2655992_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2655992~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656355_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656355~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656356_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656356~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656372_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656372~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656373_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656373~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656410_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656410~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2556532~31bf3856ad364e35~amd64~~6.1.1.1.cat                             8876 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2560656~31bf3856ad364e35~amd64~~6.1.1.2.cat                             18848 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2567680~31bf3856ad364e35~amd64~~6.1.1.2.cat                             32105 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat                             12396 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2676562~31bf3856ad364e35~amd64~~6.1.1.3.cat                             11444 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2679255~31bf3856ad364e35~amd64~~6.1.2.0.cat                             8538 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2709715~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2032276_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2032276~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2079403_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2079403~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7394 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2656356~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2658846~31bf3856ad364e35~amd64~~6.1.1.4.cat                             15932 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2659262~31bf3856ad364e35~amd64~~6.1.1.2.cat                             64292 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2660075~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11792 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat                             51020 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2667402~31bf3856ad364e35~amd64~~6.1.2.0.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2676562~31bf3856ad364e35~amd64~~6.1.1.3.cat                             10516 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2679255~31bf3856ad364e35~amd64~~6.1.2.0.cat                             9366 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2695962~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2709162~31bf3856ad364e35~amd64~~6.1.1.2.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2709630~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2709715~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9688 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2718523~31bf3856ad364e35~amd64~~6.1.1.2.cat                             9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB972270~31bf3856ad364e35~amd64~~6.1.1.0.cat                              10522 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB974431~31bf3856ad364e35~amd64~~6.1.1.5.cat                              14034 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB974571~31bf3856ad364e35~amd64~~6.1.1.1.cat                              10462 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB975467~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB976264~31bf3856ad364e35~amd64~~6.1.2.0.cat                              12111 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB977074~31bf3856ad364e35~amd64~~6.1.1.1.cat                              9361 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2691442~31bf3856ad364e35~amd64~~6.1.1.3.cat                             329132 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2699988~31bf3856ad364e35~amd64~~9.4.1.0.cat                             777918 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2709162~31bf3856ad364e35~amd64~~6.1.1.2.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2709715~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10516 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2718523~31bf3856ad364e35~amd64~~6.1.1.2.cat                             8538 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2718704~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2719177~31bf3856ad364e35~amd64~~9.4.1.0.cat                             777918 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2719985~31bf3856ad364e35~amd64~~6.1.1.0.cat                             15948 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB972270~31bf3856ad364e35~amd64~~6.1.1.0.cat                              12579 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB974332~31bf3856ad364e35~amd64~~6.1.1.1.cat                              12294 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB974431~31bf3856ad364e35~amd64~~6.1.1.5.cat                              12579 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB974455~31bf3856ad364e35~amd64~~6.1.1.0.cat                              197333 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB974476~31bf3856ad364e35~amd64~~6.1.2.0.cat                              11928 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB974571~31bf3856ad364e35~amd64~~6.1.1.1.cat                              10318 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB975467~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB975496~31bf3856ad364e35~amd64~~6.1.2.0.cat                              10046 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2709715~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9688 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2718523~31bf3856ad364e35~amd64~~6.1.1.2.cat                             9134 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB979916~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9450 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB983590~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB2158563~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB2443685~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB2570791~31bf3856ad364e35~amd64~~6.1.1.1.cat                            9472 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                            9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB976098~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB979306~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9160 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2632503_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2632503_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2632503~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2633952_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2633952_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2639417_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2639417_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2639417~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2640148_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2640148_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2640148~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2618444_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2618444~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2618451_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2618451_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2618451~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2619339_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2619339_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2620704_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2631813~31bf3856ad364e35~amd64~~6.1.1.1.cat                             13564 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2656355~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2656356~31bf3856ad364e35~amd64~~6.1.1.1.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2656372~31bf3856ad364e35~amd64~~6.1.2.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2656373~31bf3856ad364e35~amd64~~6.1.2.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2656410~31bf3856ad364e35~amd64~~6.1.1.2.cat                             32912 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2656411~31bf3856ad364e35~amd64~~6.1.1.1.cat                             32912 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2658846~31bf3856ad364e35~amd64~~6.1.1.4.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2660075~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11792 bytes
         

Alt 29.01.2013, 16:56   #11
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Und nun der Rest des GMER-LOG:

Code:
ATTFilter
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat                             15400 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB982018~31bf3856ad364e35~amd64~~6.1.1.0.cat                              15610 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB983590~31bf3856ad364e35~amd64~~6.1.1.0.cat                              21958 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_27_for_KB982018~31bf3856ad364e35~amd64~~6.1.3.2.cat                             66631 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2296199~31bf3856ad364e35~amd64~~6.1.1.1.cat                             12383 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2482017~31bf3856ad364e35~amd64~~6.1.1.1.cat                             188925 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2509553~31bf3856ad364e35~amd64~~6.1.1.2.cat                             20781 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2556532~31bf3856ad364e35~amd64~~6.1.1.1.cat                             10532 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2639417~31bf3856ad364e35~amd64~~6.1.1.3.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2690533~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10036 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB975599~31bf3856ad364e35~amd64~~6.1.1.0.cat                              9361 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2631813~31bf3856ad364e35~amd64~~6.1.1.1.cat                             13564 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2640148~31bf3856ad364e35~amd64~~6.1.2.0.cat                             343960 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2645640~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2656355~31bf3856ad364e35~amd64~~6.1.1.1.cat                             12968 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2656356~31bf3856ad364e35~amd64~~6.1.1.1.cat                             12968 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat                             43320 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2667402~31bf3856ad364e35~amd64~~6.1.2.0.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2685939~31bf3856ad364e35~amd64~~6.1.1.2.cat                             10044 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2688338~31bf3856ad364e35~amd64~~6.1.1.2.cat                             32701 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2690533~31bf3856ad364e35~amd64~~6.1.1.0.cat                             10036 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2691442~31bf3856ad364e35~amd64~~6.1.1.3.cat                             329084 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2718704~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2719985~31bf3856ad364e35~amd64~~6.1.1.0.cat                             15948 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB974431~31bf3856ad364e35~amd64~~6.1.1.5.cat                              11102 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_62_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                            10052 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660649_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660649_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2667402_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2667402_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2667402~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2676562_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2676562_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2676562~31bf3856ad364e35~amd64~~6.1.1.3.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_28_for_KB2492386~31bf3856ad364e35~amd64~~6.1.1.0.cat                            10052 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2079403~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11518 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0.cat                             52626 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2160329~31bf3856ad364e35~amd64~~6.1.1.0.cat                             8554 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2207566~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9150 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2272691~31bf3856ad364e35~amd64~~6.1.1.1.cat                             13213 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2284742~31bf3856ad364e35~amd64~~6.1.1.0.cat                             18026 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2286198~31bf3856ad364e35~amd64~~6.1.1.1.cat                             328706 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2296011~31bf3856ad364e35~amd64~~6.1.1.0.cat                             46227 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709715_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709715~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709981_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709981~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2718523_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2718523_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2718523~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2718704_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2718704_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2718704~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2719177_RTM~31bf3856ad364e35~amd64~~9.4.1.0.cat                           7414 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2719177~31bf3856ad364e35~amd64~~9.4.1.0.cat                               7414 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2641690~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2656355~31bf3856ad364e35~amd64~~6.1.1.1.cat                             12968 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2656356~31bf3856ad364e35~amd64~~6.1.1.1.cat                             12968 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2658846~31bf3856ad364e35~amd64~~6.1.1.4.cat                             11228 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat                             15400 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2676562~31bf3856ad364e35~amd64~~6.1.1.3.cat                             11444 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2685939~31bf3856ad364e35~amd64~~6.1.1.2.cat                             10648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat                             15320 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2699779~31bf3856ad364e35~amd64~~6.1.2.0.cat                             77767 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB972270~31bf3856ad364e35~amd64~~6.1.1.0.cat                              12771 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB974431~31bf3856ad364e35~amd64~~6.1.1.5.cat                              20423 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB978207~31bf3856ad364e35~amd64~~6.1.1.1.cat                              488315 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB980182~31bf3856ad364e35~amd64~~6.1.1.1.cat                              491415 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2677070_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2677070~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2679255_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2679255_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat                           7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2679255~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7378 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2685939_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2685939_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2685939~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2686830_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2686830~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2686831_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2686831~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2685939~31bf3856ad364e35~amd64~~6.1.1.2.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2686830~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2686831~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2695962~31bf3856ad364e35~amd64~~6.1.1.0.cat                             9118 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2699779~31bf3856ad364e35~amd64~~6.1.2.0.cat                             77791 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2699988~31bf3856ad364e35~amd64~~9.4.1.0.cat                             10346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2709630~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2709981~31bf3856ad364e35~amd64~~6.1.2.0.cat                             10632 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2719177~31bf3856ad364e35~amd64~~9.4.1.0.cat                             10346 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB971468~31bf3856ad364e35~amd64~~6.1.1.0.cat                              11117 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB973525~31bf3856ad364e35~amd64~~6.1.1.3.cat                              9330 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB974332~31bf3856ad364e35~amd64~~6.1.1.1.cat                              13421 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2656411~31bf3856ad364e35~amd64~~6.1.1.1.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2658846_RTM~31bf3856ad364e35~amd64~~6.1.1.4.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2658846_SP1~31bf3856ad364e35~amd64~~6.1.1.4.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2658846~31bf3856ad364e35~amd64~~6.1.1.4.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2659262_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2659262_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2659262~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660075_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660075_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976749_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~et-EE~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~nb-NO~6.1.7601.17514.cat                    7716 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~amd64~th-TH~6.1.7601.17514.cat                    7974 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978258_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB978637_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7389 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979482_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat                            7404 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979688_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7397 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2699779~31bf3856ad364e35~amd64~~6.1.2.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2699988_RTM~31bf3856ad364e35~amd64~~9.4.1.0.cat                           7414 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2699988~31bf3856ad364e35~amd64~~9.4.1.0.cat                               7414 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709162_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709162_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709162~31bf3856ad364e35~amd64~~6.1.1.2.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709630_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709630_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2709630~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat                             17421 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2655992~31bf3856ad364e35~amd64~~6.1.1.3.cat                             28935 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2656372~31bf3856ad364e35~amd64~~6.1.2.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2656373~31bf3856ad364e35~amd64~~6.1.2.0.cat                             9456 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2659262~31bf3856ad364e35~amd64~~6.1.1.2.cat                             64244 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2667402~31bf3856ad364e35~amd64~~6.1.2.0.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2676562~31bf3856ad364e35~amd64~~6.1.1.3.cat                             8860 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2679255~31bf3856ad364e35~amd64~~6.1.2.0.cat                             9366 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2686830~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2686831~31bf3856ad364e35~amd64~~6.1.1.0.cat                             11212 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat                             34088 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2719985_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat                           7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2719985~31bf3856ad364e35~amd64~~6.1.1.0.cat                               7700 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB958488~31bf3856ad364e35~amd64~~6.2.7600.16513.cat                         17648 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB971468_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB971468~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7605 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB972270_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB972270~31bf3856ad364e35~amd64~~6.1.1.0.cat                                7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB973525_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat                            7590 bytes
File   C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB973525~31bf3856ad364e35~amd64~~6.1.1.3.cat                                7605 bytes

---- EOF - GMER 2.0 ----
         

Alt 29.01.2013, 17:12   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Was ist mit aswMBR?
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 29.01.2013, 21:59   #13
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Hi,

habs jetzt geschafft. Nachfolgend der angeforderte Log:

Code:
ATTFilter
aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2013-01-29 21:56:28
-----------------------------
21:56:28.175    OS Version: Windows x64 6.1.7601 Service Pack 1
21:56:28.175    Number of processors: 4 586 0x2A07
21:56:28.175    ComputerName: RM-PC  UserName: RM
21:56:29.423    Initialize success
21:56:37.051    AVAST engine defs: 13012901
21:57:07.034    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
21:57:07.034    Disk 0 Vendor: WDC_WD32 01.0 Size: 305245MB BusType: 3
21:57:07.081    Disk 0 MBR read successfully
21:57:07.081    Disk 0 MBR scan
21:57:07.097    Disk 0 Windows 7 default MBR code
21:57:07.097    Disk 0 Partition 1 00     1C Hidd FAT32 LBA MSDOS5.0    22003 MB offset 63
21:57:07.097    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        76309 MB offset 45062325
21:57:07.112    Disk 0 Partition - 00     0F Extended LBA            206931 MB offset 201345024
21:57:07.144    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       206930 MB offset 201347072
21:57:07.159    Disk 0 scanning C:\Windows\system32\drivers
21:57:19.826    Service scanning
21:57:47.860    Modules scanning
21:57:47.860    Disk 0 trace - called modules:
21:57:48.359    
21:57:48.359    Scan finished successfully
21:58:01.120    Disk 0 MBR has been saved successfully to "C:\Users\RM\Desktop\MBR.dat"
21:58:01.120    The log file has been saved successfully to "C:\Users\RM\Desktop\aswMBR.txt"
         

Alt 29.01.2013, 22:04   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Malwarebytes Anti-Rootkit

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Entpacke das Archiv auf deinem Desktop.
  • Im neu erstellten Ordner starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 30.01.2013, 01:35   #15
rame1701
 
Trojaner: Ransom und PUM.UserWLoad - Standard

Trojaner: Ransom und PUM.UserWLoad



Ich habe Malwarebytes Anti-Rootkit zwei Mal durchlaufen lassen.
Beim ersten mal gab es zwei Funde.
Nach Cleanup und erneutem Scan scheint alles sauber zu sein.
Nachfolgend beide Logs:

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.01.0.1017
www.malwarebytes.org

Database version: v2013.01.29.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
RM :: RM-PC [administrator]

29.01.2013 23:47:18
mbar-log-2013-01-29 (23-47-18).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled: 
Objects scanned: 30672
Time elapsed: 34 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 2
HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|Load (PUM.UserWLoad) -> Data: C:\Users\RM\LOCALS~1\Temp\msvyvqy.bat -> Delete on reboot.
HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|Load (Trojan.Ransom) -> Data: C:\Users\RM\LOCALS~1\Temp\msvyvqy.bat -> Delete on reboot.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
         

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.01.0.1017
www.malwarebytes.org

Database version: v2013.01.29.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
RM :: RM-PC [administrator]

30.01.2013 01:29:13
mbar-log-2013-01-30 (01-29-13).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled: 
Objects scanned: 30652
Time elapsed: 33 minute(s), 14 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
         

Antwort

Themen zu Trojaner: Ransom und PUM.UserWLoad
administrator, anti-malware, autostart, beheben, bösartige, dateien, eingefangen, explorer, gefangen, gen, log-datei, löschen, malwarebytes, microsoft, minute, problem, rechner, registrierung, service, software, speicher, temp, troja, trojaner, version, würde



Ähnliche Themen: Trojaner: Ransom und PUM.UserWLoad


  1. PUM.UserWLoad und Trojan.Ransom kann nicht entfernt werden!
    Plagegeister aller Art und deren Bekämpfung - 13.10.2013 (19)
  2. Trojan.Ransom, Pum.userWload, PuP.Keygm.Intro
    Log-Analyse und Auswertung - 09.09.2013 (23)
  3. Windows 7 , 64Bit: Malwarebytes findet PUM.UserWLoad und Trojan.Ransom
    Log-Analyse und Auswertung - 09.09.2013 (14)
  4. WIN 7: Malwarebytes Anti-Malware meldet "PUM.UserWLoad" & "Trojan.Ransom"
    Log-Analyse und Auswertung - 04.09.2013 (21)
  5. PUM.UserWload - OLT files
    Log-Analyse und Auswertung - 26.07.2013 (7)
  6. PUM.UserWLoad & Trojan.Ransom - "schrauber"
    Lob, Kritik und Wünsche - 15.07.2013 (0)
  7. PUM.UserWLoad & Trojan.Ransom von Malwarebytes in Reg gefunden
    Log-Analyse und Auswertung - 14.07.2013 (13)
  8. versuch mit OTL trojaner PUM.UserWLoad und Trojan.Agent zu entfernen.. hoffe habe alles richtig gemacht
    Log-Analyse und Auswertung - 23.06.2013 (3)
  9. Backdoor-Trojaner Bublik.B, Worm Gamarue.I: PUM.UserWLoad entfernen etc.
    Log-Analyse und Auswertung - 17.04.2013 (19)
  10. PUM.UserWLoad, trojan.ransom gefunden, auf externer Festplatte nur noch Verknüpfungen seitdem, die jetzt unzugänglich sind
    Plagegeister aller Art und deren Bekämpfung - 04.04.2013 (24)
  11. Bei einem Virencheck pum.userwload und trojan.ransom gefunden
    Plagegeister aller Art und deren Bekämpfung - 25.03.2013 (9)
  12. PUM.UserWLoad
    Plagegeister aller Art und deren Bekämpfung - 14.03.2013 (8)
  13. pum.userwload, trojan.agent und trojan.ransom gefunden
    Plagegeister aller Art und deren Bekämpfung - 16.02.2013 (10)
  14. trojan.ransom und PUM-UserWLoad
    Plagegeister aller Art und deren Bekämpfung - 03.02.2013 (21)
  15. Nochmal: (PUM.UserWLoad)
    Plagegeister aller Art und deren Bekämpfung - 23.12.2012 (9)
  16. BKA-Virus, PUM.UserWLoad, Trojan.Delf, Trojan.Ransom.Gen, alles auf einmal
    Log-Analyse und Auswertung - 18.11.2012 (23)
  17. TR/Ransom.294912 (Antivir) / Trojan-Ransom.Win32.Gimemo.vyp (Kaspersky)
    Log-Analyse und Auswertung - 20.07.2012 (18)

Zum Thema Trojaner: Ransom und PUM.UserWLoad - Hallo, ich würde mich sehr freuen, wenn Ihr mir bei meinem Problem helfen könntet. Ich habe mir leider was auf meinem Rechner eingefangen: Laut Malwarebytes sind es die Trojaner Ransom - Trojaner: Ransom und PUM.UserWLoad...
Archiv
Du betrachtest: Trojaner: Ransom und PUM.UserWLoad auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.