verdächtige E-Mail erhalten, Zip-Datei im Anhang geöffnet

Carrab17 · 28.01.2013, 14:19

Hallo,

ich bin neu hier. Letzte Woche Mittwoch habe habe eine E-Mail von einem, mir unbekannten, Absender erhalten. Inhalt war eine Zahlungsaufforderung für eine von mir nie bestellte Lieferung.
An die E-Mail war eine Zip-Datei angehängt, die ich dummerweise geöffnet habe. Danach ist nichts passiert. Auch mein Antivirenprogramm (AVG Anti-Virus Free Edition 2013) hat nichts gemeldet. Hab meinen Laptop zugeklappt (ihn noch nicht runtergefahren) und ihn danach erstmal nicht mehr verwendet.

Am Sonntag hat mein Vater meinen Rechner neugestartet und von einer Avira
Professional Rescue CD gebooted. Das Programm hat weder infizierte, noch verdächtige Dateien gefunden.

Über einen zweiten Rechner habe ich im Internet nach ähnlichen Problemen recherchiert und dabei gelesen, dass einige Trojaner, die durch solche Zip-Dateien verschickt werden können, sich auch von professionellen Virenprogrammen schwer finden lassen.
Ich bin mir nicht sicher, ob sich durch das Öffnen der Datei überhaupt ein Trojaner oder ein Virus auf meinem Computer installiert hat. Es ist seitdem nichts Außergewöhnliches passiert, aber ich will sicher sein, dass mein Rechner auch wirklich nicht infiziert ist, bevor ich ihn wieder normal nutze und externe Geräte anschließe.

Kann mir bitte jemand helfen? VG

markusg · 28.01.2013, 15:00

hi
bitte solche Mails immer an uns weiterleiten.
wie das geht, steht in meiner signatur.
Avira logs mit funden posten, lizenzangaben bitte streichen.
welches Betriebssystem?

Carrab17 · 28.01.2013, 15:06

Hallo,

ich hatte Ihnen gestern schon eine E-Mail deswegen geschickt. In ihrer Antwort schrieben Sie:

Zitat:

"die Mail wird uns nichts nützen, da sie bereits einige Tage alt ist sind die dort verwendeten server bereits offline.
was ich anbieten kann, eröffne ein Thema bei uns [...]"

Mein Betriebssystem ist Windows 7.

Hier die Avira logs:

configuration file:/etc/avira/scancl.conf

WARNING: (Unexpected end of file)/media/Devices/sda2/User/***/AppData/Roaming/Move/Networks/uninstall.exe

WARNING: (Error opening file.(Input/Output error))/media/Devices/sda2/ProgramData/AVG2013/Chjw/884624644624556a.dat

WARNING: (Error opening file.(Input/Output error))/media/Devices/sda2/ProgramData/AVG2013/Chjw/ec8e215e8e212296.dat

WARNING: (File is encrypted)/media/Devices/sda2/ProgramData/AVG2013/Ids/config/quarantinedList.zip

WARNING: (File is encrypted)/media/Devices/sda2/ProgramData/AVG2013/Ids/config/quarantinedList.zip.bak

Directories: 26712
Archives: 1557
Files: 437483
Infected: 0
Warnings: 5
Suspicious: 0

Bei der ersten Warnung hab ich meinen Namen durch drei Sternchen ersetzt.

markusg · 29.01.2013, 15:55

Hi,
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

Starte bitte die
OTL.exe
.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Kopiere nun den Inhalt in die
Textbox.

Code:

ATTFilter

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Kopiere
nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

Carrab17 · 29.01.2013, 16:32

hier sind die Logs:

OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 29.01.2013 16:09:29 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = E:\Daten\Carmen\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,87 Gb Total Physical Memory | 1,11 Gb Available Physical Memory | 59,48% Memory free
3,75 Gb Paging File | 2,26 Gb Available in Paging File | 60,32% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74,89 Gb Total Space | 43,22 Gb Free Space | 57,71% Space Free | Partition Type: NTFS
Drive D: | 7,20 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive E: | 72,68 Gb Total Space | 19,83 Gb Free Space | 27,28% Space Free | Partition Type: NTFS
 
Computer Name: CARMEN | User Name: Carmen | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.01.29 16:03:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- E:\Daten\Carmen\Desktop\OTL.exe
PRC - [2013.01.15 13:52:12 | 001,101,488 | ---- | M] () -- C:\Programme\AVG Secure Search\vprot.exe
PRC - [2013.01.15 13:52:12 | 000,945,328 | ---- | M] () -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe
PRC - [2012.12.11 03:52:44 | 003,147,384 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG2013\avgui.exe
PRC - [2012.11.23 03:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012.11.15 23:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG2013\avgidsagent.exe
PRC - [2012.10.30 04:59:56 | 000,726,648 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG2013\avgrsx.exe
PRC - [2012.10.22 13:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG2013\avgwdsvc.exe
PRC - [2012.10.22 13:04:32 | 001,116,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG2013\avgnsx.exe
PRC - [2012.10.22 13:03:52 | 000,796,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG2013\avgemcx.exe
PRC - [2012.10.22 13:03:46 | 000,440,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG2013\avgcsrvx.exe
PRC - [2011.08.08 13:43:58 | 000,690,072 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2011.08.08 13:36:58 | 000,087,960 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2011.05.09 16:06:02 | 002,750,376 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2011.04.01 17:41:44 | 000,152,496 | ---- | M] (TOSHIBA CORPORATION) -- C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.26 23:55:42 | 000,648,032 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\PMB\PMBVolumeWatcher.exe
PRC - [2010.11.26 23:55:42 | 000,398,176 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\PMB\PMBDeviceInfoProvider.exe
PRC - [2010.11.20 04:17:58 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2010.11.20 04:17:42 | 001,174,016 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Sidebar\sidebar.exe
PRC - [2010.09.06 16:18:00 | 000,746,384 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2009.07.14 02:14:45 | 000,396,800 | -HS- | M] (Microsoft Corporation) -- C:\Programme\Windows Mail\WinMail.exe
PRC - [2009.05.15 11:36:50 | 000,251,184 | R--- | M] (BUFFALO INC.) -- C:\Programme\BUFFALO\NASNAVI\nassvc.exe
PRC - [2009.05.15 11:36:48 | 001,553,800 | R--- | M] (BUFFALO INC.) -- C:\Programme\BUFFALO\NASNAVI\NasNavi.exe
PRC - [2009.05.15 11:36:48 | 000,206,128 | R--- | M] (BUFFALO INC.) -- C:\Programme\BUFFALO\NASNAVI\nassche.exe
PRC - [2009.04.07 12:53:32 | 000,030,440 | ---- | M] () -- C:\Programme\dcmsvc\dcmsvc.exe
PRC - [2008.02.22 04:25:21 | 000,144,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Java\jre1.6.0_05\bin\jusched.exe
PRC - [2007.09.26 16:15:22 | 000,245,760 | ---- | M] (Dossin-Brade GbR) -- C:\Windows\System32\studnet\studnet.exe
PRC - [2007.08.15 14:31:50 | 000,102,400 | ---- | M] (Synaptics, Inc.) -- C:\Programme\Synaptics\SynTP\SynTPStart.exe
PRC - [2007.08.15 13:58:02 | 000,200,704 | ---- | M] (Synaptics, Inc.) -- C:\Programme\Synaptics\SynTP\SynToshiba.exe
PRC - [2007.08.09 18:26:42 | 004,702,208 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007.08.01 13:39:18 | 000,077,824 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
PRC - [2007.06.27 11:28:40 | 000,436,088 | ---- | M] () -- C:\Programme\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
PRC - [2007.06.18 09:51:10 | 001,507,328 | ---- | M] (Interactive Digital Media) -- C:\Programme\IDM\Desktop SMS\DesktopSMS.exe
PRC - [2007.06.11 12:10:04 | 004,762,624 | ---- | M] () -- C:\Programme\Camera Assistant Software for Toshiba\CEC_MAIN.exe
PRC - [2007.05.22 16:32:52 | 000,538,744 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\FlashCards\TCrdMain.exe
PRC - [2007.05.22 10:50:02 | 000,413,696 | ---- | M] (Chicony) -- C:\Programme\Camera Assistant Software for Toshiba\traybar.exe
PRC - [2007.04.03 16:52:22 | 000,509,496 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\SmoothView\SmoothView.exe
PRC - [2007.03.29 10:39:00 | 000,427,576 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\Power Saver\TosCoSrv.exe
PRC - [2007.03.29 10:39:00 | 000,411,192 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\Power Saver\TPwrMain.exe
PRC - [2007.01.10 12:45:02 | 000,554,616 | ---- | M] (Symantec Corporation) -- C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2007.01.09 22:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) -- C:\Programme\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2007.01.05 01:19:28 | 000,047,712 | ---- | M] (Symantec Corporation) -- C:\Programme\Common Files\Symantec Shared\AppCore\AppSvc32.exe
PRC - [2007.01.04 22:38:08 | 000,024,652 | ---- | M] (Viewpoint Corporation) -- C:\Programme\Viewpoint\Common\ViewpointService.exe
PRC - [2006.11.14 19:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Programme\TOSHIBA\ConfigFree\CFSvcs.exe
PRC - [2006.08.23 15:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Programme\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2006.05.25 18:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.01.15 13:52:12 | 001,101,488 | ---- | M] () -- C:\Programme\AVG Secure Search\vprot.exe
MOD - [2013.01.15 13:52:12 | 000,156,848 | ---- | M] () -- C:\Programme\Common Files\AVG Secure Search\SiteSafetyInstaller\14.0.1\SiteSafety.dll
MOD - [2013.01.11 23:49:20 | 000,519,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\TCrdMain\a6536128c5f017a0352454c14966e855\TCrdMain.ni.exe
MOD - [2013.01.11 13:21:18 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d7d20811a7ce7cc589153648cbb1ce5c\PresentationFramework.Aero.ni.dll
MOD - [2013.01.11 13:19:50 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5f3769db958cc666dc98cb7748a84ac9\PresentationFramework.ni.dll
MOD - [2013.01.11 13:18:18 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\865d2bf19a7af7fab8660a42d92550fe\System.Windows.Forms.ni.dll
MOD - [2013.01.11 13:18:13 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll
MOD - [2013.01.11 13:17:52 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\45e239d35a2c14b841dd4ef2c186ff2f\PresentationCore.ni.dll
MOD - [2013.01.11 13:17:13 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cf827fe7bc99d9bcf0ba3621054ef527\WindowsBase.ni.dll
MOD - [2013.01.11 13:16:51 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll
MOD - [2013.01.11 13:16:32 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll
MOD - [2013.01.11 13:16:07 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll
MOD - [2010.11.13 01:02:21 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009.07.14 09:47:20 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2009.04.07 12:53:32 | 000,030,440 | ---- | M] () -- C:\Programme\dcmsvc\dcmsvc.exe
MOD - [2007.08.29 15:11:16 | 000,958,464 | ---- | M] () -- C:\Programme\TOSHIBA\FlashCards\de\TCrdMain.resources.dll
MOD - [2007.06.27 11:28:40 | 000,436,088 | ---- | M] () -- C:\Programme\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
MOD - [2007.06.11 12:10:04 | 004,762,624 | ---- | M] () -- C:\Programme\Camera Assistant Software for Toshiba\CEC_MAIN.exe
MOD - [2007.01.18 08:30:00 | 000,094,208 | ---- | M] () -- C:\Programme\IDM\Desktop SMS\oehook.dll
MOD - [2006.11.08 19:08:30 | 000,009,216 | ---- | M] () -- C:\Programme\TOSHIBA\PCDiag\NotifyPCD.dll
MOD - [2006.10.10 10:44:16 | 000,009,728 | ---- | M] () -- C:\Programme\TOSHIBA\TOSHIBA Assist\NotifyX.dll
MOD - [2006.10.07 11:57:04 | 000,053,248 | ---- | M] () -- C:\Programme\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll
MOD - [2003.07.11 02:09:28 | 000,048,192 | ---- | M] () -- C:\Programme\Common Files\microsoft shared\Web Folders\1031\NSEXTINT.DLL
 
 
========== Services (SafeList) ==========
 
SRV - File not found [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2013.01.15 13:52:12 | 000,945,328 | ---- | M] () [Auto | Running] -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe -- (vToolbarUpdater14.0.1)
SRV - [2013.01.08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.11.15 23:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Programme\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012.10.22 13:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Programme\AVG\AVG2013\avgwdsvc.exe -- (avgwd)
SRV - [2011.04.01 17:41:44 | 000,152,496 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Running] -- C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2010.11.26 23:55:42 | 000,398,176 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Programme\Sony\PMB\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider)
SRV - [2010.11.20 04:17:58 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2009.08.06 22:32:20 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.06.22 03:13:57 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009.05.15 11:36:50 | 000,251,184 | R--- | M] (BUFFALO INC.) [Auto | Running] -- C:\Programme\BUFFALO\NASNAVI\nassvc.exe -- (NasPmService)
SRV - [2007.10.25 15:27:54 | 000,266,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc)
SRV - [2007.10.18 11:31:54 | 000,098,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\Messenger\usnsvc.exe -- (usnjsvc)
SRV - [2007.09.14 09:20:20 | 001,174,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)
SRV - [2007.08.01 13:39:18 | 000,077,824 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Programme\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
SRV - [2007.03.29 10:39:00 | 000,427,576 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Programme\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2007.01.14 00:11:06 | 000,080,504 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Programme\Norton Internet Security\isPwdSvc.exe -- (ISPwdSvc)
SRV - [2007.01.12 20:40:58 | 000,049,248 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost)
SRV - [2007.01.10 12:45:02 | 002,918,008 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Programme\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2007.01.10 12:45:02 | 000,554,616 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatisches LiveUpdate - Scheduler)
SRV - [2007.01.09 22:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)
SRV - [2007.01.09 22:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2007.01.09 22:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2007.01.05 01:19:28 | 000,047,712 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Programme\Common Files\Symantec Shared\AppCore\AppSvc32.exe -- (SymAppCore)
SRV - [2007.01.04 22:38:08 | 000,024,652 | ---- | M] (Viewpoint Corporation) [Auto | Running] -- C:\Programme\Viewpoint\Common\ViewpointService.exe -- (Viewpoint Manager Service)
SRV - [2006.11.14 19:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Programme\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2006.08.23 15:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Programme\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2006.05.25 18:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
SRV - [2005.11.17 13:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2003.07.28 12:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | System | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2013.01.15 13:52:12 | 000,031,576 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012.11.15 23:33:26 | 000,094,048 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2012.10.22 13:02:46 | 000,179,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2012.10.15 03:48:52 | 000,055,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012.10.02 02:30:38 | 000,159,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012.09.21 02:46:06 | 000,164,832 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012.09.21 02:46:00 | 000,177,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avglogx.sys -- (Avglogx)
DRV - [2012.09.21 02:45:54 | 000,019,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2012.09.14 02:05:20 | 000,035,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011.08.05 10:21:52 | 000,236,728 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2011.07.12 19:07:40 | 000,016,064 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2011.01.27 15:26:16 | 000,056,888 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (tosrfusb)
DRV - [2010.11.29 11:47:00 | 000,070,448 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2010.11.20 02:24:42 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.11 10:26:00 | 000,042,672 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2010.08.30 10:48:00 | 000,080,064 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2010.04.26 11:48:00 | 000,053,760 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2009.12.07 15:59:09 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.07.24 11:31:00 | 000,021,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2009.07.13 23:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009.07.13 23:02:53 | 000,347,136 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTL8187B.sys -- (RTL8187B)
DRV - [2009.06.17 11:59:00 | 000,046,984 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2009.03.30 16:33:03 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2008.11.08 10:55:24 | 000,101,760 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2007.11.09 04:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
DRV - [2007.09.14 09:21:48 | 000,115,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2007.09.13 01:00:00 | 000,865,904 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20070913.017\NAVEX15.SYS -- (NAVEX15)
DRV - [2007.09.13 01:00:00 | 000,081,232 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20070913.017\NAVENG.SYS -- (NAVENG)
DRV - [2007.07.27 22:36:40 | 002,929,664 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2007.04.16 10:19:10 | 000,011,776 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
DRV - [2007.03.21 21:02:04 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007.02.24 13:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007.01.23 15:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007.01.18 15:47:18 | 000,211,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10N.sys -- (KR10N)
DRV - [2007.01.18 15:40:56 | 000,219,392 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10I.sys -- (KR10I)
DRV - [2007.01.11 19:22:20 | 000,276,792 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2007.01.11 19:22:18 | 000,025,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2007.01.11 19:22:14 | 000,247,608 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP)
DRV - [2007.01.09 15:32:14 | 000,191,544 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\symtdi.sys -- (SYMTDI)
DRV - [2007.01.09 15:32:14 | 000,027,576 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\symredrv.sys -- (SYMREDRV)
DRV - [2007.01.03 08:05:02 | 000,417,592 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Programme\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2006.12.27 23:48:26 | 000,212,280 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Symantec\Definitions\SymcData\idsdefs\20070108.003\IDSvix86.sys -- (IDSvix86)
DRV - [2006.11.20 13:11:14 | 000,007,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\FwLnk.sys -- (FwLnk)
DRV - [2006.10.30 10:23:12 | 000,007,680 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2006.10.18 11:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {D0D95264-BF0E-4BB0-A607-C7E0A8A4AB92}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{D0D95264-BF0E-4BB0-A607-C7E0A8A4AB92}: "URL" = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\1008082228\ICQToolBar.dll (ICQ)
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{3D41F773-C2A2-4541-8F58-DF94FA1311D3}: "URL" = hxxp://search.yahoo.com/search?ei=utf-8&FR=chr-vmn&type=oovoo2_0yach&q={searchTerms}
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={9121D0DD-B1D0-4507-B519-70177237FC12}&mid=0517661c2c8047d0a1cdd1e997726502-36ed5e2b35e1962daae7abf80e180f8b93f3b009&lang=de&ds=AVG&pr=fr&d=2012-09-09 15:38:01&v=14.0.2.14&pid=avg&sg=&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{D0D95264-BF0E-4BB0-A607-C7E0A8A4AB92}: "URL" = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SUNA_de
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\14.0.1\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Users\Carmen\AppData\Roaming\Move Networks\plugins\071803000001\npqmp071803000001.dll (Move Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Users\Carmen\AppData\Roaming\Move Networks\plugins\071803000001\npqmp071803000001.dll (Move Networks)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Carmen\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Carmen\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\14.0.2.14 [2013.01.15 13:58:09 | 000,000,000 | ---D | M]
 
 
========== Chrome  ==========
 
CHR - homepage: hxxp://www.google.com/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter},
CHR - homepage: hxxp://www.google.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Carmen\AppData\Local\Google\Chrome\Application\24.0.1312.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Carmen\AppData\Local\Google\Chrome\Application\24.0.1312.56\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Carmen\AppData\Local\Google\Chrome\Application\24.0.1312.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Carmen\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.4.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.4.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.4.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.4.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.4.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.4.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.4.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: MetaStream 3 Plugin (Enabled) = C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Move Media Player 7 (Enabled) = C:\Users\Carmen\AppData\Roaming\Move Networks\plugins\071803000001\npqmp071803000001.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Users\Carmen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: AT_AnnaSui = C:\Users\Carmen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjohejgigkmiclpgnilojffhiohcglib\3_0\
CHR - Extension: Google-Suche = C:\Users\Carmen\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: AVG Secure Search = C:\Users\Carmen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\14.0.2.14_0\
CHR - Extension: Google Mail = C:\Users\Carmen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Programme\ICQToolbar\toolbaru.dll (IE Toolbar)
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Reg Error: Value error.) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Programme\Common Files\Symantec Shared\coShared\Browser\1.5\NppBHO.dll (Symantec Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_05\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\14.0.2.14\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O2 - BHO: (ooVoo toolbar, powered by Ask.com) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\1008082228\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Programme\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\14.0.2.14\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (ooVoo toolbar, powered by Ask.com) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\1008082228\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\WebBrowser: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [00TCrdMain] C:\Programme\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [dcmsvc] C:\Programme\dcmsvc\dcmsvc.exe ()
O4 - HKLM..\Run: [Desktop SMS] C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe (Interactive Digital Media)
O4 - HKLM..\Run: [IS CfgWiz] C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe (Symantec Corporation)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Programme\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SmoothView] C:\Programme\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SynTPStart] C:\Programme\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA)
O4 - HKLM..\Run: [Toshiba Registration] C:\Programme\TOSHIBA\Registration\ToshibaRegistration.exe (Toshiba)
O4 - HKLM..\Run: [TPwrMain] C:\Programme\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKCU..\Run: [studNET-Autologin] C:\Windows\System32\studnet\studnet.exe (Dossin-Brade GbR)
O4 - HKCU..\Run: [TOSCDSPD] C:\Programme\TOSHIBA\TOSCDSPD\TOSCDSPD.exe ()
O4 - Startup: C:\Users\Carmen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BUFFALO NAS Navigator.lnk = C:\Programme\BUFFALO\NASNAVI\NasNavi.exe (BUFFALO INC.)
O4 - Startup: C:\Users\Carmen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NAS Scheduler.lnk = C:\Programme\BUFFALO\NASNAVI\nassche.exe (BUFFALO INC.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: &Windows Live Search - C:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O8 - Extra context menu item: Add to Windows &Live Favorites - hxxp://favorites.live.com/quickadd.aspx File not found
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_05\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: eBay - Der weltweite Online Marktplatz - {76577871-04EC-495E-A12B-91F7C3600AFA} - hxxp://rover.ebay.com/rover/1/707-44556-9400-3/4 File not found
O9 - Extra Button: Amazon.de - {8A918C1D-E123-4E36-B562-5C1519E434CE} - hxxp://www.amazon.de/exec/obidos/redirect-home?tag=Toshibadebholink-21&site=home File not found
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} hxxp://www2.snapfish.com/SnapfishActivia.cab (Snapfish Activia)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{436CB8C7-7AD5-4C8B-9F18-D6752EFAA0A8}: NameServer = 139.18.25.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A5A4C96C-3749-4E7D-80F7-4C4E5A982855}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Programme\Common Files\AVG Secure Search\ViProtocolInstaller\14.0.1\ViProtocol.dll ()
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O24 - Desktop WallPaper: 
O24 - Desktop BackupWallPaper: 
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{d99d1c2e-71cc-11e1-a097-00a0d1968cf1}\Shell - "" = AutoRun
O33 - MountPoints2\{d99d1c2e-71cc-11e1-a097-00a0d1968cf1}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{d99d1c37-71cc-11e1-a097-00a0d1968cf1}\Shell - "" = AutoRun
O33 - MountPoints2\{d99d1c37-71cc-11e1-a097-00a0d1968cf1}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{d99d1c3c-71cc-11e1-a097-00a0d1968cf1}\Shell - "" = AutoRun
O33 - MountPoints2\{d99d1c3c-71cc-11e1-a097-00a0d1968cf1}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.01.29 16:03:47 | 000,602,112 | ---- | C] (OldTimer Tools) -- E:\Daten\Carmen\Desktop\OTL.exe
[2013.01.27 13:28:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.01.27 13:28:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013.01.11 16:06:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[1 E:\Daten\Carmen\Documents\*.tmp files -> E:\Daten\Carmen\Documents\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.01.29 16:03:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- E:\Daten\Carmen\Desktop\OTL.exe
[2013.01.29 15:24:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.01.29 13:01:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.01.28 15:11:15 | 000,009,504 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.01.28 15:11:15 | 000,009,504 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.01.28 13:57:10 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.01.28 13:57:10 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.01.28 13:57:10 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.01.28 13:57:10 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.01.27 18:45:53 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.01.27 18:45:45 | 000,000,342 | ---- | M] () -- C:\Windows\tasks\ROC_JAN2013_TB_rmv.job
[2013.01.27 18:45:34 | 000,382,752 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.01.27 18:44:39 | 1508,413,440 | -HS- | M] () -- C:\hiberfil.sys
[2013.01.15 13:52:12 | 000,031,576 | ---- | M] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys
[2013.01.11 16:06:09 | 000,000,956 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2013.lnk
[2013.01.02 00:11:14 | 000,017,408 | ---- | M] () -- C:\Users\Carmen\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[1 E:\Daten\Carmen\Documents\*.tmp files -> E:\Daten\Carmen\Documents\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.01.15 13:57:48 | 000,000,342 | ---- | C] () -- C:\Windows\tasks\ROC_JAN2013_TB_rmv.job
[2012.11.09 18:45:16 | 000,000,016 | -H-- | C] () -- C:\ProgramData\mxfilerelatedcache.mxc2
[2012.10.01 21:07:24 | 000,684,916 | ---- | C] () -- C:\Windows\unins000.exe
[2012.10.01 21:07:24 | 000,012,452 | ---- | C] () -- C:\Windows\unins000.dat
[2012.07.29 18:54:25 | 000,056,832 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
[2012.07.29 18:31:45 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2012.07.29 18:29:05 | 000,240,640 | ---- | C] () -- C:\Windows\System32\NMOCOD.DLL
[2011.12.21 22:01:53 | 000,017,408 | ---- | C] () -- C:\Users\Carmen\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.11.28 07:09:38 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011.11.17 22:34:27 | 000,021,532 | ---- | C] () -- C:\Windows\System32\emptyregdb.dat
[2008.03.07 20:09:31 | 000,000,016 | -H-- | C] () -- C:\Users\Carmen\mxfilerelatedcache.mxc2
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 04:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2011.11.17 21:59:35 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\Anvil-Soft
[2012.09.09 14:42:54 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\AVG2013
[2012.05.07 19:09:19 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\Canon
[2012.09.27 17:45:21 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\com.warnerbros.DigitalCopyManager.449F66ACC381FDC604DC2AA255FEECEEBBBEE1E5.1
[2011.11.17 21:59:37 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\Costco Photo Organizer
[2011.11.17 21:59:37 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\Costco Photo Viewer US
[2011.11.17 21:59:38 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\DesktopSMS
[2011.11.17 22:00:18 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\ICQ
[2008.03.08 18:21:01 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\ICQ Toolbar
[2011.11.17 22:00:18 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\InterVideo
[2011.11.17 22:00:18 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\IrfanView
[2011.11.17 22:00:18 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\Kybtec Software
[2011.11.17 22:02:17 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\MAGIX
[2011.11.17 22:02:49 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\MipKukSoft
[2011.11.17 22:02:49 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\NASNaviator2
[2012.09.01 10:36:57 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\ooVoo Details
[2011.11.17 22:03:16 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\TOSHIBA
[2012.09.09 14:39:53 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\TuneUp Software
[2011.11.17 22:03:16 | 000,000,000 | ---D | M] -- C:\Users\Carmen\AppData\Roaming\Ulead Systems
 
========== Purity Check ==========
 
 

< End of report >

--- --- ---

OTL Logfile:

Code:

ATTFilter

OTL Extras logfile created on: 29.01.2013 16:09:29 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = E:\Daten\Carmen\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,87 Gb Total Physical Memory | 1,11 Gb Available Physical Memory | 59,48% Memory free
3,75 Gb Paging File | 2,26 Gb Available in Paging File | 60,32% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74,89 Gb Total Space | 43,22 Gb Free Space | 57,71% Space Free | Partition Type: NTFS
Drive D: | 7,20 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive E: | 72,68 Gb Total Space | 19,83 Gb Free Space | 27,28% Space Free | Partition Type: NTFS
 
Computer Name: CARMEN | User Name: Carmen | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Browse with &IrfanView] -- "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1113CDEC-6064-4378-A5AC-B8088A49CCAC}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{118E5FAA-BB30-4A8D-B0D1-8C295A05280C}" = lport=443 | protocol=17 | dir=in | name=oovoo udp port 443 | 
"{1980C845-88F2-496F-80BD-FF39C8753F87}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{274B96D6-836D-43A6-86AC-BEA8750EAB16}" = lport=37674 | protocol=6 | dir=in | name=oovoo tcp port 37674 | 
"{2A47AA31-0E20-46A8-8643-A2D85EE84C88}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{34ECE41D-892A-49F7-8A4E-B0B41FAB1338}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{354369E8-A78A-42A9-B1ED-4CC397D852BA}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{42260C57-19B4-42E9-9439-741C185CDDB7}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{4B8EA568-F583-4142-838C-1AD71044FF3F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{82E4389A-A732-456F-91F3-0202887EBC8E}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{9A0A20C8-BFF4-411B-8AD4-B0F7DEEC44E2}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{A87B6896-1AB4-4185-B873-9A61D6D8942D}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{CBC1BE0B-717F-429C-8E36-CCB59BB6E0BB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{D1F172F3-8F22-432D-9E41-D387F0D8E305}" = lport=443 | protocol=6 | dir=in | name=oovoo tcp port 443 | 
"{D26D169A-82DA-4408-B28A-B0CFA41D5C1B}" = lport=37675 | protocol=17 | dir=in | name=oovoo udp port 37675 | 
"{E2026AF4-30DC-451A-B7A9-4B2BE9E1154E}" = lport=37674 | protocol=17 | dir=in | name=oovoo udp port 37674 | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{009DA4F7-31D6-43ED-8691-466A56CD0B28}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{02A5C51F-260A-4E5D-9BD8-656A1AB74D8E}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{0365E911-CB97-447F-9B1C-87761EE73D95}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgdiagex.exe | 
"{04208F37-1DB7-47C5-9E78-9B0BB21D6B6F}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{04C1D435-3F5A-4F01-BBE6-E7E835FC1AAA}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe | 
"{064813E0-0C14-4F53-9329-AF81EB5EE212}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{1F8DCCBD-C39F-491E-90D5-8E0872A4A1FC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{21A017C9-0124-4B9A-B0EC-E2642DD030B7}" = protocol=17 | dir=in | app=c:\program files\buffalo\nasnavi\nasnavi.exe | 
"{25AFFE1D-2CEC-43D4-888A-AA952D2292DD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{26F20B3D-65EA-445B-961F-A762F7D67A10}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgemcx.exe | 
"{27CAEB48-D8E6-44D6-9275-E339C008CB36}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{2B21D3F3-9D9D-4EA7-B560-FE77219E2D1D}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{3724AE9C-212E-49E3-A967-6DB07C2BCDC3}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{3EE86B75-38D4-46DA-9A69-1AD646B248A9}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | 
"{4404530B-ED0D-4386-B144-6D575AE137BA}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | 
"{4BE207ED-0838-4CE9-BB31-3E534DEE887E}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgnsx.exe | 
"{4FC7E8AD-5609-4FC8-92AE-6C49C65F2EF3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{538BB92D-FB7A-4A89-AE87-B5164358130A}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{599BE9FD-2248-42AF-BD0E-BAD41B7E081C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{6089468B-43B1-4575-AA1F-303640FF07C5}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgemcx.exe | 
"{6B986630-8F48-4645-83EE-24C938B10468}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{6CD57249-517D-4CF0-9072-EB5F2F2576C1}" = protocol=6 | dir=in | app=c:\program files\buffalo\nasnavi\nasnavi.exe | 
"{6FD18711-C7B9-4479-A64A-883B7C6EED9E}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgdiagex.exe | 
"{705CB8B3-1FB1-4F50-AFAB-61CFCE906C16}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{7080B365-E8E1-4500-ABCC-859FC6A06820}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{71A31A35-7039-41BF-817E-98E59E03EC69}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{725E049E-7897-4E8C-8DCE-4CF67B9D3241}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgemcx.exe | 
"{7F3D6139-C013-4F2F-9DA3-4A2D1B3236CC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{857D8BE1-5294-43C0-A22D-596FC56D1D82}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgmfapx.exe | 
"{88B7D8B5-86C6-43AF-91B2-A787C62ACF75}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgemcx.exe | 
"{8919227D-1D80-4D28-A7FC-11B444064236}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe | 
"{8A9C1D0C-0710-4E94-8ECA-C42717D579C0}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{8D020263-83CC-4E94-B9BD-7D5CCAEAD423}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{8EB52670-4822-4AF4-8AC8-03151B8531F4}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{91BFC2FD-13F5-451F-9F96-5DE0CB0B0519}" = protocol=17 | dir=in | app=c:\program files\buffalo\nasnavi\nasinst.exe | 
"{956F815B-549C-4A6F-9933-0C3099EC0AF8}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgnsx.exe | 
"{9C240A9B-AE56-4E57-8FF2-D0ED90316822}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{9CE2906E-DC79-4835-8D09-BAF34F49709A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{AAF74F4D-381C-4FA5-80B8-C5775D895F64}" = protocol=6 | dir=in | app=c:\program files\aim6\aim6.exe | 
"{AFC4BB5C-D805-4206-886D-56513138E550}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{B25C3801-091C-4A20-AFC9-5CAF73EF2F6C}" = protocol=6 | dir=out | app=system | 
"{BC25236E-B825-4426-A18E-9CD856484A34}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{C73D23B8-7321-42A2-AE99-050B8BF165CD}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgdiagex.exe | 
"{C8EA5963-491A-43E1-A09D-5036CAF9223B}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgnsx.exe | 
"{CB7AEE43-AE01-4792-BD21-961E12CE4314}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D03AC29D-387D-482B-B364-D628BEA4D6AA}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgnsx.exe | 
"{D317129C-4B13-482A-B179-9B5C50CE49B7}" = protocol=6 | dir=in | app=c:\program files\buffalo\nasnavi\nasinst.exe | 
"{D42B672B-D835-4A1E-9A5E-9C1C756DF536}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{DB398679-F1EA-4963-8F10-0B4870A4D86C}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgmfapx.exe | 
"{DEBB2E25-0919-4E90-9686-629C42A2B9D4}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{E261A893-E8E9-4ED4-A4B8-102F02988607}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{E3775C24-A7F2-4C80-A9EE-D214D1C0DA96}" = protocol=17 | dir=in | app=c:\program files\aim6\aim6.exe | 
"{E99AB90F-B454-41EC-9251-F0879F025C3E}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgdiagex.exe | 
"TCP Query User{0E2A66C7-8468-4C7E-8447-47353ACA3068}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{102C8A84-4A78-429A-B2F1-DC7EFC615F7E}C:\program files\oovoo\oovoo.exe" = protocol=6 | dir=in | app=c:\program files\oovoo\oovoo.exe | 
"TCP Query User{1A473795-3F7A-4731-92DF-8A40BD45EE24}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{1B6EB279-F49E-4647-9C3F-1BE4D0DB243B}C:\program files\icq6\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6\icq.exe | 
"TCP Query User{4114CB49-1BCD-4F60-896F-92E6AAF450A4}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | 
"TCP Query User{5C94F5F3-66F3-4291-B9F8-89D06CBBEFB0}C:\program files\buffalo\nasnavi\nasnavi.exe" = protocol=6 | dir=in | app=c:\program files\buffalo\nasnavi\nasnavi.exe | 
"TCP Query User{668E2DE6-3D65-449E-A13F-500D60C9A93D}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{672E00EF-FD5B-49AF-9FA6-632D10D86253}C:\program files\icq6\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6\icq.exe | 
"TCP Query User{777FB0FC-B1B7-470B-A79E-BD77ADC52AB3}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | 
"TCP Query User{94DAA922-CC06-450B-BA81-3719FAB3B68E}C:\program files\oovoo\oovoo.exe" = protocol=6 | dir=in | app=c:\program files\oovoo\oovoo.exe | 
"TCP Query User{C9E68428-7E2D-47BC-8EF9-3A1A6A438144}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{0271A380-60D0-4CAC-8DDC-5B979072A657}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{1954CE25-9A66-4207-AB70-B26266081B29}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{1A15BF1D-D42C-486D-8F81-D51AD9E75957}C:\program files\buffalo\nasnavi\nasnavi.exe" = protocol=17 | dir=in | app=c:\program files\buffalo\nasnavi\nasnavi.exe | 
"UDP Query User{3C51F3A0-A1B0-4583-AED2-0CA04352C7DE}C:\program files\icq6\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6\icq.exe | 
"UDP Query User{5AFCD9BA-6106-403E-9E9C-78226B4C42F4}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{6D8ABB5E-E66E-4D29-901E-43223F6EF480}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{8E12EC77-48EB-454D-B00C-B3D187FA2425}C:\program files\oovoo\oovoo.exe" = protocol=17 | dir=in | app=c:\program files\oovoo\oovoo.exe | 
"UDP Query User{9A9DEAFD-C1EE-4C95-A106-815570E0C72A}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | 
"UDP Query User{B380DA08-BDC6-4B80-AC08-46E4ED7C1332}C:\program files\icq6\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6\icq.exe | 
"UDP Query User{EE43040D-4B66-405C-A71D-2FBB9E858F4A}C:\program files\oovoo\oovoo.exe" = protocol=17 | dir=in | app=c:\program files\oovoo\oovoo.exe | 
"UDP Query User{F6DE6C1D-D5AD-4A11-A66B-4E8F9711B9B4}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00D0200F-3B4D-4A2F-869E-533ED835A943}" = Hervorhebe-Funktion (Windows Live Toolbar)
"{01244A94-5226-425B-84E0-E76839AD488B}" = PowerInfo und Zurück 2008
"{0221A397-962E-6D84-F786-64E445617999}" = CCC Help English
"{08CB1B3E-D42C-3ED5-7896-F8BC31839315}" = Catalyst Control Center Localization Czech
"{0AC49543-9CE2-4434-AD42-5AA6E2967FA5}" = Windows Live Toolbar
"{0C9B3E29-3B8B-295E-773B-82F3516F17DD}" = CCC Help Thai
"{0D99E1E9-D28C-6806-0820-13E10082CE7B}" = CCC Help Italian
"{0DC5B855-1CE2-9EA3-AA12-78C8939F68EF}" = Catalyst Control Center Core Implementation
"{0E2C948E-44D6-9A1C-54E7-05217E7DCC13}" = CCC Help Dutch
"{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1B5AB0D6-4F7C-9B93-5323-9037F1E61142}" = CCC Help Chinese Standard
"{218761F6-CBF6-4973-B910-A33E6563A1EA}" = Windows Live Toolbar-Erweiterung (Windows Live Toolbar)
"{21EA2A28-3146-E63D-16EE-0BF9FA3D6F5E}" = Catalyst Control Center Localization German
"{22543949-70E8-45D0-A938-F38143EB8BF8}" = Catalyst Control Center - Branding
"{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information
"{25D4A6A6-BFBF-49AF-89CA-635A468B0515}" = Kybtec World Clock 3.3.1.1
"{2B091530-69AA-442E-AB09-39ED06B58220}" = Windows Live Messenger
"{2BDF38E0-1A7F-4220-B4B7-118DD45E5E13}" = TOSHIBA Supervisor Password
"{2CCC5C78-20FF-478E-8B65-46B58CC5781B}" = AVG 2013
"{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}" = SymNet
"{2DD6C198-FA9A-40B4-8DE5-CE5206E3EB34}" = Smart Menus (Windows Live Toolbar)
"{31C97472-E522-A760-F46D-FC0648F77E9C}" = CCC Help French
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3672B097-EA69-4bfe-B92F-29AE6D9D2B34}" = Norton Internet Security
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}" = ccCommon
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40E3BE50-51A6-F8A0-DB5F-7C2698FA5E1F}" = CCC Help Spanish
"{4160DC5B-4C56-D0C3-C5FD-F5BDAD3C882B}" = ATI Catalyst Install Manager
"{432DC370-01EF-F2D8-34C3-27DCC9B13083}" = CCC Help Norwegian
"{44151656-ECAC-99DC-1AC5-1F06A1A62939}" = Catalyst Control Center Graphics Light
"{44734179-8A79-4DEE-BB08-73037F065543}" = Apple Mobile Device Support
"{454AB369-FABF-EB84-FBC1-CA4E8FBD3926}" = Catalyst Control Center Localization Hungarian
"{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}" = Bonjour
"{48185814-A224-447A-81DA-71BD20580E1B}" = Norton Internet Security
"{4843B611-8FCB-4428-8C23-31D0A5EAE164}" = Norton Confidential Browser Component
"{497268C1-AE62-4A1D-1129-1D03183538B0}" = Catalyst Control Center Localization Portuguese
"{4CE6623E-C867-81B3-8B94-A4FE021782BF}" = CCC Help Portuguese
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{55FE1E6B-4E8A-0F2B-5B36-8F4363A0AEBC}" = Catalyst Control Center Localization Chinese Traditional
"{56995235-B76E-44A6-BA17-8FF13D3F907A}" = TOSHIBA Benutzerhandbücher
"{5980B928-1C95-4B3E-957B-B02D8147FF9E}" = Desktop SMS
"{59DC42FB-13A7-45E1-BCC3-37CE5977951E}" = CCC Help Japanese
"{59DF97C6-3144-FA5A-4380-6B891BB44812}" = CCC Help German
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
"{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}" = Norton Internet Security
"{5BBE3EAB-D749-0560-2C39-53DC8531CB01}" = Catalyst Control Center Localization Korean
"{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}" = Sony USB Driver
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{608738F2-51B4-CD53-C1CC-220363513ED7}" = CCC Help Czech
"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"{649C3B52-AA90-1F36-3D36-CE7F2BB1CB8C}" = Catalyst Control Center Localization Chinese Standard
"{654CABFA-4289-9EC0-F088-34BFCC84A798}" = Catalyst Control Center Localization Turkish
"{65CC9CE1-AAF1-866B-B07E-FECC0B53277E}" = Catalyst Control Center Localization Danish
"{6A9DF7EE-E7B9-E4F1-204A-FE72F47231CB}" = CCC Help Finnish
"{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
"{7095FD27-37F0-4750-9DE8-D37DC0043706}" = REALTEK RTL8187B Wireless LAN Driver
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7163A2F1-2DED-9EF4-24FC-06D607D2A9C9}" = Catalyst Control Center Graphics Full New
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{731341F3-55AA-8488-A3F1-3D4C43412C87}" = CCC Help Russian
"{731E713B-C13E-4527-B624-8A6DF2D33DAF}" = AVG 2013
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77772678-817F-4401-9301-ED1D01A8DA56}" = SPBBC 32bit
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites für Windows Live Toolbar
"{78C6A78A-8B03-48C8-A47C-78BA1FCA2307}" = TOSHIBA ConfigFree
"{7A7B0BF3-2F00-4F03-8A9B-6ABCC07B90C6}" = Windows Live installer
"{7A929336-7D2E-C4E3-2AC9-CA80FBEB5701}" = Catalyst Control Center Localization Spanish
"{7B63B2922B174135AFC0E1377DD81EC2}" = 
"{830D8CBD-C668-49e2-A969-C2C2106332E0}" = Norton AntiVirus
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{84C7D852-CDF6-7006-91C7-E6A54519E5D5}" = Catalyst Control Center Graphics Full Existing
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{8E850D2A-F5E9-C322-ABFF-683C69686C13}" = Catalyst Control Center Localization Russian
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{93FE0FBE-23F5-7BF4-9085-6E046D609F22}" = CCC Help Chinese Traditional
"{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}" = Norton Protection Center
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = CD/DVD Drive Acoustic Silencer
"{A30EE8A6-6B9F-4973-B5ED-2A60B40576E4}_is1" = StudNET Login Client
"{A74BE9F1-1129-FB71-DA7B-96F5D99CA330}" = Catalyst Control Center Localization Finnish
"{A762A897-3E65-E264-5188-CBAD303064C2}" = Skins
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB79C30D-A920-D219-B4FD-C9552A0419D3}" = CCC Help Polish
"{AC76BA86-7AD7-1031-7B44-A81200000003}" = Adobe Reader 8.1.2 - Deutsch
"{AD6A78C4-AD77-448D-4F9D-43AD80C8D8FF}" = Catalyst Control Center Localization French
"{AEE482BA-1731-499C-346D-B5F498B7DBF8}" = CCC Help Turkish
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B3E356C8-CEB3-467C-EA92-8FC2CA15AD51}" = Catalyst Control Center Localization Polish
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}" = PMB
"{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}" = Apple Software Update
"{B7C61755-DB48-4003-948F-3D34DB8EAF69}" = MSRedist
"{BBD408BC-486B-9857-C805-945F8F083877}" = CCC Help Swedish
"{BE044C42-908B-4952-5140-E2B8FD67F267}" = CCC Help Danish
"{BFC85CDC-BD7C-4FDD-9507-8D74B5A79404}" = TOSHIBA Hardware Setup
"{BFD96B89-B769-4CD6-B11E-E79FFD46F067}" = QuickTime
"{C29D1033-0247-FFC6-7895-204ABABA0F20}" = ccc-utility
"{C643EEE3-A55A-58D1-D543-ED46726288CB}" = CCC Help Greek
"{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser
"{C7B4B7FE-F49F-4954-A5F8-C8823B78CE93}" = Personal Translator 2008 Home German English
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D0B87CB2-8599-4975-0E50-DB2F8E6B9AE6}" = Catalyst Control Center Localization Thai
"{D353CC51-430D-4C6F-9B7E-52003DA1E05A}" = Norton Confidential Web Protection Component
"{D6E6FA4A-5445-4850-8365-CF216C1CBB7A}" = Symantec Real Time Storage Protection Component
"{DA401137-8791-F77A-591C-F0BC3E7ED04E}" = Catalyst Control Center Localization Greek
"{DC9B7572-50C6-180D-916D-3E2CBD00C0C7}" = Catalyst Control Center Localization Japanese
"{DFCFF0F1-005D-E317-733D-8D19D54FBF08}" = Catalyst Control Center Localization Swedish
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9-Reihe
"{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}" = Norton Internet Security
"{E5EE9939-259F-4DE2-8023-5C49E16A4F43}" = Norton Internet Security
"{E748D6A5-D03D-BDE1-C094-DAE3F5BCEEF6}" = Catalyst Control Center Graphics Previews Vista
"{E8316038-8C38-52A8-9014-FD35536567E8}" = Catalyst Control Center Localization Dutch
"{E96A0335-C6EA-D11A-3A49-8586A8FED544}" = ccc-core-static
"{E9E6642B-0714-37B4-0248-D036B60F8F12}" = CCC Help Korean
"{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore
"{F05E0039-D2A7-198B-B79E-285395EBB5BB}" = Catalyst Control Center Localization Italian
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F4DB525F-A986-4249-B98B-42A8066251CA}" = AV
"{F734CA55-0939-1F1A-A8B5-19B91B3D4B1F}" = Catalyst Control Center Localization Norwegian
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FE4C0830-A0F3-B67E-93BC-21C4B0BB0267}" = CCC Help Hungarian
"{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"AFPL Ghostscript 8.53" = AFPL Ghostscript 8.53
"AFPL Ghostscript Fonts" = AFPL Ghostscript Fonts
"AVG" = AVG 2013
"AVG Secure Search" = AVG Security Toolbar
"CCleaner" = CCleaner
"CD Inlet&Label" = CD Inlet&Label
"dcmsvc_is1" = dcmsvc 1.0
"Firebird SQL Server D" = Firebird SQL Server - MAGIX Edition 2.0.0.1 (D)
"ICQToolbar" = ICQ Toolbar
"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"InstallShield_{C7B4B7FE-F49F-4954-A5F8-C8823B78CE93}" = Personal Translator 2008 Home German English
"InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"IrfanView" = IrfanView (remove only)
"LiveUpdate" = LiveUpdate 3.2 (Symantec Corporation)
"MAGIX Digital Foto Maker SE D" = MAGIX Digital Foto Maker SE 4.1.0.835 (D)
"MAGIX Foto Suite D" = MAGIX Foto Suite 1.12.0.89 (D)
"MAGIX Online Druck Service D" = MAGIX Online Druck Service 2.3.2.0 (D)
"Micrografx Picture Publisher 8" = Micrografx Picture Publisher 8
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"SuperTux_is1" = SuperTux 0.1.3
"Surf & E-Mail-Stick" = Surf & E-Mail-Stick
"SymSetup.{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}" = Norton Internet Security (Symantec Corporation)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TOSHIBA Software Modem" = TOSHIBA Software Modem
"UN060501" = BUFFALO NAS Navigator
"UN070209" = Uninstall of File Security Tool
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VLC media player 1.1.11
"Windows Live Toolbar" = Windows Live Toolbar
"Windows Media Encoder 9" = Windows Media Encoder 9-Reihe
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = ooVoo toolbar, powered by Ask.com Updater
"Google Chrome" = Google Chrome
"Move Media Player" = Move Media Player
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 25.07.2011 10:08:18 | Computer Name = Carmen | Source = Application Error | ID = 1000
Error - 25.07.2011 10:09:17 | Computer Name = Carmen | Source = Application Error
 | ID = 1000
 
Error - 25.07.2011 10:09:50 | Computer Name = Carmen | Source = Application Error | ID = 1000
Error - 25.07.2011 18:37:13 | Computer Name = Carmen | Source = Application Error
 | ID = 1000
 
Error - 26.07.2011 19:50:07 | Computer Name = Carmen | Source = Application Error | ID = 1000
Error - 27.07.2011 04:31:15 | Computer Name = Carmen | Source = Application Error
 | ID = 1000
 
Error - 28.07.2011 06:02:46 | Computer Name = Carmen | Source = RasClient | ID = 20227
Description = 
 
Error - 28.07.2011 06:03:46 | Computer Name = Carmen | Source = RasClient | ID = 20227
Description = 
 
Error - 08.08.2011 03:41:25 | Computer Name = Carmen | Source = Application Error | ID = 1000
Error - 08.08.2011 07:45:24 | Computer Name = Carmen | Source = WerSvc | ID = 5007
 
Description = 
Error - 09.08.2011 05:56:00 | Computer Name = Carmen | Source = Application Hang
 | ID = 1002
 
Error - 16.08.2011 15:01:38 | Computer Name = Carmen | Source = Application Error | ID = 1000
Error - 21.08.2011 17:17:19 | Computer Name = Carmen | Source = WerSvc | ID = 5007
 
Description = 
Error - 22.08.2011 07:26:23 | Computer Name = Carmen | Source = Application Error
 | ID = 1000
 
Error - 28.08.2011 15:21:37 | Computer Name = Carmen | Source = Application Error | ID = 1000
Error - 28.08.2011 15:32:18 | Computer Name = Carmen | Source = RasClient | ID =
 20227
 
Description = 
Error - 28.08.2011 15:34:13 | Computer Name = Carmen | Source = EventSystem | ID
 = 4621
 
Description = 
Error - 28.08.2011 16:07:39 | Computer Name = Carmen | Source = Application Error
 | ID = 1000
 
Error - 28.08.2011 16:36:35 | Computer Name = Carmen | Source = WerSvc | ID = 5007
Description = 
 
Error - 29.08.2011 18:50:41 | Computer Name = Carmen | Source = Application Error | ID = 1000
 
Error encountered while reading event logs.
 
< End of report >

--- --- ---

Kann ich das Programm und die txt-Dateien jetzt schließen oder soll ich die Dateien abspeichern?

markusg · 29.01.2013, 16:38

hi
öffne mal avira, verwaltung, quarantäne, poste die Fundmeldungen mit Pfadangabe bitte
programm und txt schließen.

Carrab17 · 29.01.2013, 16:42

hi,

dazu hab ich ne Frage: Ich hab Avira nicht als Programm auf meinem PC gespeichert. Das war nur ne CD, die mein Vater benutzt hat. Mein Antivirenprogramm ist AVG, soll ich dir einfach die Fundmeldungen davon posten?

markusg · 29.01.2013, 19:02

hattest du mal avira, denn ich sehe einen treiber und service davon laufen.
dann avg funde posten.

Carrab17 · 29.01.2013, 19:14

kann sein, dass ich mal Avira hatte, muss aber schon ne ganze Weile her sein. Hab glaub ich irgendwann mal durch ne Version von Norton Internet Security ersetzt, die war dann aber abgelaufen und ich hab sie deinstalliert nachdem mir mein Freund AVG installiert hat, weil er gute Erfahrungen damit gemacht hat.

Ich hab gerade bei AVG - Optionen - Virenquarantäne nachgesehen.
Da steht: "Virenquarantäne ist leer."

Nen anderen passenden Menüpunkt find ich nicht. Weißt du, wo ich nochmal schauen müsste oder kann es sein, dass die einfach leer ist?

markusg · 31.01.2013, 15:07

ok
weiter hiermit:
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten
c: öffnen, tdsskiller-datum-version.txt öffnen, Inhalt posten

Carrab17 · 31.01.2013, 15:48

danke, hab ich gemacht.

hier der Inhalt:

15:43:22.0370 9136 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
15:43:22.0698 9136 ============================================================
15:43:22.0698 9136 Current date / time: 2013/01/31 15:43:22.0698
15:43:22.0698 9136 SystemInfo:
15:43:22.0698 9136
15:43:22.0698 9136 OS Version: 6.1.7601 ServicePack: 1.0
15:43:22.0698 9136 Product type: Workstation
15:43:22.0698 9136 ComputerName: CARMEN
15:43:22.0698 9136 UserName: Carmen
15:43:22.0698 9136 Windows directory: C:\Windows
15:43:22.0698 9136 System windows directory: C:\Windows
15:43:22.0698 9136 Processor architecture: Intel x86
15:43:22.0698 9136 Number of processors: 2
15:43:22.0698 9136 Page size: 0x1000
15:43:22.0698 9136 Boot type: Normal boot
15:43:22.0698 9136 ============================================================
15:43:29.0094 9136 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
15:43:29.0125 9136 ============================================================
15:43:29.0125 9136 \Device\Harddisk0\DR0:
15:43:29.0125 9136 MBR partitions:
15:43:29.0125 9136 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x95CA000
15:43:29.0125 9136 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x98B8800, BlocksNum 0x915E800
15:43:29.0125 9136 ============================================================
15:43:29.0156 9136 C: <-> \Device\Harddisk0\DR0\Partition1
15:43:29.0296 9136 E: <-> \Device\Harddisk0\DR0\Partition2
15:43:29.0296 9136 ============================================================
15:43:29.0296 9136 Initialize success
15:43:29.0296 9136 ============================================================
15:43:56.0534 7756 ============================================================
15:43:56.0534 7756 Scan started
15:43:56.0534 7756 Mode: Manual; SigCheck; TDLFS;
15:43:56.0534 7756 ============================================================
15:43:58.0999 7756 ================ Scan system memory ========================
15:43:58.0999 7756 System memory - ok
15:43:59.0014 7756 ================ Scan services =============================
15:43:59.0186 7756 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
15:43:59.0576 7756 1394ohci - ok
15:43:59.0623 7756 [ BEB5E6A8C17C3C7485563281E0F9E77E ] 61883 C:\Windows\system32\DRIVERS\61883.sys
15:43:59.0716 7756 61883 - ok
15:43:59.0779 7756 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
15:43:59.0810 7756 ACPI - ok
15:43:59.0872 7756 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
15:43:59.0966 7756 AcpiPmi - ok
15:44:00.0013 7756 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
15:44:00.0075 7756 adp94xx - ok
15:44:00.0106 7756 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
15:44:00.0138 7756 adpahci - ok
15:44:00.0153 7756 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
15:44:00.0184 7756 adpu320 - ok
15:44:00.0216 7756 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
15:44:00.0294 7756 AeLookupSvc - ok
15:44:00.0325 7756 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
15:44:00.0465 7756 AFD - ok
15:44:00.0840 7756 [ 7E10E3BB9B258AD8A9300F91214D67B9 ] AgereSoftModem C:\Windows\system32\DRIVERS\AGRSM.sys
15:44:00.0964 7756 AgereSoftModem - ok
15:44:00.0996 7756 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
15:44:01.0027 7756 agp440 - ok
15:44:01.0074 7756 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
15:44:01.0089 7756 aic78xx - ok
15:44:01.0152 7756 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
15:44:01.0214 7756 ALG - ok
15:44:01.0245 7756 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
15:44:01.0261 7756 aliide - ok
15:44:01.0448 7756 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
15:44:01.0479 7756 amdagp - ok
15:44:01.0495 7756 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
15:44:01.0526 7756 amdide - ok
15:44:01.0573 7756 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
15:44:01.0635 7756 AmdK8 - ok
15:44:01.0666 7756 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
15:44:01.0713 7756 AmdPPM - ok
15:44:01.0744 7756 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
15:44:01.0760 7756 amdsata - ok
15:44:01.0791 7756 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
15:44:01.0822 7756 amdsbs - ok
15:44:01.0838 7756 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
15:44:01.0854 7756 amdxata - ok
15:44:01.0963 7756 [ 9015BC03F62940527EC92D45EE89E46F ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
15:44:02.0010 7756 AntiVirSchedulerService ( UnsignedFile.Multi.Generic ) - warning
15:44:02.0010 7756 AntiVirSchedulerService - detected UnsignedFile.Multi.Generic (1)
15:44:02.0041 7756 [ B8720A787C1223492E6F319465E996CE ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
15:44:02.0072 7756 AntiVirService ( UnsignedFile.Multi.Generic ) - warning
15:44:02.0072 7756 AntiVirService - detected UnsignedFile.Multi.Generic (1)
15:44:02.0119 7756 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
15:44:02.0228 7756 AppID - ok
15:44:02.0290 7756 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
15:44:02.0353 7756 AppIDSvc - ok
15:44:02.0384 7756 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll
15:44:02.0462 7756 Appinfo - ok
15:44:02.0571 7756 [ 1961CB10BB48EB4D97E37DB6373E9E63 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
15:44:02.0602 7756 Apple Mobile Device ( UnsignedFile.Multi.Generic ) - warning
15:44:02.0602 7756 Apple Mobile Device - detected UnsignedFile.Multi.Generic (1)
15:44:02.0649 7756 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
15:44:02.0680 7756 arc - ok
15:44:02.0696 7756 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
15:44:02.0727 7756 arcsas - ok
15:44:02.0758 7756 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
15:44:02.0899 7756 AsyncMac - ok
15:44:02.0930 7756 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
15:44:02.0946 7756 atapi - ok
15:44:03.0024 7756 [ 581B9BE9E92A0F3856CC85EC011EDC6F ] Ati External Event Utility C:\Windows\system32\Ati2evxx.exe
15:44:03.0102 7756 Ati External Event Utility - ok
15:44:03.0211 7756 [ 22D300F835600C9C634860CF2912F9CF ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
15:44:03.0336 7756 atikmdag - ok
15:44:03.0382 7756 [ 4AA1EB65481C392955939E735D27118B ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
15:44:03.0445 7756 AtiPcie - ok
15:44:03.0492 7756 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:44:03.0554 7756 AudioEndpointBuilder - ok
15:44:03.0570 7756 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
15:44:03.0616 7756 Audiosrv - ok
15:44:03.0694 7756 [ C0E25BB0E6A159D332048AFAA2ED24CE ] Automatisches LiveUpdate - Scheduler C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
15:44:03.0726 7756 Automatisches LiveUpdate - Scheduler - ok
15:44:03.0757 7756 [ C44BDD77E06053CF5AFE046F3A47C16B ] Avc C:\Windows\system32\DRIVERS\avc.sys
15:44:03.0804 7756 Avc - ok
15:44:04.0100 7756 [ 4AFC14AFA58878FAA1D249E7E90EA54B ] AVGIDSAgent C:\Program Files\AVG\AVG2013\avgidsagent.exe
15:44:04.0412 7756 AVGIDSAgent - ok
15:44:04.0474 7756 [ 7BB2C605094DBCA536D127B434214862 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdriverx.sys
15:44:04.0506 7756 AVGIDSDriver - ok
15:44:04.0537 7756 [ 8F50F98686C9A397A19FCBAE284DB1C5 ] AVGIDSHX C:\Windows\system32\DRIVERS\avgidshx.sys
15:44:04.0552 7756 AVGIDSHX - ok
15:44:04.0599 7756 [ A8DE230CC8536790CA07D37FBCD87A74 ] AVGIDSShim C:\Windows\system32\DRIVERS\avgidsshimx.sys
15:44:04.0615 7756 AVGIDSShim - ok
15:44:04.0662 7756 [ D53D35031365A0ECCB1DC1BC1B15B18E ] Avgldx86 C:\Windows\system32\DRIVERS\avgldx86.sys
15:44:04.0677 7756 Avgldx86 - ok
15:44:04.0724 7756 [ 95889A9D23F3133250FA8AD13C982D58 ] Avglogx C:\Windows\system32\DRIVERS\avglogx.sys
15:44:04.0740 7756 Avglogx - ok
15:44:04.0771 7756 [ AF7AA9BA434CD28833A66E90993E8DFD ] Avgmfx86 C:\Windows\system32\DRIVERS\avgmfx86.sys
15:44:04.0786 7756 Avgmfx86 - ok
15:44:04.0833 7756 [ 14FE36D8F2C6A2435275338D061A0B66 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
15:44:04.0849 7756 avgntflt - ok
15:44:04.0880 7756 [ F3D57358DE0B8B3491013C615754A7C7 ] Avgrkx86 C:\Windows\system32\DRIVERS\avgrkx86.sys
15:44:04.0896 7756 Avgrkx86 - ok
15:44:04.0927 7756 [ BA73B38E9033FC6018DB736B635706AE ] Avgtdix C:\Windows\system32\DRIVERS\avgtdix.sys
15:44:04.0958 7756 Avgtdix - ok
15:44:05.0005 7756 [ 740970262714E0575F23A917A2A53A31 ] avgtp C:\Windows\system32\drivers\avgtpx86.sys
15:44:05.0052 7756 avgtp - ok
15:44:05.0083 7756 [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] avgwd C:\Program Files\AVG\AVG2013\avgwdsvc.exe
15:44:05.0114 7756 avgwd - ok
15:44:05.0145 7756 [ 6D52060B59E7D79CD2A044B6ADD1F1EF ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
15:44:05.0176 7756 avipbb - ok
15:44:05.0208 7756 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
15:44:05.0301 7756 AxInstSV - ok
15:44:05.0364 7756 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
15:44:05.0426 7756 b06bdrv - ok
15:44:05.0473 7756 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
15:44:05.0566 7756 b57nd60x - ok
15:44:05.0629 7756 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
15:44:05.0707 7756 BDESVC - ok
15:44:05.0754 7756 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
15:44:05.0800 7756 Beep - ok
15:44:05.0863 7756 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
15:44:05.0925 7756 BFE - ok
15:44:05.0956 7756 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
15:44:06.0034 7756 BITS - ok
15:44:06.0050 7756 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
15:44:06.0097 7756 blbdrive - ok
15:44:06.0159 7756 [ CFD4C3352E29A8B729536648466E8DF5 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
15:44:06.0190 7756 Bonjour Service ( UnsignedFile.Multi.Generic ) - warning
15:44:06.0190 7756 Bonjour Service - detected UnsignedFile.Multi.Generic (1)
15:44:06.0222 7756 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
15:44:06.0300 7756 bowser - ok
15:44:06.0331 7756 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
15:44:06.0362 7756 BrFiltLo - ok
15:44:06.0378 7756 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
15:44:06.0440 7756 BrFiltUp - ok
15:44:06.0487 7756 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
15:44:06.0549 7756 Browser - ok
15:44:06.0612 7756 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
15:44:06.0658 7756 Brserid - ok
15:44:06.0674 7756 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
15:44:06.0721 7756 BrSerWdm - ok
15:44:06.0736 7756 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
15:44:06.0814 7756 BrUsbMdm - ok
15:44:06.0830 7756 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
15:44:06.0892 7756 BrUsbSer - ok
15:44:06.0924 7756 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
15:44:06.0955 7756 BTHMODEM - ok
15:44:07.0002 7756 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
15:44:07.0048 7756 bthserv - ok
15:44:07.0111 7756 [ FE69C498B922CE835E2E2123FBD0A272 ] ccEvtMgr C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
15:44:07.0126 7756 ccEvtMgr - ok
15:44:07.0142 7756 [ FE69C498B922CE835E2E2123FBD0A272 ] ccSetMgr C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
15:44:07.0158 7756 ccSetMgr - ok
15:44:07.0189 7756 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
15:44:07.0267 7756 cdfs - ok
15:44:07.0314 7756 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\drivers\cdrom.sys
15:44:07.0345 7756 cdrom - ok
15:44:07.0392 7756 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
15:44:07.0454 7756 CertPropSvc - ok
15:44:07.0516 7756 [ C82162949BBA6CC5D006C7BD008F3CF1 ] CFSvcs C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
15:44:07.0532 7756 CFSvcs ( UnsignedFile.Multi.Generic ) - warning
15:44:07.0532 7756 CFSvcs - detected UnsignedFile.Multi.Generic (1)
15:44:07.0579 7756 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
15:44:07.0626 7756 circlass - ok
15:44:07.0672 7756 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
15:44:07.0688 7756 CLFS - ok
15:44:07.0782 7756 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:44:07.0828 7756 clr_optimization_v2.0.50727_32 - ok
15:44:07.0891 7756 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:44:07.0984 7756 clr_optimization_v4.0.30319_32 - ok
15:44:08.0000 7756 [ FE69C498B922CE835E2E2123FBD0A272 ] CLTNetCnService C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
15:44:08.0016 7756 CLTNetCnService - ok
15:44:08.0047 7756 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
15:44:08.0125 7756 CmBatt - ok
15:44:08.0156 7756 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
15:44:08.0187 7756 cmdide - ok
15:44:08.0218 7756 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
15:44:08.0296 7756 CNG - ok
15:44:08.0343 7756 [ 3B38F3DEFD61DB294421993F969BC88F ] comHost C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
15:44:08.0359 7756 comHost - ok
15:44:08.0406 7756 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
15:44:08.0421 7756 Compbatt - ok
15:44:08.0468 7756 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
15:44:08.0484 7756 CompositeBus - ok
15:44:08.0499 7756 COMSysApp - ok
15:44:08.0530 7756 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
15:44:08.0546 7756 crcdisk - ok
15:44:08.0593 7756 [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc C:\Windows\system32\cryptsvc.dll
15:44:08.0655 7756 CryptSvc - ok
15:44:08.0686 7756 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
15:44:08.0749 7756 DcomLaunch - ok
15:44:08.0780 7756 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
15:44:08.0842 7756 defragsvc - ok
15:44:08.0889 7756 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
15:44:08.0952 7756 DfsC - ok
15:44:08.0998 7756 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
15:44:09.0061 7756 Dhcp - ok
15:44:09.0092 7756 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
15:44:09.0154 7756 discache - ok
15:44:09.0186 7756 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
15:44:09.0201 7756 Disk - ok
15:44:09.0232 7756 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
15:44:09.0264 7756 Dnscache - ok
15:44:09.0295 7756 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
15:44:09.0357 7756 dot3svc - ok
15:44:09.0404 7756 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
15:44:09.0451 7756 DPS - ok
15:44:09.0498 7756 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
15:44:09.0544 7756 drmkaud - ok
15:44:09.0591 7756 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
15:44:09.0638 7756 DXGKrnl - ok
15:44:09.0685 7756 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
15:44:09.0747 7756 EapHost - ok
15:44:09.0888 7756 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
15:44:09.0997 7756 ebdrv - ok
15:44:10.0012 7756 eeCtrl - ok
15:44:10.0044 7756 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
15:44:10.0527 7756 EFS - ok
15:44:11.0260 7756 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
15:44:12.0150 7756 ehRecvr - ok
15:44:12.0196 7756 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
15:44:12.0243 7756 ehSched - ok
15:44:12.0306 7756 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
15:44:12.0337 7756 elxstor - ok
15:44:12.0352 7756 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
15:44:12.0399 7756 ErrDev - ok
15:44:12.0446 7756 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
15:44:12.0508 7756 EventSystem - ok
15:44:12.0540 7756 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
15:44:12.0586 7756 exfat - ok
15:44:12.0618 7756 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
15:44:12.0664 7756 fastfat - ok
15:44:12.0727 7756 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
15:44:12.0789 7756 Fax - ok
15:44:12.0836 7756 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
15:44:12.0867 7756 fdc - ok
15:44:12.0898 7756 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
15:44:12.0961 7756 fdPHost - ok
15:44:12.0976 7756 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
15:44:13.0039 7756 FDResPub - ok
15:44:13.0054 7756 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
15:44:13.0086 7756 FileInfo - ok
15:44:13.0101 7756 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
15:44:13.0148 7756 Filetrace - ok
15:44:13.0257 7756 [ 167D24A045499EBEF438F231976158DF ] FirebirdServerMAGIXInstance C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
15:44:13.0304 7756 FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - warning
15:44:13.0304 7756 FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic (1)
15:44:13.0335 7756 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
15:44:13.0366 7756 flpydisk - ok
15:44:13.0413 7756 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
15:44:13.0444 7756 FltMgr - ok
15:44:13.0491 7756 [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache C:\Windows\system32\FntCache.dll
15:44:13.0554 7756 FontCache - ok
15:44:13.0632 7756 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
15:44:13.0663 7756 FontCache3.0.0.0 - ok
15:44:13.0678 7756 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
15:44:13.0694 7756 FsDepends - ok
15:44:13.0710 7756 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
15:44:13.0741 7756 Fs_Rec - ok
15:44:13.0772 7756 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
15:44:13.0803 7756 fvevol - ok
15:44:13.0850 7756 [ CBC22823628544735625B280665E434E ] FwLnk C:\Windows\system32\DRIVERS\FwLnk.sys
15:44:13.0897 7756 FwLnk - ok
15:44:13.0928 7756 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
15:44:13.0959 7756 gagp30kx - ok
15:44:13.0990 7756 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
15:44:14.0068 7756 gpsvc - ok
15:44:14.0146 7756 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
15:44:14.0162 7756 gupdate - ok
15:44:14.0178 7756 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
15:44:14.0193 7756 gupdatem - ok
15:44:14.0240 7756 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
15:44:14.0302 7756 hcw85cir - ok
15:44:14.0334 7756 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
15:44:14.0365 7756 HDAudBus - ok
15:44:14.0396 7756 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
15:44:14.0427 7756 HidBatt - ok
15:44:14.0443 7756 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
15:44:14.0490 7756 HidBth - ok
15:44:14.0536 7756 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
15:44:14.0568 7756 HidIr - ok
15:44:14.0614 7756 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
15:44:14.0661 7756 hidserv - ok
15:44:14.0708 7756 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\drivers\hidusb.sys
15:44:14.0739 7756 HidUsb - ok
15:44:14.0770 7756 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
15:44:14.0817 7756 hkmsvc - ok
15:44:14.0864 7756 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:44:14.0958 7756 HomeGroupListener - ok
15:44:14.0989 7756 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:44:15.0020 7756 HomeGroupProvider - ok
15:44:15.0067 7756 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
15:44:15.0082 7756 HpSAMD - ok
15:44:15.0145 7756 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
15:44:15.0192 7756 HTTP - ok
15:44:15.0238 7756 [ 1720966D9C7EA5E2D78B6DB92D2F9171 ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
15:44:15.0301 7756 hwdatacard - ok
15:44:15.0316 7756 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
15:44:15.0348 7756 hwpolicy - ok
15:44:15.0394 7756 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
15:44:15.0441 7756 i8042prt - ok
15:44:15.0472 7756 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
15:44:15.0504 7756 iaStorV - ok
15:44:15.0566 7756 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
15:44:15.0613 7756 idsvc - ok
15:44:15.0722 7756 [ 67070D3859BDE8EF7DBC995EBD49227E ] IDSvix86 C:\ProgramData\Symantec\Definitions\SymcData\idsdefs\20070108.003\IDSvix86.sys
15:44:15.0753 7756 IDSvix86 - ok
15:44:15.0800 7756 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
15:44:15.0816 7756 iirsp - ok
15:44:15.0862 7756 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
15:44:15.0940 7756 IKEEXT - ok
15:44:16.0050 7756 [ 97CAC2A7E92FFCB30C15101AB002ED30 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
15:44:16.0128 7756 IntcAzAudAddService - ok
15:44:16.0159 7756 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
15:44:16.0174 7756 intelide - ok
15:44:16.0206 7756 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
15:44:16.0252 7756 intelppm - ok
15:44:16.0284 7756 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
15:44:16.0330 7756 IPBusEnum - ok
15:44:16.0362 7756 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:44:16.0424 7756 IpFilterDriver - ok
15:44:16.0455 7756 [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
15:44:16.0502 7756 iphlpsvc - ok
15:44:16.0533 7756 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
15:44:16.0580 7756 IPMIDRV - ok
15:44:16.0596 7756 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
15:44:16.0658 7756 IPNAT - ok
15:44:16.0705 7756 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
15:44:16.0783 7756 IRENUM - ok
15:44:16.0798 7756 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
15:44:16.0830 7756 isapnp - ok
15:44:16.0861 7756 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
15:44:16.0876 7756 iScsiPrt - ok
15:44:16.0923 7756 [ 31E4D7875FF05D9F81C2ABDF48F51B11 ] ISPwdSvc C:\Program Files\Norton Internet Security\isPwdSvc.exe
15:44:16.0954 7756 ISPwdSvc - ok
15:44:17.0001 7756 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
15:44:17.0017 7756 kbdclass - ok
15:44:17.0064 7756 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
15:44:17.0095 7756 kbdhid - ok
15:44:17.0126 7756 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
15:44:17.0142 7756 KeyIso - ok
15:44:17.0204 7756 [ A383F2CEA0A8F4E76E71ABC869BD5748 ] KR10I C:\Windows\system32\drivers\kr10i.sys
15:44:17.0282 7756 KR10I - ok
15:44:17.0313 7756 [ 6E9922332386C2A49936B30B2B6FD298 ] KR10N C:\Windows\system32\drivers\kr10n.sys
15:44:17.0360 7756 KR10N - ok
15:44:17.0391 7756 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
15:44:17.0407 7756 KSecDD - ok
15:44:17.0438 7756 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
15:44:17.0454 7756 KSecPkg - ok
15:44:17.0516 7756 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
15:44:17.0578 7756 KtmRm - ok
15:44:17.0625 7756 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll
15:44:17.0688 7756 LanmanServer - ok
15:44:17.0719 7756 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:44:17.0781 7756 LanmanWorkstation - ok
15:44:17.0890 7756 [ F3CB12A5791761EBCA4C7BA5FC89F5C2 ] LiveUpdate C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE
15:44:17.0984 7756 LiveUpdate - ok
15:44:18.0031 7756 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
15:44:18.0093 7756 lltdio - ok
15:44:18.0140 7756 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
15:44:18.0171 7756 lltdsvc - ok
15:44:18.0202 7756 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
15:44:18.0249 7756 lmhosts - ok
15:44:18.0296 7756 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
15:44:18.0312 7756 LSI_FC - ok
15:44:18.0327 7756 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
15:44:18.0358 7756 LSI_SAS - ok
15:44:18.0390 7756 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
15:44:18.0405 7756 LSI_SAS2 - ok
15:44:18.0421 7756 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
15:44:18.0452 7756 LSI_SCSI - ok
15:44:18.0468 7756 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
15:44:18.0514 7756 luafv - ok
15:44:18.0546 7756 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
15:44:18.0577 7756 Mcx2Svc - ok
15:44:18.0592 7756 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
15:44:18.0624 7756 megasas - ok
15:44:18.0655 7756 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
15:44:18.0686 7756 MegaSR - ok
15:44:18.0717 7756 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
15:44:18.0764 7756 MMCSS - ok
15:44:18.0795 7756 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
15:44:18.0842 7756 Modem - ok
15:44:18.0889 7756 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
15:44:18.0936 7756 monitor - ok
15:44:18.0967 7756 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\drivers\mouclass.sys
15:44:18.0982 7756 mouclass - ok
15:44:19.0014 7756 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
15:44:19.0045 7756 mouhid - ok
15:44:19.0076 7756 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
15:44:19.0092 7756 mountmgr - ok
15:44:19.0123 7756 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
15:44:19.0154 7756 mpio - ok
15:44:19.0185 7756 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
15:44:19.0248 7756 mpsdrv - ok
15:44:19.0294 7756 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
15:44:19.0357 7756 MpsSvc - ok
15:44:19.0404 7756 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
15:44:19.0435 7756 MRxDAV - ok
15:44:19.0482 7756 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
15:44:19.0513 7756 mrxsmb - ok
15:44:19.0544 7756 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:44:19.0575 7756 mrxsmb10 - ok
15:44:19.0606 7756 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:44:19.0622 7756 mrxsmb20 - ok
15:44:19.0653 7756 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
15:44:19.0669 7756 msahci - ok
15:44:19.0669 7756 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
15:44:19.0700 7756 msdsm - ok
15:44:19.0731 7756 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
15:44:19.0778 7756 MSDTC - ok
15:44:19.0825 7756 [ 114B67C324D64C8195FD3BF93B4DF02A ] MSDV C:\Windows\system32\DRIVERS\msdv.sys
15:44:19.0872 7756 MSDV - ok
15:44:19.0903 7756 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
15:44:19.0950 7756 Msfs - ok
15:44:19.0965 7756 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
15:44:20.0012 7756 mshidkmdf - ok
15:44:20.0043 7756 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
15:44:20.0074 7756 msisadrv - ok
15:44:20.0121 7756 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
15:44:20.0168 7756 MSiSCSI - ok
15:44:20.0184 7756 msiserver - ok
15:44:20.0215 7756 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
15:44:20.0262 7756 MSKSSRV - ok
15:44:20.0308 7756 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
15:44:20.0371 7756 MSPCLOCK - ok
15:44:20.0402 7756 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
15:44:20.0449 7756 MSPQM - ok
15:44:20.0464 7756 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
15:44:20.0496 7756 MsRPC - ok
15:44:20.0527 7756 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
15:44:20.0542 7756 mssmbios - ok
15:44:20.0574 7756 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
15:44:20.0620 7756 MSTEE - ok
15:44:20.0636 7756 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
15:44:20.0667 7756 MTConfig - ok
15:44:20.0698 7756 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
15:44:20.0714 7756 Mup - ok
15:44:20.0761 7756 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
15:44:20.0823 7756 napagent - ok
15:44:20.0870 7756 NasPmService - ok
15:44:20.0917 7756 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
15:44:20.0948 7756 NativeWifiP - ok
15:44:21.0010 7756 [ A6F5AB84104412CD9742E7EE942EA08D ] NAVENG C:\ProgramData\Symantec\Definitions\VirusDefs\20070913.017\NAVENG.SYS
15:44:21.0042 7756 NAVENG - ok
15:44:21.0088 7756 [ C8069BF95363A58441CB33E4B989DD4F ] NAVEX15 C:\ProgramData\Symantec\Definitions\VirusDefs\20070913.017\NAVEX15.SYS
15:44:21.0135 7756 NAVEX15 - ok
15:44:21.0463 7756 [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS C:\Windows\system32\drivers\ndis.sys
15:44:21.0494 7756 NDIS - ok
15:44:21.0556 7756 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
15:44:21.0588 7756 NdisCap - ok
15:44:21.0619 7756 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
15:44:21.0681 7756 NdisTapi - ok
15:44:21.0697 7756 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
15:44:21.0759 7756 Ndisuio - ok
15:44:21.0790 7756 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
15:44:21.0853 7756 NdisWan - ok
15:44:21.0900 7756 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
15:44:21.0962 7756 NDProxy - ok
15:44:21.0993 7756 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
15:44:22.0056 7756 NetBIOS - ok
15:44:22.0087 7756 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
15:44:22.0149 7756 NetBT - ok
15:44:22.0180 7756 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
15:44:22.0196 7756 Netlogon - ok
15:44:22.0758 7756 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
15:44:23.0335 7756 Netman - ok
15:44:23.0382 7756 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
15:44:23.0428 7756 netprofm - ok
15:44:23.0460 7756 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:44:23.0475 7756 NetTcpPortSharing - ok
15:44:23.0522 7756 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
15:44:23.0553 7756 nfrd960 - ok
15:44:23.0694 7756 [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc C:\Windows\System32\nlasvc.dll
15:44:23.0740 7756 NlaSvc - ok
15:44:23.0787 7756 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
15:44:23.0834 7756 Npfs - ok
15:44:23.0865 7756 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
15:44:23.0896 7756 nsi - ok
15:44:23.0912 7756 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
15:44:23.0974 7756 nsiproxy - ok
15:44:24.0037 7756 [ 81189C3D7763838E55C397759D49007A ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
15:44:24.0099 7756 Ntfs - ok
15:44:24.0130 7756 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
15:44:24.0193 7756 Null - ok
15:44:24.0240 7756 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
15:44:24.0255 7756 nvraid - ok
15:44:24.0286 7756 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
15:44:24.0302 7756 nvstor - ok
15:44:24.0333 7756 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
15:44:24.0349 7756 nv_agp - ok
15:44:24.0380 7756 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
15:44:24.0411 7756 ohci1394 - ok
15:44:24.0458 7756 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:44:24.0474 7756 ose - ok
15:44:24.0723 7756 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
15:44:24.0801 7756 p2pimsvc - ok
15:44:24.0817 7756 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
15:44:24.0848 7756 p2psvc - ok
15:44:24.0895 7756 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
15:44:24.0942 7756 Parport - ok
15:44:24.0973 7756 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
15:44:25.0004 7756 partmgr - ok
15:44:25.0020 7756 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
15:44:25.0051 7756 Parvdm - ok
15:44:25.0082 7756 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
15:44:25.0113 7756 PcaSvc - ok
15:44:25.0144 7756 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
15:44:25.0176 7756 pci - ok
15:44:25.0191 7756 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
15:44:25.0207 7756 pciide - ok
15:44:25.0254 7756 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
15:44:25.0285 7756 pcmcia - ok
15:44:25.0300 7756 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
15:44:25.0316 7756 pcw - ok
15:44:25.0347 7756 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
15:44:25.0425 7756 PEAUTH - ok
15:44:25.0519 7756 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
15:44:25.0597 7756 pla - ok
15:44:25.0659 7756 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
15:44:25.0722 7756 PlugPlay - ok
15:44:25.0800 7756 [ 63694C307273062A2167AE4CE80730EF ] PMBDeviceInfoProvider C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
15:44:25.0909 7756 PMBDeviceInfoProvider - ok
15:44:25.0940 7756 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
15:44:25.0987 7756 PNRPAutoReg - ok
15:44:26.0018 7756 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
15:44:26.0034 7756 PNRPsvc - ok
15:44:26.0080 7756 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
15:44:26.0158 7756 PolicyAgent - ok
15:44:26.0190 7756 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
15:44:26.0236 7756 Power - ok
15:44:26.0283 7756 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
15:44:26.0346 7756 PptpMiniport - ok
15:44:26.0361 7756 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
15:44:26.0408 7756 Processor - ok
15:44:26.0439 7756 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
15:44:26.0502 7756 ProfSvc - ok
15:44:26.0517 7756 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
15:44:26.0533 7756 ProtectedStorage - ok
15:44:26.0564 7756 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
15:44:26.0611 7756 Psched - ok
15:44:26.0673 7756 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
15:44:26.0736 7756 ql2300 - ok
15:44:26.0751 7756 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
15:44:26.0767 7756 ql40xx - ok
15:44:26.0814 7756 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
15:44:26.0845 7756 QWAVE - ok
15:44:26.0860 7756 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
15:44:26.0892 7756 QWAVEdrv - ok
15:44:26.0907 7756 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
15:44:26.0970 7756 RasAcd - ok
15:44:27.0001 7756 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
15:44:27.0063 7756 RasAgileVpn - ok
15:44:27.0079 7756 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
15:44:27.0126 7756 RasAuto - ok
15:44:27.0173 7756 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
15:44:27.0219 7756 Rasl2tp - ok
15:44:27.0282 7756 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
15:44:27.0344 7756 RasMan - ok
15:44:27.0516 7756 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
15:44:27.0578 7756 RasPppoe - ok
15:44:27.0594 7756 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
15:44:27.0641 7756 RasSstp - ok
15:44:27.0687 7756 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
15:44:27.0734 7756 rdbss - ok
15:44:27.0765 7756 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
15:44:27.0797 7756 rdpbus - ok
15:44:27.0828 7756 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
15:44:27.0859 7756 RDPCDD - ok
15:44:27.0890 7756 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
15:44:27.0953 7756 RDPENCDD - ok
15:44:27.0984 7756 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
15:44:28.0015 7756 RDPREFMP - ok
15:44:28.0046 7756 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
15:44:28.0109 7756 RDPWD - ok
15:44:28.0140 7756 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
15:44:28.0171 7756 rdyboost - ok
15:44:28.0218 7756 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
15:44:28.0280 7756 RemoteAccess - ok
15:44:28.0311 7756 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
15:44:28.0811 7756 RemoteRegistry - ok
15:44:29.0247 7756 [ 355AAC141B214BEF1DBC1483AFD9BD50 ] rimmptsk C:\Windows\system32\DRIVERS\rimmptsk.sys
15:44:29.0325 7756 rimmptsk - ok
15:44:29.0840 7756 [ A4216C71DD4F60B26418CCFD99CD0815 ] rimsptsk C:\Windows\system32\DRIVERS\rimsptsk.sys
15:44:29.0887 7756 rimsptsk - ok
15:44:29.0934 7756 [ D231B577024AA324AF13A42F3A807D10 ] rismxdp C:\Windows\system32\DRIVERS\rixdptsk.sys
15:44:29.0965 7756 rismxdp - ok
15:44:30.0012 7756 [ 564297827D213F52C7A3A2FF749568CA ] ROOTMODEM C:\Windows\system32\Drivers\RootMdm.sys
15:44:30.0059 7756 ROOTMODEM - ok
15:44:30.0090 7756 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
15:44:30.0152 7756 RpcEptMapper - ok
15:44:30.0183 7756 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
15:44:30.0230 7756 RpcLocator - ok
15:44:30.0261 7756 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
15:44:30.0308 7756 RpcSs - ok
15:44:30.0324 7756 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
15:44:30.0371 7756 rspndr - ok
15:44:30.0417 7756 [ 7DFD48E24479B68B258D8770121155A0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
15:44:30.0449 7756 RTL8167 - ok
15:44:30.0511 7756 [ CA5A4FBFE341F13733955B8AAC98F0B5 ] RTL8187B C:\Windows\system32\DRIVERS\RTL8187B.sys
15:44:30.0558 7756 RTL8187B - ok
15:44:30.0589 7756 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
15:44:30.0605 7756 SamSs - ok
15:44:30.0636 7756 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
15:44:30.0667 7756 sbp2port - ok
15:44:30.0714 7756 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
15:44:30.0776 7756 SCardSvr - ok
15:44:30.0807 7756 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
15:44:30.0854 7756 scfilter - ok
15:44:30.0917 7756 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
15:44:30.0979 7756 Schedule - ok
15:44:31.0010 7756 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
15:44:31.0041 7756 SCPolicySvc - ok
15:44:31.0073 7756 [ 0328BE1C7F1CBA23848179F8762E391C ] sdbus C:\Windows\system32\drivers\sdbus.sys
15:44:31.0119 7756 sdbus - ok
15:44:31.0151 7756 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
15:44:31.0229 7756 SDRSVC - ok
15:44:31.0275 7756 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
15:44:31.0322 7756 secdrv - ok
15:44:31.0650 7756 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
15:44:31.0712 7756 seclogon - ok
15:44:31.0759 7756 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
15:44:31.0790 7756 SENS - ok
15:44:31.0837 7756 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
15:44:31.0884 7756 SensrSvc - ok
15:44:31.0899 7756 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
15:44:31.0931 7756 Serenum - ok
15:44:31.0946 7756 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
15:44:31.0993 7756 Serial - ok
15:44:32.0024 7756 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
15:44:32.0071 7756 sermouse - ok
15:44:32.0118 7756 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
15:44:32.0180 7756 SessionEnv - ok
15:44:32.0196 7756 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
15:44:32.0258 7756 sffdisk - ok
15:44:32.0274 7756 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
15:44:32.0305 7756 sffp_mmc - ok
15:44:32.0321 7756 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
15:44:32.0352 7756 sffp_sd - ok
15:44:32.0383 7756 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
15:44:32.0399 7756 sfloppy - ok
15:44:32.0445 7756 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
15:44:32.0508 7756 SharedAccess - ok
15:44:32.0539 7756 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:44:32.0601 7756 ShellHWDetection - ok
15:44:32.0648 7756 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
15:44:32.0664 7756 sisagp - ok
15:44:32.0711 7756 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
15:44:32.0726 7756 SiSRaid2 - ok
15:44:32.0742 7756 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
15:44:32.0773 7756 SiSRaid4 - ok
15:44:32.0835 7756 [ 8C4F0DCC6A5100D48F9B2F950CDD220F ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
15:44:32.0867 7756 SkypeUpdate - ok
15:44:32.0898 7756 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
15:44:32.0945 7756 Smb - ok
15:44:32.0991 7756 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
15:44:33.0023 7756 SNMPTRAP - ok
15:44:33.0101 7756 [ 0FDE4B4895D4691C4482CA67FA532BE0 ] SPBBCDrv C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys
15:44:33.0132 7756 SPBBCDrv - ok
15:44:33.0179 7756 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
15:44:33.0194 7756 spldr - ok
15:44:33.0225 7756 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
15:44:33.0272 7756 Spooler - ok
15:44:33.0397 7756 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
15:44:33.0506 7756 sppsvc - ok
15:44:33.0537 7756 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
15:44:33.0600 7756 sppuinotify - ok
15:44:33.0631 7756 [ ED5E9F3BF11D0BB770F652B22EC26465 ] SRTSP C:\Windows\system32\Drivers\SRTSP.SYS
15:44:33.0662 7756 SRTSP - ok
15:44:33.0678 7756 [ C70A2581E35E03C85F29AA1BC723659A ] SRTSPL C:\Windows\system32\Drivers\SRTSPL.SYS
15:44:33.0709 7756 SRTSPL - ok
15:44:33.0725 7756 [ 05F2DB228922E6B8A001ED83EE4D1153 ] SRTSPX C:\Windows\system32\Drivers\SRTSPX.SYS
15:44:33.0756 7756 SRTSPX - ok
15:44:33.0771 7756 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
15:44:33.0834 7756 srv - ok
15:44:33.0849 7756 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
15:44:33.0896 7756 srv2 - ok
15:44:33.0912 7756 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
15:44:33.0943 7756 srvnet - ok
15:44:33.0990 7756 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
15:44:34.0037 7756 SSDPSRV - ok
15:44:34.0052 7756 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
15:44:34.0115 7756 SstpSvc - ok
15:44:34.0146 7756 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
15:44:34.0161 7756 stexstor - ok
15:44:34.0208 7756 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
15:44:34.0255 7756 StiSvc - ok
15:44:34.0271 7756 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
15:44:34.0302 7756 swenum - ok
15:44:34.0349 7756 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
15:44:34.0395 7756 swprv - ok
15:44:34.0458 7756 [ 43CFCA936D211BF7F1CDE1DDF807CB76 ] Symantec Core LC C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
15:44:34.0505 7756 Symantec Core LC - ok
15:44:34.0551 7756 [ EFF5C2A0A06BCBFC5CF931C00CF6146D ] SymAppCore C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
15:44:34.0567 7756 SymAppCore - ok
15:44:34.0598 7756 [ 403BD24FA5C55FC648ABDD039629A954 ] SymEvent C:\Windows\system32\Drivers\SYMEVENT.SYS
15:44:34.0629 7756 SymEvent - ok
15:44:34.0645 7756 [ 829830A3CA1C5E329D68E26C9CD2DE8D ] SYMREDRV C:\Windows\System32\Drivers\SYMREDRV.SYS
15:44:34.0661 7756 SYMREDRV - ok
15:44:34.0692 7756 [ B1AA9704124B494C34E8D372E6654196 ] SYMTDI C:\Windows\System32\Drivers\SYMTDI.SYS
15:44:34.0707 7756 SYMTDI - ok
15:44:34.0754 7756 [ 11F730BF0D0AA4FE7DE7138A32A52422 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
15:44:34.0785 7756 SynTP - ok
15:44:35.0097 7756 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
15:44:35.0160 7756 SysMain - ok
15:44:35.0175 7756 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:44:35.0207 7756 TabletInputService - ok
15:44:35.0253 7756 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
15:44:35.0316 7756 TapiSrv - ok
15:44:35.0347 7756 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
15:44:35.0409 7756 TBS - ok
15:44:35.0487 7756 [ A5EBB8F648000E88B7D9390B514976BF ] Tcpip C:\Windows\system32\drivers\tcpip.sys
15:44:35.0534 7756 Tcpip - ok
15:44:35.0581 7756 [ A5EBB8F648000E88B7D9390B514976BF ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
15:44:35.0628 7756 TCPIP6 - ok
15:44:35.0659 7756 [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
15:44:35.0721 7756 tcpipreg - ok
15:44:35.0753 7756 [ 1825BCEB47BF41C5A9F0E44DE82FC27A ] tdcmdpst C:\Windows\system32\DRIVERS\tdcmdpst.sys
15:44:35.0815 7756 tdcmdpst - ok
15:44:35.0846 7756 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
15:44:35.0924 7756 TDPIPE - ok
15:44:35.0924 7756 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
15:44:35.0955 7756 TDTCP - ok
15:44:35.0987 7756 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
15:44:36.0033 7756 tdx - ok
15:44:36.0065 7756 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
15:44:36.0080 7756 TermDD - ok
15:44:36.0127 7756 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
15:44:36.0189 7756 TermService - ok
15:44:36.0221 7756 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
15:44:36.0252 7756 Themes - ok
15:44:36.0267 7756 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
15:44:36.0314 7756 THREADORDER - ok
15:44:36.0408 7756 [ 804FED244FC47642CC635236D47A67D4 ] TNaviSrv C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
15:44:36.0423 7756 TNaviSrv ( UnsignedFile.Multi.Generic ) - warning
15:44:36.0423 7756 TNaviSrv - detected UnsignedFile.Multi.Generic (1)
15:44:36.0470 7756 [ D540858E65BFA6FDED41AD2495ECE344 ] TODDSrv C:\Windows\system32\TODDSrv.exe
15:44:36.0486 7756 TODDSrv ( UnsignedFile.Multi.Generic ) - warning
15:44:36.0486 7756 TODDSrv - detected UnsignedFile.Multi.Generic (1)
15:44:36.0548 7756 [ 6A54C28B53C6B50D333C8EE974C6B208 ] TosCoSrv C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
15:44:36.0579 7756 TosCoSrv - ok
15:44:36.0813 7756 [ F95208D35A9667C58CF8122EE22805A6 ] TOSHIBA Bluetooth Service C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
15:44:36.0829 7756 TOSHIBA Bluetooth Service - ok
15:44:36.0860 7756 [ 90AFA1A4451BBBEE87C9F18A665D8121 ] tosporte C:\Windows\system32\DRIVERS\tosporte.sys
15:44:36.0876 7756 tosporte - ok
15:44:36.0938 7756 [ 490A76AB428F34EA676A23E429DD6DA4 ] tosrfbd C:\Windows\system32\DRIVERS\tosrfbd.sys
15:44:36.0969 7756 tosrfbd - ok
15:44:36.0985 7756 [ 75CD3C238A0FFC66C4581C3870C09314 ] tosrfbnp C:\Windows\system32\Drivers\tosrfbnp.sys
15:44:37.0001 7756 tosrfbnp - ok
15:44:37.0032 7756 [ B551D3F266DDA311256F963E8CFD1E9B ] Tosrfcom C:\Windows\system32\Drivers\tosrfcom.sys
15:44:37.0047 7756 Tosrfcom - ok
15:44:37.0079 7756 [ 51BAA142744E236C3A886479CAD99A06 ] tosrfec C:\Windows\system32\DRIVERS\tosrfec.sys
15:44:37.0094 7756 tosrfec - ok
15:44:37.0094 7756 [ F3E8762163EE87F3AC95537584CF5B4F ] Tosrfhid C:\Windows\system32\DRIVERS\Tosrfhid.sys
15:44:37.0125 7756 Tosrfhid - ok
15:44:37.0141 7756 [ B2A1A6538245FD69578224BBF2FD4677 ] tosrfnds C:\Windows\system32\DRIVERS\tosrfnds.sys
15:44:37.0172 7756 tosrfnds - ok
15:44:37.0188 7756 [ 3DE5CBB4F8EB64563CE08E8EC7458D03 ] TosRfSnd C:\Windows\system32\drivers\tosrfsnd.sys
15:44:37.0250 7756 TosRfSnd - ok
15:44:37.0266 7756 [ AF5126FB6E9ED41C99AB7A10E98729CD ] tosrfusb C:\Windows\system32\DRIVERS\tosrfusb.sys
15:44:37.0281 7756 tosrfusb - ok
15:44:37.0328 7756 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
15:44:37.0359 7756 TrkWks - ok
15:44:37.0422 7756 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:44:37.0469 7756 TrustedInstaller - ok
15:44:37.0500 7756 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
15:44:37.0562 7756 tssecsrv - ok
15:44:37.0609 7756 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
15:44:37.0656 7756 TsUsbFlt - ok
15:44:37.0718 7756 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
15:44:37.0765 7756 tunnel - ok
15:44:37.0827 7756 [ 792A8B80F8188ABA4B2BE271583F3E46 ] TVALZ C:\Windows\system32\DRIVERS\TVALZ_O.SYS
15:44:37.0843 7756 TVALZ - ok
15:44:37.0874 7756 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
15:44:37.0905 7756 uagp35 - ok
15:44:37.0921 7756 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
15:44:37.0983 7756 udfs - ok
15:44:38.0030 7756 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
15:44:38.0077 7756 UI0Detect - ok
15:44:38.0124 7756 [ 332D341D92B933600D41953B08360DFB ] UleadBurningHelper C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
15:44:38.0139 7756 UleadBurningHelper ( UnsignedFile.Multi.Generic ) - warning
15:44:38.0139 7756 UleadBurningHelper - detected UnsignedFile.Multi.Generic (1)
15:44:38.0171 7756 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
15:44:38.0186 7756 uliagpkx - ok
15:44:38.0233 7756 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
15:44:38.0264 7756 umbus - ok
15:44:38.0295 7756 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
15:44:38.0327 7756 UmPass - ok
15:44:38.0358 7756 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
15:44:38.0420 7756 upnphost - ok
15:44:38.0451 7756 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
15:44:38.0514 7756 usbccgp - ok
15:44:38.0561 7756 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
15:44:38.0592 7756 usbcir - ok
15:44:38.0607 7756 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
15:44:38.0639 7756 usbehci - ok
15:44:38.0685 7756 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
15:44:38.0717 7756 usbhub - ok
15:44:38.0748 7756 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
15:44:38.0795 7756 usbohci - ok
15:44:38.0826 7756 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
15:44:38.0841 7756 usbprint - ok
15:44:38.0888 7756 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
15:44:38.0935 7756 usbscan - ok
15:44:38.0951 7756 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:44:39.0029 7756 USBSTOR - ok
15:44:39.0044 7756 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
15:44:39.0075 7756 usbuhci - ok
15:44:39.0107 7756 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
15:44:39.0153 7756 usbvideo - ok
15:44:39.0200 7756 [ 9D19B042A4FD5C02195071EA2FE0C821 ] usnjsvc C:\Program Files\Windows Live\Messenger\usnsvc.exe
15:44:39.0231 7756 usnjsvc - ok
15:44:39.0247 7756 [ 3B929A72AAEA96DC0150D3A6DA268C89 ] UVCFTR C:\Windows\system32\Drivers\UVCFTR_S.SYS
15:44:39.0294 7756 UVCFTR - ok
15:44:39.0356 7756 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
15:44:39.0403 7756 UxSms - ok
15:44:39.0419 7756 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
15:44:39.0450 7756 VaultSvc - ok
15:44:39.0465 7756 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
15:44:39.0481 7756 vdrvroot - ok
15:44:39.0528 7756 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
15:44:39.0606 7756 vds - ok
15:44:39.0637 7756 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
15:44:39.0653 7756 vga - ok
15:44:39.0668 7756 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
15:44:39.0715 7756 VgaSave - ok
15:44:39.0746 7756 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
15:44:39.0762 7756 vhdmp - ok
15:44:39.0809 7756 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
15:44:39.0824 7756 viaagp - ok
15:44:39.0855 7756 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
15:44:39.0887 7756 ViaC7 - ok
15:44:39.0933 7756 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
15:44:39.0949 7756 viaide - ok
15:44:39.0996 7756 [ 5F974FDE801C73952770736BECDE11E7 ] Viewpoint Manager Service C:\Program Files\Viewpoint\Common\ViewpointService.exe
15:44:40.0011 7756 Viewpoint Manager Service ( UnsignedFile.Multi.Generic ) - warning
15:44:40.0011 7756 Viewpoint Manager Service - detected UnsignedFile.Multi.Generic (1)
15:44:40.0043 7756 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
15:44:40.0058 7756 volmgr - ok
15:44:40.0105 7756 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
15:44:40.0370 7756 volmgrx - ok
15:44:40.0776 7756 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
15:44:41.0010 7756 volsnap - ok
15:44:41.0478 7756 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
15:44:41.0509 7756 vsmraid - ok
15:44:41.0883 7756 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
15:44:41.0977 7756 VSS - ok
15:44:42.0102 7756 [ 50D3941555FEFDF46424431702EC5FB6 ] vToolbarUpdater14.0.1 C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe
15:44:42.0149 7756 vToolbarUpdater14.0.1 - ok
15:44:42.0164 7756 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
15:44:42.0195 7756 vwifibus - ok
15:44:42.0242 7756 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
15:44:42.0305 7756 W32Time - ok
15:44:42.0336 7756 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
15:44:42.0367 7756 WacomPen - ok
15:44:42.0414 7756 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
15:44:42.0476 7756 WANARP - ok
15:44:42.0476 7756 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
15:44:42.0523 7756 Wanarpv6 - ok
15:44:42.0585 7756 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
15:44:42.0695 7756 wbengine - ok
15:44:42.0726 7756 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
15:44:42.0773 7756 WbioSrvc - ok
15:44:42.0819 7756 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
15:44:42.0866 7756 wcncsvc - ok
15:44:42.0897 7756 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:44:42.0960 7756 WcsPlugInService - ok
15:44:42.0991 7756 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
15:44:43.0007 7756 Wd - ok
15:44:43.0053 7756 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
15:44:43.0085 7756 Wdf01000 - ok
15:44:43.0116 7756 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
15:44:43.0209 7756 WdiServiceHost - ok
15:44:43.0209 7756 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
15:44:43.0241 7756 WdiSystemHost - ok
15:44:43.0272 7756 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll
15:44:43.0303 7756 WebClient - ok
15:44:43.0319 7756 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
15:44:43.0365 7756 Wecsvc - ok
15:44:43.0381 7756 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
15:44:43.0428 7756 wercplsupport - ok
15:44:43.0475 7756 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
15:44:43.0537 7756 WerSvc - ok
15:44:43.0568 7756 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
15:44:43.0599 7756 WfpLwf - ok
15:44:43.0615 7756 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
15:44:43.0646 7756 WIMMount - ok
15:44:43.0724 7756 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
15:44:43.0787 7756 WinDefend - ok
15:44:43.0802 7756 WinHttpAutoProxySvc - ok
15:44:43.0896 7756 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
15:44:43.0927 7756 Winmgmt - ok
15:44:43.0989 7756 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
15:44:44.0083 7756 WinRM - ok
15:44:44.0161 7756 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
15:44:44.0208 7756 Wlansvc - ok
15:44:44.0270 7756 [ 94A85E956A065E23E0010A6A7826243B ] WLSetupSvc C:\Program Files\Windows Live\installer\WLSetupSvc.exe
15:44:44.0286 7756 WLSetupSvc ( UnsignedFile.Multi.Generic ) - warning
15:44:44.0286 7756 WLSetupSvc - detected UnsignedFile.Multi.Generic (1)
15:44:44.0333 7756 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
15:44:44.0348 7756 WmiAcpi - ok
15:44:44.0395 7756 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
15:44:44.0426 7756 wmiApSrv - ok
15:44:44.0551 7756 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
15:44:44.0645 7756 WMPNetworkSvc - ok
15:44:44.0676 7756 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
15:44:44.0754 7756 WPCSvc - ok
15:44:44.0769 7756 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
15:44:44.0832 7756 WPDBusEnum - ok
15:44:44.0879 7756 WPFFontCache_v0400 - ok
15:44:44.0910 7756 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
15:44:44.0972 7756 ws2ifsl - ok
15:44:45.0003 7756 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
15:44:45.0050 7756 wscsvc - ok
15:44:45.0066 7756 WSearch - ok
15:44:45.0159 7756 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
15:44:45.0222 7756 wuauserv - ok
15:44:45.0253 7756 [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
15:44:45.0300 7756 WudfPf - ok
15:44:45.0331 7756 [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
15:44:45.0378 7756 WUDFRd - ok
15:44:45.0393 7756 [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
15:44:45.0456 7756 wudfsvc - ok
15:44:45.0487 7756 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
15:44:45.0518 7756 WwanSvc - ok
15:44:45.0549 7756 ================ Scan global ===============================
15:44:45.0581 7756 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
15:44:45.0612 7756 [ 93F86C5CCC37D70EA09CE5E76F3E4338 ] C:\Windows\system32\winsrv.dll
15:44:45.0627 7756 [ 93F86C5CCC37D70EA09CE5E76F3E4338 ] C:\Windows\system32\winsrv.dll
15:44:45.0674 7756 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
15:44:45.0705 7756 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
15:44:45.0721 7756 [Global] - ok
15:44:45.0721 7756 ================ Scan MBR ==================================
15:44:45.0737 7756 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:44:46.0142 7756 \Device\Harddisk0\DR0 - ok
15:44:46.0142 7756 ================ Scan VBR ==================================
15:44:46.0142 7756 [ A004D365BEDFFAB321DB5EC6255868C2 ] \Device\Harddisk0\DR0\Partition1
15:44:46.0142 7756 \Device\Harddisk0\DR0\Partition1 - ok
15:44:46.0173 7756 [ 079B7AF248A5C624F5B42F471C79D45D ] \Device\Harddisk0\DR0\Partition2
15:44:46.0173 7756 \Device\Harddisk0\DR0\Partition2 - ok
15:44:46.0173 7756 ============================================================
15:44:46.0173 7756 Scan finished
15:44:46.0173 7756 ============================================================
15:44:46.0189 9156 Detected object count: 11
15:44:46.0189 9156 Actual detected object count: 11
15:45:18.0809 9156 AntiVirSchedulerService ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0809 9156 AntiVirSchedulerService ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0809 9156 AntiVirService ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0809 9156 AntiVirService ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0809 9156 Apple Mobile Device ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0809 9156 Apple Mobile Device ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0824 9156 Bonjour Service ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0824 9156 Bonjour Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0824 9156 CFSvcs ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0824 9156 CFSvcs ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0824 9156 FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0824 9156 FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0824 9156 TNaviSrv ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0824 9156 TNaviSrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0824 9156 TODDSrv ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0824 9156 TODDSrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0840 9156 UleadBurningHelper ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0840 9156 UleadBurningHelper ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0840 9156 Viewpoint Manager Service ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0840 9156 Viewpoint Manager Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:45:18.0840 9156 WLSetupSvc ( UnsignedFile.Multi.Generic ) - skipped by user
15:45:18.0840 9156 WLSetupSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip

muss ich den Rechner noch neustarten oder kann ich das Programm einfach wieder schließen?

markusg · 31.01.2013, 18:03

programm schließen bitte
combofix:

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Carrab17 · 31.01.2013, 18:56

hab meinen Virenschutz wieder aktiviert, hier ist die Logfile:

Combofix Logfile:

Code:

ATTFilter

ComboFix 13-01-31.01 - Carmen 31.01.2013  18:21:37.1.2 - x86
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.1918.989 [GMT 1:00]
ausgeführt von:: e:\daten\Carmen\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
AV: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Carmen\AppData\Local\Temp\ppcrlui_6036_2
c:\users\Public\Favorites\mxfilerelatedcache.mxc2
c:\users\Public\invokesi.exe
c:\windows\system32\pt
c:\windows\system32\pt\toscdspd.cpl.mui
e:\daten\Carmen\Documents\~WRL3402.tmp
e:\daten\Carmen\Favorites\mxfilerelatedcache.mxc2
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_usnjsvc
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-12-28 bis 2013-01-31  ))))))))))))))))))))))))))))))
.
.
2013-01-31 17:32 . 2013-01-31 17:32	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2013-01-27 12:28 . 2013-01-27 12:28	--------	d-----w-	c:\program files\Common Files\Skype
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-15 12:52 . 2012-09-09 13:37	31576	----a-w-	c:\windows\system32\drivers\avgtpx86.sys
2012-12-16 14:13 . 2012-12-31 09:49	295424	----a-w-	c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-31 09:49	34304	----a-w-	c:\windows\system32\atmlib.dll
2012-12-04 16:48 . 2009-07-14 02:05	152576	----a-w-	c:\windows\system32\msclmd.dll
2012-11-23 02:56 . 2013-01-09 22:36	2345984	----a-w-	c:\windows\system32\win32k.sys
2012-11-23 02:48 . 2013-01-09 16:03	49152	----a-w-	c:\windows\system32\taskhost.exe
2012-11-20 04:51 . 2013-01-09 16:03	220160	----a-w-	c:\windows\system32\ncrypt.dll
2012-11-15 22:33 . 2012-11-15 22:33	94048	----a-w-	c:\windows\system32\drivers\avgmfx86.sys
2012-11-14 02:09 . 2012-12-13 16:19	1800704	----a-w-	c:\windows\system32\jscript9.dll
2012-11-14 01:58 . 2012-12-13 16:19	1427968	----a-w-	c:\windows\system32\inetcpl.cpl
2012-11-14 01:57 . 2012-12-13 16:19	1129472	----a-w-	c:\windows\system32\wininet.dll
2012-11-14 01:49 . 2012-12-13 16:19	142848	----a-w-	c:\windows\system32\ieUnatt.exe
2012-11-14 01:48 . 2012-12-13 16:19	420864	----a-w-	c:\windows\system32\vbscript.dll
2012-11-14 01:44 . 2012-12-13 16:19	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2012-11-09 04:43 . 2013-01-09 22:34	492032	----a-w-	c:\windows\system32\win32spl.dll
2012-11-09 04:42 . 2012-12-13 16:16	2048	----a-w-	c:\windows\system32\tzres.dll
2012-11-08 10:29 . 2012-11-08 10:29	1402312	----a-w-	c:\windows\system32\msxml4.dll
2007-05-14 00:03 . 2007-05-14 00:03	159744	----a-w-	c:\program files\internet explorer\plugins\pluginhostctrl.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2013-01-15 12:52	1883824	----a-w-	c:\program files\AVG Secure Search\14.0.2.14\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG Secure Search\14.0.2.14\AVG Secure Search_toolbar.dll" [2013-01-15 1883824]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2010-11-20 144384]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe" [2007-06-27 436088]
"studNET-Autologin"="c:\windows\System32\studnet\studnet.exe" [2007-09-26 245760]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18705664]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-08-15 102400]
"RtHDVCpl"="RtHDVCpl.exe" [2007-08-09 4702208]
"Skytel"="Skytel.exe" [2007-08-03 1826816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2007-05-22 538744]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-05-22 413696]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 115816]
"Desktop SMS"="c:\program files\IDM\Desktop SMS\DesktopSMS.exe" [2007-06-18 1507328]
"IS CfgWiz"="c:\program files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" [2007-01-12 431752]
"PMBVolumeWatcher"="c:\program files\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-01-31 385024]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2007-04-03 509496]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-05-04 571024]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2007-03-29 411192]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2011-04-01 80840]
"ApnUpdater"="c:\program files\Ask.com\Updater\Updater.exe" [2012-05-04 1561768]
"AVG_UI"="c:\program files\AVG\AVG2013\avgui.exe" [2012-12-11 3147384]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2013-01-15 1101488]
"dcmsvc"="c:\program files\dcmsvc\dcmsvc.exe" [2009-04-07 30440]
.
c:\users\Carmen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
BUFFALO NAS Navigator.lnk - c:\program files\BUFFALO\NASNAVI\NasNavi.exe [2010-3-2 1553800]
NAS Scheduler.lnk - c:\program files\BUFFALO\NASNAVI\nassche.exe [2010-3-2 206128]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2009-8-6 439648]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"=c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [x]
R3 IDSvix86;Symantec Intrusion Prevention Driver;c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070108.003\IDSvix86.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [x]
S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [x]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [x]
S1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [x]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [x]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [x]
S2 Automatisches LiveUpdate - Scheduler;Automatisches LiveUpdate - Scheduler;c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2013\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2013\avgwdsvc.exe [x]
S2 NasPmService;NAS PM Service;c:\program files\BUFFALO\NASNAVI\nassvc.exe [x]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files\Sony\PMB\PMBDeviceInfoProvider.exe [x]
S2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [x]
S2 vToolbarUpdater14.0.1;vToolbarUpdater14.0.1;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe [x]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [x]
S3 RTL8167;Realtek 8167 NT-Treiber;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
S3 RTL8187B;RTL8187B Drahtlos-802.11b/g-USB 2.0-Netzwerkadapter (54 MBit/s) von Realtek;c:\windows\system32\DRIVERS\RTL8187B.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - COMHOST
*NewlyCreated* - WS2IFSL
*Deregistered* - avgio
*Deregistered* - ssmdrv
.
Inhalt des "geplante Tasks" Ordners
.
2008-03-09 c:\windows\Tasks\Auf Updates für Windows Live Toolbar prüfen.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.
2013-01-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 10:55]
.
2013-01-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 10:55]
.
2012-09-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2107629863-3530946852-433808793-1001Core1cd970a5b2e0af1.job
- c:\users\Carmen\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-23 02:13]
.
2010-12-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2107629863-3530946852-433808793-1001UA.job
- c:\users\Carmen\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-23 02:13]
.
2013-01-31 c:\windows\Tasks\ROC_JAN2013_TB_rmv.job
- c:\program files\AVG Secure Search\PostInstall\ROC.exe [2013-01-15 12:52]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - hxxp://favorites.live.com/quickadd.aspx
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: Interfaces\{436CB8C7-7AD5-4C8B-9F18-D6752EFAA0A8}: NameServer = 139.18.25.3
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\14.0.1\ViProtocol.dll
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-SuperTux_is1 - e:\daten\Carmen\Downloads\SuperTux\unins000.exe
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Àù ÉZÍv£ÐvþÿÿÿR~Ðv·ÄÎu\ç Ðç ¹ÃÎuÀÄÎu*]
"7040110900063D11C8EF10054038389C"="C?\\Windows\\system32\\FM20ENU.DLL"
.
[HKEY_LOCAL_MACHINE\software\Symantec\Common Client\ccService\Channels]
@Denied: (C D) (Everyone)
"{00BA7C15-234B-4F2A-B9E7-C945EC8C1D38}"="{9D27FC31-DBFD-4279-A6CD-5C92B77BD838}"
"{2C8FD4DC-AD29-422D-8D68-73D7E6D6F417}"="{22BFA560-055F-4CD5-B14F-324A39069086}"
"{37DF08EC-2631-41E6-A52F-A5AAD1AAFACD}"="{9D27FC31-DBFD-4279-A6CD-5C92B77BD838}"
"{57104FE6-8BCF-44F8-B31B-0DB18744DCE2}"="{9D27FC31-DBFD-4279-A6CD-5C92B77BD838}"
"{6321BB3D-5821-46C8-9966-73AD6AE66D2A}"="{9D27FC31-DBFD-4279-A6CD-5C92B77BD838}"
"{75350A12-176A-4482-9FB3-81ADD75D2F20}"="{22BFA560-055F-4CD5-B14F-324A39069086}"
"{A4DB23FA-E6A6-4951-A1FD-D28754D1D970}"="{C213CCF9-EAD8-41D0-880A-58DCBEE68FF4}"
"{AF61DCCC-4420-491E-92FC-653E02738A2D}"="{9D27FC31-DBFD-4279-A6CD-5C92B77BD838}"
"{C9C0C83A-8B96-4024-A30B-153615E49F50}"="{9D27FC31-DBFD-4279-A6CD-5C92B77BD838}"
"{CBE2032A-F719-4189-9393-C9481519A019}"="{9D27FC31-DBFD-4279-A6CD-5C92B77BD838}"
"{E2BEAB59-2B2B-42DA-98E3-1EAEBDC762B1}"="{C213CCF9-EAD8-41D0-880A-58DCBEE68FF4}"
"{EDCB62E6-8CC2-45B5-BD39-9B872AFB016C}"="{22BFA560-055F-4CD5-B14F-324A39069086}"
"{FE8016F9-86E3-4F52-B53A-968BB58811CC}"="{9D27FC31-DBFD-4279-A6CD-5C92B77BD838}"
"{7ECCFB31-E92E-4627-A84C-7C4DBEF2560E}"="{4A275407-E8CD-4D0A-9286-93BDBCA4194B}"
"{2534DDB7-56E2-474A-8A98-24399943CF29}"="{BDD92022-B8FC-4AF0-86B6-E748C373149F}"
"{7E3AF02B-AE9C-4FBF-BC69-6E317EE330F8}"="{BDD92022-B8FC-4AF0-86B6-E748C373149F}"
"{1E289833-1116-47BD-801B-769B7BB12E37}"="{4A275407-E8CD-4D0A-9286-93BDBCA4194B}"
"{9F540492-0A84-4CE5-8D84-E26861CC023E}"="{4A275407-E8CD-4D0A-9286-93BDBCA4194B}"
"{6B0D006F-AE03-46D8-8431-82590F7B5C8E}"="{557F6955-90E7-48DB-9D05-89B730D5C93D}"
"{6C27C50C-F309-4BAC-8871-9FCBC194EC4C}"="{557F6955-90E7-48DB-9D05-89B730D5C93D}"
"{A9E70EB5-1F8D-480C-8729-546407BE1759}"="{557F6955-90E7-48DB-9D05-89B730D5C93D}"
"{381C619F-1051-4E89-B70F-A8325AF10EE4}"="{557F6955-90E7-48DB-9D05-89B730D5C93D}"
"{02BD7174-9C92-455A-BB1A-11A19EF34152}"="{150FE274-D0B7-49A5-A422-1FB8CEA5EED2}"
"{F97297B8-DAEC-49F5-A0C5-D1F092000E66}"="{150FE274-D0B7-49A5-A422-1FB8CEA5EED2}"
"{C9348AFF-5DE1-469B-9A87-D952F6ABCC4B}"="{1A7D9155-E047-48A9-98B9-60336092969F}"
"{B5D35D62-A6CA-4F9F-8F8D-D7CE9ACCC163}"="{1A7D9155-E047-48A9-98B9-60336092969F}"
"{69523131-0F4E-4800-860E-0C2C8A8B2110}"="{8F7B2831-B002-4033-BA6C-F4CF922C5851}"
"{4C1B3FF0-0ED5-4EB1-B44A-7F2B55AA9DAF}"="{8F7B2831-B002-4033-BA6C-F4CF922C5851}"
"{4E67473A-430C-4837-90B6-C171F7A2AC31}"="{8F7B2831-B002-4033-BA6C-F4CF922C5851}"
"{776F0871-AE3F-4BDE-8E91-6AB6C082F880}"="{8F7B2831-B002-4033-BA6C-F4CF922C5851}"
"{D28957FE-8448-4DF8-9C20-E59E8EE280A5}"="{8F7B2831-B002-4033-BA6C-F4CF922C5851}"
"{8CF7BA07-E428-4186-8665-DFE5057080C0}"="{E53EAA41-1685-4547-9657-F929817E5461}"
"{1712DF7B-C826-4FC0-9391-5E95250AA165}"="{E53EAA41-1685-4547-9657-F929817E5461}"
"{F1ED4950-C045-4739-AA4D-F01FF7CA9212}"="{E53EAA41-1685-4547-9657-F929817E5461}"
"{E3091DAA-EA7D-4626-81CE-2DB82508C4F3}"="{E53EAA41-1685-4547-9657-F929817E5461}"
"{58053B97-E3CB-4664-858F-D5EF7541B098}"="{A8B138D0-2628-478E-A8AD-FB7F5F974CF4}"
"{5B8DCA79-6A6A-4093-9050-3A0832ED3CA7}"="{A8B138D0-2628-478E-A8AD-FB7F5F974CF4}"
"{96C06601-3282-4903-B0D6-70D4D8D66DB6}"="{8C245FA1-2471-4879-BE86-15C26FB0BE1E}"
"{1747E4AB-3A1F-4FB5-B42D-87454635E4EF}"="{8C245FA1-2471-4879-BE86-15C26FB0BE1E}"
"{39B8A175-B93B-4473-A39A-A26D07AA474E}"="{8C245FA1-2471-4879-BE86-15C26FB0BE1E}"
"{6D01831C-30A9-48C7-9836-74AE1355D6A5}"="{8C245FA1-2471-4879-BE86-15C26FB0BE1E}"
"{A8CF5287-95E2-45C1-97B4-909B0CDD0ED5}"="{8C245FA1-2471-4879-BE86-15C26FB0BE1E}"
"{A88139BC-B844-4EDC-8537-22D0CDE2CB19}"="{11DC4D48-CB91-4E3D-B035-8F64416169E9}"
"{D38783C8-170A-451B-B63A-09CE46619C74}"="{CD3F3BB8-B871-4C1D-8DA3-3C622E422CC6}"
"{07AEE749-56FB-4501-A749-2952FCD38FE5}"="{CD3F3BB8-B871-4C1D-8DA3-3C622E422CC6}"
"{2E0C2AF8-79A4-4DBF-B59C-6811CF4E02BF}"="{0DE2C928-5B82-4634-847F-80616ED491FC}"
"{930A1927-60BD-4416-B391-A5050293D819}"="{D8DD111D-01EB-462A-80AA-09520D68D32A}"
"{C65698B2-A97C-48EA-84CE-A50AE26EEE1C}"="{D8DD111D-01EB-462A-80AA-09520D68D32A}"
"{97252A45-0217-4B59-8623-4E1FF5A64CC4}"="{49E588D4-7DA4-4BA1-9593-4A92D146C3D5}"
"{FAA85A58-116F-452E-9A15-C4ED4608A1F6}"="{49E588D4-7DA4-4BA1-9593-4A92D146C3D5}"
"{42B9A997-C4AB-467F-8A4D-6F9A585ADA01}"="{49E588D4-7DA4-4BA1-9593-4A92D146C3D5}"
"{0BB506FB-3C69-4B8B-AEFB-C63DA6AF293A}"="{49E588D4-7DA4-4BA1-9593-4A92D146C3D5}"
"{E4ECAF51-2923-426B-A168-FDF1FE11E97F}"="{49E588D4-7DA4-4BA1-9593-4A92D146C3D5}"
"{993F8CD0-C136-4101-947D-BF34A0B71A57}"="{DAE877DE-A00F-4992-B78B-38800CBD31BD}"
"{3CD58812-8545-48CB-AD89-EFDACED2B8D8}"="{DAE877DE-A00F-4992-B78B-38800CBD31BD}"
"{AF79100D-1021-49C4-A99F-6D89CAD48165}"="{349874FA-504B-42F0-8F20-972F60F9AA1D}"
"{AD61943D-2CD8-4CD7-A9F5-7EDEBCD65755}"="{349874FA-504B-42F0-8F20-972F60F9AA1D}"
"{2842139B-BC43-4246-82C7-BD45E88F8DE2}"="{56194707-8D09-40CA-80E8-12557B7D0FEA}"
"{8EA72189-BD90-4EAC-B4FB-87C6D17BFBA8}"="{56194707-8D09-40CA-80E8-12557B7D0FEA}"
"{46905F9B-56BE-444A-92C6-339CBA46B2DB}"="{56194707-8D09-40CA-80E8-12557B7D0FEA}"
"{F94CD8B5-EE38-414E-A1CD-D4E75299A59A}"="{56194707-8D09-40CA-80E8-12557B7D0FEA}"
"{B9052112-9E3F-4928-B00E-91FBAA67CB08}"="{56194707-8D09-40CA-80E8-12557B7D0FEA}"
"{11CBEE1D-F7CE-456C-9483-314B0C556734}"="{CF90F225-8A8F-4390-B160-660853C32EBC}"
"{030598A7-6C91-40D9-B91B-9337E6902552}"="{CF90F225-8A8F-4390-B160-660853C32EBC}"
"{A238F65C-5A5A-4279-ACBB-9B195CD52C69}"="{CF90F225-8A8F-4390-B160-660853C32EBC}"
"{CF2D2786-C4A1-48AE-8E02-43B998A2D739}"="{CF90F225-8A8F-4390-B160-660853C32EBC}"
"{407C3B8F-41CE-40BA-98D2-6AB5513D7492}"="{4BFCAD7F-4770-4E66-9AFC-15909C0BEE88}"
"{891B4437-8D4E-4EBB-ACC0-C01244B28093}"="{4BFCAD7F-4770-4E66-9AFC-15909C0BEE88}"
"{D33A5217-803A-4ADB-B81C-716D98B250A2}"="{52450474-24C1-43E3-B7F7-BF2452AD760F}"
"{E1F762E7-590F-4072-94AC-87DDF3C1C775}"="{52450474-24C1-43E3-B7F7-BF2452AD760F}"
"{2D6946D4-CA60-41F9-B4D0-2D2123578AA6}"="{52450474-24C1-43E3-B7F7-BF2452AD760F}"
"{2E1E0B4A-8395-494C-883A-96DFF4641A98}"="{52450474-24C1-43E3-B7F7-BF2452AD760F}"
"{8B291428-1F97-4419-BC42-813A6C6DCAAE}"="{52450474-24C1-43E3-B7F7-BF2452AD760F}"
"{97F48B16-4220-403F-9209-032D8911C359}"="{03F30F79-6AA2-4F6A-A355-49C9BDDA882A}"
"{CE394C96-38B0-495F-A4E7-88721866722C}"="{03F30F79-6AA2-4F6A-A355-49C9BDDA882A}"
"{12371CE3-A7B9-4DD1-8055-9712B7F32770}"="{608B6C3F-185D-4E38-9141-5CE28ACBD1AB}"
"{C8B4A885-8DB7-4E58-A000-A441E75CA17A}"="{608B6C3F-185D-4E38-9141-5CE28ACBD1AB}"
"{490F9699-4289-45F5-BFE5-53FC1598B5E6}"="{608B6C3F-185D-4E38-9141-5CE28ACBD1AB}"
"{23D69B1E-4453-4BF8-88C3-C7F92E153EAA}"="{608B6C3F-185D-4E38-9141-5CE28ACBD1AB}"
"{7ED0EF18-A4C5-42E7-8C56-52E6D83FF276}"="{608B6C3F-185D-4E38-9141-5CE28ACBD1AB}"
"{C6E07E92-BAB5-4143-8AF7-502F61D8ACBD}"="{ABED9656-1B13-4C92-989C-60AF08451C9F}"
"{8F4A892B-74BA-46DB-A8AD-D2F876572366}"="{ABED9656-1B13-4C92-989C-60AF08451C9F}"
"{4E905571-3402-4005-A790-C3A0A7F12BBC}"="{20523FA6-CBDC-475F-9769-197F919D2260}"
"{E7BB783D-8F97-4F18-B596-296756B58CF0}"="{20523FA6-CBDC-475F-9769-197F919D2260}"
"{F031E52E-E5DD-476C-A799-6D8A79A2A2F6}"="{20523FA6-CBDC-475F-9769-197F919D2260}"
"{264A4FAB-8269-4F1A-AFF5-8636ADC32923}"="{20523FA6-CBDC-475F-9769-197F919D2260}"
"{ACC5B198-A24C-4CE3-A02D-AABC453A527C}"="{20523FA6-CBDC-475F-9769-197F919D2260}"
"{8AE9F9F5-BB53-4F9E-A9F8-3A419A21F8C2}"="{37AB619F-B517-41DA-96E2-9501A1CB7D3A}"
"{5FA1325D-5412-47CA-935A-E7B007DE6FED}"="{37AB619F-B517-41DA-96E2-9501A1CB7D3A}"
"{D8541E5C-39C0-4FD2-8AF5-EE01A68AB69F}"="{37AB619F-B517-41DA-96E2-9501A1CB7D3A}"
"{3AB46120-00B7-4336-ABDF-DC4014B537BB}"="{7D2BD4B8-1539-4ED4-8AD9-8189A050E6C8}"
"{3594EB6A-D2FF-4BD7-AC55-D23785713892}"="{7D2BD4B8-1539-4ED4-8AD9-8189A050E6C8}"
"{BDCD084E-F65D-40BA-95D6-89D9C0AE47BB}"="{98C2AF2C-2BA6-46D6-AC8C-6DB7EE4C4EBA}"
"{A26B0ECF-B57D-4961-ACE8-763758EC4E75}"="{98C2AF2C-2BA6-46D6-AC8C-6DB7EE4C4EBA}"
"{0461D39C-2B59-4899-9ED0-ABADF4FDB707}"="{98C2AF2C-2BA6-46D6-AC8C-6DB7EE4C4EBA}"
"{11B410BE-0065-4FFD-966A-4C0A5A3706B7}"="{98C2AF2C-2BA6-46D6-AC8C-6DB7EE4C4EBA}"
"{10EE6E91-3755-41F5-8DEB-CC3F34756845}"="{98C2AF2C-2BA6-46D6-AC8C-6DB7EE4C4EBA}"
"{DDD5B9A9-61DC-43EF-8027-03AFDF9FFF0D}"="{F3A0B6BD-F38B-41AA-A1C0-2CB1F23E5E82}"
"{9621A483-C913-4DE7-8026-BF74EF63CD8F}"="{F3A0B6BD-F38B-41AA-A1C0-2CB1F23E5E82}"
"{31B1F6A1-A6E0-40A1-8FBA-39EF03A1C459}"="{F3A0B6BD-F38B-41AA-A1C0-2CB1F23E5E82}"
"{D724C2FB-F225-4EF8-9528-8686297CABD7}"="{76764220-24F1-4C71-A69D-B6EF7F7B7761}"
"{B449643D-0B24-4690-9A2D-3FD24B723D85}"="{76764220-24F1-4C71-A69D-B6EF7F7B7761}"
"{0820A5B1-459A-425B-874E-5EBBC0B06559}"="{BE01BA7F-A3D2-48C5-8173-9C875A2B635D}"
"{D913DACA-0E12-4668-B704-06E0505D93C7}"="{BE01BA7F-A3D2-48C5-8173-9C875A2B635D}"
"{C66C6029-B361-4279-8832-5E7AB7A81937}"="{BE01BA7F-A3D2-48C5-8173-9C875A2B635D}"
"{9E178987-385C-49A6-AB91-35FB0155753E}"="{BE01BA7F-A3D2-48C5-8173-9C875A2B635D}"
"{58408D67-F832-4894-9956-A2E99A5EFA31}"="{BE01BA7F-A3D2-48C5-8173-9C875A2B635D}"
"{CF5DBCEE-B9E0-44AA-B3E8-E34B57BEA782}"="{127223C3-90EA-4EBC-8388-AF35F9D2ACB1}"
"{9FB6BE33-BEA7-43A6-B971-237A216D26B9}"="{127223C3-90EA-4EBC-8388-AF35F9D2ACB1}"
"{EBCC6D0D-5583-4DA1-A4C9-865C1C58C8A7}"="{127223C3-90EA-4EBC-8388-AF35F9D2ACB1}"
"{2D5E947E-AAEE-47ED-A5EE-6380C3689078}"="{127223C3-90EA-4EBC-8388-AF35F9D2ACB1}"
"{1BD921F9-DFDC-41FC-AFC3-074887FA832C}"="{127223C3-90EA-4EBC-8388-AF35F9D2ACB1}"
"{91FAA476-8AAC-449C-9029-D6499534D595}"="{B1E4224B-C96F-47FD-91C7-16569DAAEE74}"
"{461D80BF-E6CE-487E-AD72-9AB87FAFD436}"="{B1E4224B-C96F-47FD-91C7-16569DAAEE74}"
"{0DDCD530-766D-40BD-B532-97C3B6520259}"="{B1E4224B-C96F-47FD-91C7-16569DAAEE74}"
"{AEEB3E2F-1C9E-4CB4-88C2-8C3990C7E0F1}"="{B1E4224B-C96F-47FD-91C7-16569DAAEE74}"
"{B82617D2-D8BC-4D1A-A58C-C3102122CDD5}"="{B1E4224B-C96F-47FD-91C7-16569DAAEE74}"
"{A30ED02F-4DE5-4057-8CCD-E1B35D33F458}"="{647DBAA7-F5D9-4777-AED8-320B47A84EEA}"
"{E62E4E73-8FAC-4004-B7CD-E0CD5F513A34}"="{647DBAA7-F5D9-4777-AED8-320B47A84EEA}"
"{2002BA6D-5163-47B4-84B4-E15AD691E4B3}"="{E47440B5-4CF1-4313-9CB4-138BD859A585}"
"{7F241564-E73F-4F95-BBE8-47F0FF830406}"="{E47440B5-4CF1-4313-9CB4-138BD859A585}"
"{5CFA49C7-77CE-4D88-9F71-D36ADDCEACBD}"="{E47440B5-4CF1-4313-9CB4-138BD859A585}"
"{1D1AB864-1DCF-4FC5-BDA1-9E1ECA704D01}"="{E47440B5-4CF1-4313-9CB4-138BD859A585}"
"{67CBAEA8-A0B9-4EEE-A925-1D067D518F1C}"="{E47440B5-4CF1-4313-9CB4-138BD859A585}"
"{7FAABE0A-0273-4287-B3DF-E1773C2FF95C}"="{B88B6777-598C-4F8B-80BA-BF67D7B2ADE3}"
"{8C7B9599-A537-4D47-8214-AEBC1A2B9876}"="{B88B6777-598C-4F8B-80BA-BF67D7B2ADE3}"
"{574D371B-102D-4E0D-A394-AAEBD6BA49B7}"="{B88B6777-598C-4F8B-80BA-BF67D7B2ADE3}"
"{8EFD10FD-3152-4C75-A613-F774E91ACCB6}"="{053CCBF4-F7FC-44C8-A5F3-8BE7D5F02C2B}"
"{D19CCEE0-D334-44A2-81EA-B1E4D007CDFF}"="{053CCBF4-F7FC-44C8-A5F3-8BE7D5F02C2B}"
"{E21B47ED-527F-4EAB-8707-8C1DEFB0CB64}"="{1DCFF5AD-48E4-4167-ABDA-BA95BB775AF7}"
"{6D62DBAA-BF56-4220-A46F-D3CE931CD33C}"="{1DCFF5AD-48E4-4167-ABDA-BA95BB775AF7}"
"{12488F7E-DDCD-45FB-93BE-821E705D3861}"="{1DCFF5AD-48E4-4167-ABDA-BA95BB775AF7}"
"{351B4642-A2F7-4A12-A9D3-AB8B9E87FB4C}"="{1DCFF5AD-48E4-4167-ABDA-BA95BB775AF7}"
"{224DB475-E13B-4A08-A340-9C5CB6858F91}"="{1DCFF5AD-48E4-4167-ABDA-BA95BB775AF7}"
"{9E2D154B-3D92-4365-A65E-B29A5D4E5FD4}"="{44F5F1EC-9397-4EB3-8C82-3E767A295242}"
"{605A31FF-F71D-45B0-BB1F-AF0263CDFBAF}"="{44F5F1EC-9397-4EB3-8C82-3E767A295242}"
"{76850FB6-4D34-462E-B741-2C68A87FE36C}"="{44F5F1EC-9397-4EB3-8C82-3E767A295242}"
"{A5CBC696-FC25-4AAC-AD91-8781B54E2D47}"="{3B4173EB-4D12-47AD-8E9C-29F026ABFD6A}"
"{34DDCB7C-CB3D-4DC9-A6A4-7148B78B96B0}"="{3B4173EB-4D12-47AD-8E9C-29F026ABFD6A}"
"{80A59354-E92B-4C89-88DC-E535C7495BA0}"="{AF46402A-D1E2-4003-8A81-E83C79A9D4A5}"
"{4CAC1715-CCC9-4DDC-857F-326530E64569}"="{AF46402A-D1E2-4003-8A81-E83C79A9D4A5}"
"{4343C915-C43C-41F0-B7A3-172B566F494D}"="{AF46402A-D1E2-4003-8A81-E83C79A9D4A5}"
"{FF2A9B62-DF6A-4A2D-8965-8F9B101F48B6}"="{AF46402A-D1E2-4003-8A81-E83C79A9D4A5}"
"{138B4B0B-D36F-46DB-8A10-0053E06F6481}"="{5194BF8B-A401-459A-B7C0-3040CC7FAB60}"
"{01EF34AD-87F2-4BB9-A8BE-D5F5F4E76867}"="{5194BF8B-A401-459A-B7C0-3040CC7FAB60}"
"{B059F3BE-5C5F-49E1-A3C3-C63886160545}"="{5194BF8B-A401-459A-B7C0-3040CC7FAB60}"
"{34242076-2CF1-4C42-B1E6-57996B9C51B4}"="{44764C08-C2B0-4C5F-B990-4BEBA02A9071}"
"{17C627E3-C7E9-4BB1-8DE2-C26AB47CD181}"="{44764C08-C2B0-4C5F-B990-4BEBA02A9071}"
"{A6B39590-C892-41ED-95CD-186E7AA36DE5}"="{44764C08-C2B0-4C5F-B990-4BEBA02A9071}"
"{B0C831EA-B2E9-44C8-9049-3461913A8B31}"="{44764C08-C2B0-4C5F-B990-4BEBA02A9071}"
"{20A304ED-88A7-46D8-AB7A-7B6B0C902B5E}"="{44764C08-C2B0-4C5F-B990-4BEBA02A9071}"
"{01100039-4484-4992-8C5C-B186C0A07A57}"="{407D2C76-81AA-4024-B70B-A9DFF8652F17}"
"{36F42E03-7B34-4FEC-B995-221E2B9DA1BA}"="{407D2C76-81AA-4024-B70B-A9DFF8652F17}"
"{964EBAC9-1A36-4053-9E62-15FB42AE0B27}"="{CD0B4FDC-25ED-4F25-B3BB-BB1BD2300B48}"
"{1FAE42F1-18B5-42DE-AE6B-37530201CE94}"="{CD0B4FDC-25ED-4F25-B3BB-BB1BD2300B48}"
"{BD079197-1A43-4BC6-AEDA-6E8DABA7910E}"="{E1C83E5C-B242-4D07-AE0E-5A334B4ACA40}"
"{85080D01-0F7C-4824-932C-9675514E8D53}"="{E1C83E5C-B242-4D07-AE0E-5A334B4ACA40}"
"{9A0F07BC-6CCF-4883-AB6B-DCD694C54799}"="{E1C83E5C-B242-4D07-AE0E-5A334B4ACA40}"
"{75B66DB5-3BB7-4222-94B2-3C6A6B95D397}"="{E1C83E5C-B242-4D07-AE0E-5A334B4ACA40}"
"{0439FC4D-5387-4FC3-AD4D-C7E4E526C59F}"="{E1C83E5C-B242-4D07-AE0E-5A334B4ACA40}"
"{28450187-0497-44C6-8EAB-BB7237FA7E7A}"="{18DE2631-38FB-45DC-8060-8239531C3D69}"
"{9F0C044D-E679-4520-A6EA-1A00F532D96B}"="{18DE2631-38FB-45DC-8060-8239531C3D69}"
"{F27FAADE-5581-459A-9EFE-0234E1EE7EA2}"="{C7AE81F0-0739-4EA7-97BD-1B518D0B957A}"
"{6CEF45A6-8DDC-4855-B84D-FC0807F5171B}"="{C7AE81F0-0739-4EA7-97BD-1B518D0B957A}"
"{0B2C42D2-F6C9-4B0E-8D83-A86ED90008D8}"="{C7AE81F0-0739-4EA7-97BD-1B518D0B957A}"
"{BF16C338-4E79-4453-AC73-8406946160D6}"="{C7AE81F0-0739-4EA7-97BD-1B518D0B957A}"
"{73849DB7-09DE-400C-A0D3-087B9AE7B68F}"="{C7AE81F0-0739-4EA7-97BD-1B518D0B957A}"
"{2B5177E6-DD03-4198-B3EE-EFD0990C4779}"="{CC5FB538-5353-4EA1-A7F0-0DD33DEDEB1C}"
"{E1A6C061-6A23-4C97-B7C5-CEE119D4E42F}"="{CC5FB538-5353-4EA1-A7F0-0DD33DEDEB1C}"
"{0E3F7B30-2AF3-4089-8C56-50BF0918665D}"="{CAA21266-BD1A-4E5E-93F1-965D7F3A8C20}"
"{7197EF19-3C23-404F-B025-0671523D28C9}"="{CAA21266-BD1A-4E5E-93F1-965D7F3A8C20}"
"{EDCB15F4-7F7C-4676-B50F-92BAD6A0079C}"="{CAA21266-BD1A-4E5E-93F1-965D7F3A8C20}"
"{9C2FDD96-8BC7-4CD0-98E4-24A19A2605C6}"="{CAA21266-BD1A-4E5E-93F1-965D7F3A8C20}"
"{3844EDBC-A126-453C-9C7D-4A921DCD2145}"="{CAA21266-BD1A-4E5E-93F1-965D7F3A8C20}"
"{5AF3675D-2904-4A1A-B1B5-6231A414BB5E}"="{A98EAFC5-2810-4AF9-B6FD-53F2AB7A9D78}"
"{1ED168BC-6CD8-4EF2-9A69-996FDA83CDA8}"="{A98EAFC5-2810-4AF9-B6FD-53F2AB7A9D78}"
"{FE6238DA-2ED6-4384-AB45-FC0E26CF88BF}"="{A98EAFC5-2810-4AF9-B6FD-53F2AB7A9D78}"
"{B6CAF94C-B4DF-4ED2-ADD9-133F7592520A}"="{A98EAFC5-2810-4AF9-B6FD-53F2AB7A9D78}"
"{9281BF34-D695-4F74-BB81-583C380C074E}"="{BADB0A03-850A-4D4E-B7EA-47977EE6409A}"
"{E97E341E-065D-4B2A-85EA-AE453A10CD4D}"="{BADB0A03-850A-4D4E-B7EA-47977EE6409A}"
"{DB029EEB-E5BC-47C3-AB77-B08E7D8A887B}"="{6B0B8ED3-BD1E-4239-A37A-CED5FB8B6502}"
"{362C793A-D936-4BD8-B988-66F90A8A125D}"="{6B0B8ED3-BD1E-4239-A37A-CED5FB8B6502}"
"{B45F1A8D-752A-45A7-AD28-FA00A93C9455}"="{6B0B8ED3-BD1E-4239-A37A-CED5FB8B6502}"
"{BBCEAD87-BC68-4C9A-969F-4400A024573A}"="{6B0B8ED3-BD1E-4239-A37A-CED5FB8B6502}"
"{6AA43571-9AD2-47A1-8AB3-A47B2E0262A1}"="{6B0B8ED3-BD1E-4239-A37A-CED5FB8B6502}"
"{8418134B-AC78-423B-B865-236105D075E0}"="{40DB2EFA-F461-4722-A173-B0DAB109B992}"
"{9622F0D0-589D-4ADE-9D21-124BBB6FCFA3}"="{40DB2EFA-F461-4722-A173-B0DAB109B992}"
"{12FA23D4-DB9E-4DA0-824F-7B95D42BE814}"="{DD8BF7ED-912B-4255-9012-03E2AD76321A}"
"{E9B26BD5-1BDD-48C1-A52E-E9402FB1D910}"="{DD8BF7ED-912B-4255-9012-03E2AD76321A}"
"{D154FB60-2E21-4223-9779-4F43CE6EFF45}"="{DD8BF7ED-912B-4255-9012-03E2AD76321A}"
"{F8FFA0E4-99B6-49DA-91B9-929B166BA00E}"="{DD8BF7ED-912B-4255-9012-03E2AD76321A}"
"{1BE29AE9-2ACD-4122-A642-459D0A66661F}"="{DD8BF7ED-912B-4255-9012-03E2AD76321A}"
"{664C0CC8-E425-40DC-96C8-5070AF5BEBFB}"="{EC65B621-B250-442B-9FF3-F74518703135}"
"{C02CB8EA-3BA0-47B4-A1C3-17DD7222A5CD}"="{EC65B621-B250-442B-9FF3-F74518703135}"
"{1879080D-5584-4944-8C9C-D2843DA42E02}"="{EC65B621-B250-442B-9FF3-F74518703135}"
"{8B101892-3A1B-4566-9A10-4C62B04A00EB}"="{585CC6ED-6406-4BF2-8D6E-891069C9DFD5}"
"{950FC2D5-D4B2-4894-9E3C-DFB426067F01}"="{585CC6ED-6406-4BF2-8D6E-891069C9DFD5}"
"{154B9158-0B22-4626-BAA1-86A0E3FC25C4}"="{FCF3FD62-FD70-4829-BA94-A0FAA0910FBA}"
"{396DDFA1-968E-4AAC-8F64-26D59194AEDD}"="{FCF3FD62-FD70-4829-BA94-A0FAA0910FBA}"
"{4C112C3A-201A-4467-A5F1-3CF3D4375399}"="{FCF3FD62-FD70-4829-BA94-A0FAA0910FBA}"
"{E8CB0F1B-F66B-4E1F-808A-30D9D77CF05C}"="{FCF3FD62-FD70-4829-BA94-A0FAA0910FBA}"
"{4CD611AB-E12B-422E-8C1F-D7848974C114}"="{FCF3FD62-FD70-4829-BA94-A0FAA0910FBA}"
"{8A25026A-153F-4075-B558-1E92C104DAB2}"="{E323003C-9AE5-4B79-BA8A-D5023395A0F1}"
"{0B753F8D-7C52-4415-B9CB-5A2797C915E1}"="{E323003C-9AE5-4B79-BA8A-D5023395A0F1}"
"{F96D8024-AABD-4C71-AA00-C228CB0A3A4B}"="{9BC085E3-7574-4167-8780-3F3B7415B2DF}"
"{37A8A0AB-7710-4BA3-BC57-D68936A1A608}"="{9BC085E3-7574-4167-8780-3F3B7415B2DF}"
"{74D55FA7-B14A-4764-925C-D5EB6FDE7955}"="{9BC085E3-7574-4167-8780-3F3B7415B2DF}"
"{22966731-45D7-46E1-A5B2-DE82A5B051CF}"="{9BC085E3-7574-4167-8780-3F3B7415B2DF}"
"{29C172A6-714E-4E58-AFB0-8C2CDEDBE1DD}"="{9BC085E3-7574-4167-8780-3F3B7415B2DF}"
"{96E6E7D7-9F7D-4615-ADCD-A1A24224F690}"="{9C8514E4-860C-42C4-AE4F-676F97522D07}"
"{DB109FC6-30DA-428B-B530-9392CD0C4C7C}"="{9C8514E4-860C-42C4-AE4F-676F97522D07}"
"{95AE751F-E98B-4B1A-ABFA-A4021613ABA0}"="{FFE9C493-EA72-447C-B471-B3309B4B3371}"
"{E1B528B8-83B1-4883-9CE1-BA0240C9B9CD}"="{FFE9C493-EA72-447C-B471-B3309B4B3371}"
"{29914B7B-0E90-47CE-A7C9-E68631FB2E15}"="{FFE9C493-EA72-447C-B471-B3309B4B3371}"
"{5DE5EA2B-BE28-43D0-8EA6-76008B52D1C4}"="{FFE9C493-EA72-447C-B471-B3309B4B3371}"
"{5AD4E4DD-94B8-4F0D-9EB8-33FDDB2139CD}"="{FFE9C493-EA72-447C-B471-B3309B4B3371}"
"{606E321A-6C6E-41BD-82D7-71751AC367CF}"="{B8E263D8-FC40-4985-8F74-B83702A60B69}"
"{91B1B987-44D5-4AEB-8226-FD886BEFF48C}"="{B8E263D8-FC40-4985-8F74-B83702A60B69}"
"{01747634-5F95-41F6-A52D-D8DCB3324148}"="{B8E263D8-FC40-4985-8F74-B83702A60B69}"
"{E2A53CF4-71A1-495C-BAEB-F6DD5AB357C2}"="{29FD54DE-DBBD-4A79-8C34-DBD96F899340}"
"{D3168915-B34A-4533-9CD1-EC96CFF34AFF}"="{29FD54DE-DBBD-4A79-8C34-DBD96F899340}"
"{9AC8105E-7AAB-4458-B462-0D1E19408329}"="{8AF95A74-1308-4E8E-B886-1C73F8388E0F}"
"{7E981DB0-8DED-46EC-8056-B9F5B3289A3D}"="{8AF95A74-1308-4E8E-B886-1C73F8388E0F}"
"{707F2FC3-60B5-47C7-A767-2B784B45CDF5}"="{8AF95A74-1308-4E8E-B886-1C73F8388E0F}"
"{962C9323-7834-4618-AC40-97A2009D0110}"="{8AF95A74-1308-4E8E-B886-1C73F8388E0F}"
"{DAE85353-4F7D-478C-A174-146B01C326AD}"="{8AF95A74-1308-4E8E-B886-1C73F8388E0F}"
"{7739DE69-5188-448F-8F88-EB88B0CA5F35}"="{D28F4AAE-5AD2-4BEB-8FE7-989C6E66238C}"
"{F411120A-DE9E-475F-A045-63F67BDF21D6}"="{D28F4AAE-5AD2-4BEB-8FE7-989C6E66238C}"
"{21EEE00B-220B-4754-B59D-B22FBF3F6837}"="{D28F4AAE-5AD2-4BEB-8FE7-989C6E66238C}"
"{EE6B6921-5A9A-4B08-9717-5B895451A530}"="{19D56D81-D149-4009-9687-C71433E363F0}"
"{AF1CC895-A577-42F5-A536-6FEB26882B72}"="{19D56D81-D149-4009-9687-C71433E363F0}"
"{D04561E9-55B1-4EAC-9A9E-825157CCB439}"="{19D56D81-D149-4009-9687-C71433E363F0}"
"{E1E8E0F4-EB17-4F36-913E-AD56A6A31ED1}"="{19D56D81-D149-4009-9687-C71433E363F0}"
"{29B5D28E-7985-4DF0-852C-461C84DC6123}"="{19D56D81-D149-4009-9687-C71433E363F0}"
"{B96EBD1A-28C9-43C5-9468-7733B7F8DEB3}"="{B7AD334A-8977-43AB-A7A6-7190548B1ABE}"
"{05F087F7-5B48-48E4-9F71-C1AB007C66F1}"="{B7AD334A-8977-43AB-A7A6-7190548B1ABE}"
"{4E3EF772-4563-42A2-B129-8E6A3A03FB10}"="{77F8CE9F-0773-4096-92FF-A435D67D294D}"
"{B5C985A8-2D81-4273-BAB8-D058F76B5168}"="{77F8CE9F-0773-4096-92FF-A435D67D294D}"
"{71A1A6CE-0453-4588-A79E-E0B30273CE4B}"="{F02AAF25-782A-480D-94BC-D9301E21A2E4}"
"{69CC6A47-FAE9-44C1-AF98-C5FFD0515607}"="{F02AAF25-782A-480D-94BC-D9301E21A2E4}"
"{887E7106-B72D-40FB-A49E-A7CAC46A34E4}"="{F02AAF25-782A-480D-94BC-D9301E21A2E4}"
"{7C2C1C33-303B-4A13-8C95-5E75E4682903}"="{A59534E3-12D5-4768-AB98-AD8E4149051D}"
"{290084E9-1361-4CB8-AF14-00997DB2D68F}"="{A59534E3-12D5-4768-AB98-AD8E4149051D}"
"{1EF89E45-D19F-47C2-969A-404D1CD17C03}"="{35B3BEDD-4275-4513-803C-F3F885336CE7}"
"{A329DB41-5AAA-49C7-9DB8-7C4AE9CC3990}"="{35B3BEDD-4275-4513-803C-F3F885336CE7}"
"{38FCB080-9CE4-4A6F-B436-8585D570EAA8}"="{35B3BEDD-4275-4513-803C-F3F885336CE7}"
"{96C786D3-195D-4731-B6E7-A89B24EDD1A3}"="{35B3BEDD-4275-4513-803C-F3F885336CE7}"
"{A1AE5B84-9CC4-4AC5-8E24-40102A0FE704}"="{35B3BEDD-4275-4513-803C-F3F885336CE7}"
"{3CEFE3E5-7FE2-4212-B81E-77DFF3AE7373}"="{FBFA814F-625F-4764-8FD2-359E53058079}"
"{C1B0C570-BD0A-4124-A2C7-B8A547CAD2BA}"="{FBFA814F-625F-4764-8FD2-359E53058079}"
"{099EC8B8-0C26-4367-BD27-C0A9289556FD}"="{FBFA814F-625F-4764-8FD2-359E53058079}"
"{BADF1974-C12F-4A46-AAFD-38D04F1DBACB}"="{6E54F4BE-EC49-44F1-ADAE-1448E9F84D24}"
"{FC2B4B00-18C1-4F41-AF93-3E97340BDE0E}"="{6E54F4BE-EC49-44F1-ADAE-1448E9F84D24}"
"{641D1A2B-462D-4790-9933-1BE3BD152139}"="{E6C1C450-F7CC-491B-964D-81550F861AF3}"
"{33518933-C81E-4657-B454-AFBF1A751AC7}"="{E6C1C450-F7CC-491B-964D-81550F861AF3}"
"{4374B6C6-929E-4EB7-AD3F-56DDAA4AD37A}"="{E6C1C450-F7CC-491B-964D-81550F861AF3}"
"{108D1D30-EECD-4DD6-B813-3A2E724D4104}"="{E6C1C450-F7CC-491B-964D-81550F861AF3}"
"{E5D09878-E364-418D-926B-44EA09793044}"="{E6C1C450-F7CC-491B-964D-81550F861AF3}"
"{6FA3E990-3C75-415B-8987-71C16AA08159}"="{36B44FB8-BDE5-4684-BC08-68926A0F081F}"
"{150FF62E-32BA-45F3-A3AB-E080F9659A39}"="{36B44FB8-BDE5-4684-BC08-68926A0F081F}"
"{71101991-09DA-4C82-BCAD-7193D3F3CB02}"="{F96F1035-BA09-4F8E-8340-8AF89B1299C7}"
"{405D28D1-17F3-440E-8272-C126B53C06C5}"="{F96F1035-BA09-4F8E-8340-8AF89B1299C7}"
"{1403A2EC-CEFB-408D-81A7-48294DA75C6C}"="{F96F1035-BA09-4F8E-8340-8AF89B1299C7}"
"{06A47049-5AF5-441C-B48D-80EB376C41CC}"="{F96F1035-BA09-4F8E-8340-8AF89B1299C7}"
"{B2F4C374-5091-494E-B297-1A223AFB41F6}"="{F96F1035-BA09-4F8E-8340-8AF89B1299C7}"
"{2C037389-FD02-41E3-83A7-166C5838C0D1}"="{4EBEFC0B-2001-40A1-A281-7F94EECB21CD}"
"{8E876AC5-D19F-461E-89E7-7016247B639F}"="{4EBEFC0B-2001-40A1-A281-7F94EECB21CD}"
"{FDB9A4F8-D865-425A-BE30-2B282F027D0F}"="{4EBEFC0B-2001-40A1-A281-7F94EECB21CD}"
"{BEE91319-BB0F-4EA9-B213-2D11383C43C1}"="{15128307-2852-468C-B2ED-4CC6A7E26EBB}"
"{5C416256-3013-445A-B959-3843892A59F9}"="{15128307-2852-468C-B2ED-4CC6A7E26EBB}"
"{465D44BD-8B52-48F1-A1A0-F6BC1D260563}"="{FF39B7BA-E655-446C-926F-1E48C2392A1F}"
"{FF55FBB0-3574-4D49-BA54-8374F64055C8}"="{FF39B7BA-E655-446C-926F-1E48C2392A1F}"
"{FBCD7986-133D-46A9-962D-77FB5F4C0F82}"="{FF39B7BA-E655-446C-926F-1E48C2392A1F}"
"{854CC9A5-927D-4B02-865B-A8510846CE09}"="{FF39B7BA-E655-446C-926F-1E48C2392A1F}"
"{CA385699-F645-4C16-950E-5B7080296A6D}"="{FF39B7BA-E655-446C-926F-1E48C2392A1F}"
"{77C919AE-E524-48C6-B583-5FE92FEE3495}"="{94FDC60D-4CE0-40B6-88A4-5379B5583CFA}"
"{B82928F6-83AA-4CF8-86B1-AB165476033C}"="{94FDC60D-4CE0-40B6-88A4-5379B5583CFA}"
"{672243B7-BA0F-4764-8110-87EF8C8A2CAC}"="{94FDC60D-4CE0-40B6-88A4-5379B5583CFA}"
"{0C164810-3AB5-45C4-9EE7-986DE9338D76}"="{E46EDD86-4F98-4C1D-BA00-0BF36C54E5E6}"
"{D209F05A-CE8E-4005-8A1A-1D9220387EF9}"="{E46EDD86-4F98-4C1D-BA00-0BF36C54E5E6}"
"{67077AEB-AAD9-4990-8A93-747E0FDF0675}"="{E46EDD86-4F98-4C1D-BA00-0BF36C54E5E6}"
"{5E668D55-AB9C-4D3E-AD74-8A4B2CC34718}"="{103683CE-FD19-42C3-89D7-6C4C8E1C86C1}"
"{9FF96D87-C59C-4919-AE51-A83595579E6C}"="{103683CE-FD19-42C3-89D7-6C4C8E1C86C1}"
"{5AC92435-8A3B-43EE-8C00-F94299CD4B3B}"="{E59A070F-2826-457C-AD82-F56790F95DC0}"
"{FD5A6530-77A3-4100-8F34-D250F3AD5A36}"="{E59A070F-2826-457C-AD82-F56790F95DC0}"
"{EDD573D8-E737-47D3-BF55-444E8B512906}"="{E59A070F-2826-457C-AD82-F56790F95DC0}"
"{9E426CE3-099C-4122-95CA-721E35347C34}"="{E59A070F-2826-457C-AD82-F56790F95DC0}"
"{27F147F8-EC00-4EB4-B4CD-97D040CE27FB}"="{E59A070F-2826-457C-AD82-F56790F95DC0}"
"{628241F3-ACFE-407C-A094-81CE3ECF5153}"="{52EFB4D2-A10C-46D9-A696-1888655A7B1F}"
"{31AD35D6-B206-4942-83A5-CC5A19F7AF37}"="{52EFB4D2-A10C-46D9-A696-1888655A7B1F}"
"{5E87ED2D-9A39-4F61-A11F-69D9C61BCE9B}"="{52EFB4D2-A10C-46D9-A696-1888655A7B1F}"
"{6C462417-FFC4-4B89-BE6D-B93A178EE2AA}"="{428C2EF9-8B65-4E24-BE89-973C61EA2398}"
"{00BB0AB6-F89F-4C70-B2DF-B2D700590169}"="{428C2EF9-8B65-4E24-BE89-973C61EA2398}"
"{FA34C4C9-4090-43E3-A378-665C9DA401BA}"="{9C55453C-8B25-4946-BCCC-B0145BA4903E}"
"{C42576C1-DFD2-47D7-888D-B0437F4A9EAC}"="{9C55453C-8B25-4946-BCCC-B0145BA4903E}"
"{00E6378F-529D-4739-A5CA-DECA264C50E0}"="{9C55453C-8B25-4946-BCCC-B0145BA4903E}"
"{FE70E08C-B0C6-432F-A3F3-4B2510B63794}"="{9C55453C-8B25-4946-BCCC-B0145BA4903E}"
"{E1DA4B75-60DB-47BC-BF1D-7947BD90E28D}"="{9C55453C-8B25-4946-BCCC-B0145BA4903E}"
"{A0893328-CA93-462D-95FD-6C44AA10B5BF}"="{54D28B01-F3F6-4340-98F6-651BCF2C52FC}"
"{403DEFA3-088D-49D2-AC56-755A456A81EB}"="{54D28B01-F3F6-4340-98F6-651BCF2C52FC}"
"{F03AB299-F4DF-44CA-9562-42D55AA5B521}"="{54D28B01-F3F6-4340-98F6-651BCF2C52FC}"
"{7F1C76D3-B74C-4ED0-B764-67F89C780257}"="{6C9C0E88-308D-4CD6-B219-9FA8470052B8}"
"{185E77D5-B0B3-45B7-9A6D-B20552F1D6BE}"="{6C9C0E88-308D-4CD6-B219-9FA8470052B8}"
"{ED15E5EC-4BAA-42B7-938B-663CED6D75A7}"="{1301BA0C-0957-487F-97A2-997272CA787F}"
"{C158A5B1-39E7-42A2-B464-B49139772454}"="{1301BA0C-0957-487F-97A2-997272CA787F}"
"{C0992FFB-075D-4E02-A29D-558FFFE1A081}"="{1301BA0C-0957-487F-97A2-997272CA787F}"
"{5AE92176-31CE-4E0B-B5FB-73BCB9A57ADE}"="{1301BA0C-0957-487F-97A2-997272CA787F}"
"{123729C4-DA7A-4972-B04E-C88893663986}"="{1301BA0C-0957-487F-97A2-997272CA787F}"
"{1CC60299-49A2-4110-B19B-08F7605B3534}"="{FA84112A-6162-4A27-9798-6656099A07D5}"
"{A76EB7C8-186D-471E-8623-C694E4CC9DA1}"="{FA84112A-6162-4A27-9798-6656099A07D5}"
"{9338A227-0A0D-472D-8705-D3A2786418C1}"="{997F3565-9273-4ADE-ACE4-61E260484290}"
"{6434968E-3D91-43B8-BBF6-40863DD27594}"="{997F3565-9273-4ADE-ACE4-61E260484290}"
"{9D51ABA6-94E9-4226-89F3-84673491DE7F}"="{997F3565-9273-4ADE-ACE4-61E260484290}"
"{C799BF36-3BB5-451D-B0ED-B966390FDAB6}"="{997F3565-9273-4ADE-ACE4-61E260484290}"
"{41DB2D02-F6B9-4B9C-A0CF-657A97FFFB33}"="{997F3565-9273-4ADE-ACE4-61E260484290}"
"{3F8F3AD9-98E5-454C-B99F-96E6656FE6B0}"="{CD142757-C2F6-4A3F-A73D-F9620C20AE40}"
"{587EF3EA-E8AF-4640-9863-05525748DCA6}"="{CD142757-C2F6-4A3F-A73D-F9620C20AE40}"
"{2B45F4BC-C9FA-45B4-8224-DA29D9EACB01}"="{051710BD-28BD-422D-8802-C72BA19F4460}"
"{D51D544F-E493-4A25-9786-750136BAB57A}"="{051710BD-28BD-422D-8802-C72BA19F4460}"
"{86991D91-A0EA-4755-8352-96BD63152B4C}"="{051710BD-28BD-422D-8802-C72BA19F4460}"
"{0BBE3C57-7EE3-4AA3-AE54-5714B2E5E37B}"="{051710BD-28BD-422D-8802-C72BA19F4460}"
"{394DAA91-4FE6-4FD7-A045-A4873E609AFD}"="{051710BD-28BD-422D-8802-C72BA19F4460}"
"{65E23ADC-D545-438E-B699-37258E44ABAB}"="{57541540-FA22-46E9-B429-868609C2C9E8}"
"{810402D9-E675-4B77-B518-CE27066FC7B4}"="{57541540-FA22-46E9-B429-868609C2C9E8}"
"{933DA7DC-7930-407B-8EA2-BC563DAE8247}"="{36C480CA-A28D-4A50-8E24-B4A15D6144B0}"
"{AD0102B8-2CBE-41C3-A81C-9275AAD61B9F}"="{36C480CA-A28D-4A50-8E24-B4A15D6144B0}"
"{35490AE1-AFC5-4EF1-B9A9-9C2DE1D378CA}"="{36C480CA-A28D-4A50-8E24-B4A15D6144B0}"
"{0FBDAA3A-0958-474B-A907-D89CE0050E64}"="{36C480CA-A28D-4A50-8E24-B4A15D6144B0}"
"{2C383EBB-A3B5-42E6-907F-63DF7445F28C}"="{36C480CA-A28D-4A50-8E24-B4A15D6144B0}"
"{4DAD7678-926F-463A-861E-4BB63D30B39D}"="{87C20754-93F4-41D3-8F7E-293B2711F49C}"
"{A74A9CF0-D0F4-453D-B296-57C4FB3DB668}"="{BAAAE749-96EA-4AD9-9062-9EFDA7545258}"
"{80ACC720-178F-418F-B6E3-CC3E8C083B25}"="{BAAAE749-96EA-4AD9-9062-9EFDA7545258}"
"{9E6D673C-E182-4695-A25E-75EF32541960}"="{FEC49275-26C7-4389-95AF-C00D0E8C3087}"
"{D2F03F6C-3AD0-43C2-BE76-8BC26079FD06}"="{FEC49275-26C7-4389-95AF-C00D0E8C3087}"
"{E9CDA016-818D-45DD-9850-5F7425E78B75}"="{FEC49275-26C7-4389-95AF-C00D0E8C3087}"
"{3ECB9FB9-945C-4E9B-A5E5-2CBE3077C8EE}"="{FEC49275-26C7-4389-95AF-C00D0E8C3087}"
"{0419272A-22F6-45E1-873A-B0A509302A88}"="{FEC49275-26C7-4389-95AF-C00D0E8C3087}"
"{B9DA4D00-CD44-400C-BA55-499DF593E10A}"="{528D9FFE-AEB5-4426-97D9-DC11B8B6EB84}"
"{EED38255-1D42-48F8-BB7F-9BA98649A570}"="{528D9FFE-AEB5-4426-97D9-DC11B8B6EB84}"
"{F1C3775E-EDEF-41EC-8B1A-F073DEBED40E}"="{528D9FFE-AEB5-4426-97D9-DC11B8B6EB84}"
"{42738E05-4036-4089-9557-C1B7648BDB1C}"="{017EFC09-E379-4140-B30A-997C8E3403F4}"
"{469CDF8E-AA5B-43D3-8095-4C20BA0F578B}"="{017EFC09-E379-4140-B30A-997C8E3403F4}"
"{35511123-12EF-41F6-B3DE-67B04F7BD8AC}"="{EF6D6A12-37FB-4779-ADAF-75A5AB200C36}"
"{2D27B5BC-B951-41C4-82B0-83817A9FFCDD}"="{EF6D6A12-37FB-4779-ADAF-75A5AB200C36}"
"{0D5AC8FD-B0C9-4AC3-B8B9-0D0A0581DF2C}"="{EF6D6A12-37FB-4779-ADAF-75A5AB200C36}"
"{139C57C3-BF59-438A-8CC7-706C9A4339A6}"="{EF6D6A12-37FB-4779-ADAF-75A5AB200C36}"
"{8F17073E-2193-44F4-9820-29387F13C427}"="{EF6D6A12-37FB-4779-ADAF-75A5AB200C36}"
"{F1A2E8AF-8BFF-4BFF-B1AE-6EFBA714EA0B}"="{2E3BD869-AED6-4D51-8895-3501DAB462CE}"
"{FEDF70E1-67BF-42F3-B8D3-289E72C81EC1}"="{2E3BD869-AED6-4D51-8895-3501DAB462CE}"
"{019B2FFC-79F5-4BDA-B9E2-294A5F99B5E7}"="{DD52E9DF-5287-4C8E-BB07-2BB95E13298E}"
"{042499B3-AF22-4950-8A23-89DA730E3E76}"="{DD52E9DF-5287-4C8E-BB07-2BB95E13298E}"
"{517F9090-D703-4FD5-AD6B-2EB3E49DE642}"="{DD52E9DF-5287-4C8E-BB07-2BB95E13298E}"
"{D79F59E8-479A-4BDC-B0F3-97D095BC894C}"="{DD52E9DF-5287-4C8E-BB07-2BB95E13298E}"
"{E4D04FC1-2D57-4261-811C-332847531AA0}"="{DD52E9DF-5287-4C8E-BB07-2BB95E13298E}"
"{DF865DC1-ED7E-40D5-BB47-E643B190D33C}"="{DD52E9DF-5287-4C8E-BB07-2BB95E13298E}"
"{F8E9E686-D79E-4FC2-9373-9B1413E29617}"="{C96B6CA3-E210-4749-86F2-0D3A58009230}"
"{A16AB67A-183F-4DF5-9802-62F639774E97}"="{C96B6CA3-E210-4749-86F2-0D3A58009230}"
"{838D81FA-801E-4FBD-9FE7-06FCB246ED75}"="{C96B6CA3-E210-4749-86F2-0D3A58009230}"
"{186FE2CC-876D-4EBE-86C8-4F8F08592093}"="{75755467-B832-43FE-99A0-0DC523DE863C}"
"{91ED20F1-F76F-431B-94DE-E5E41B60BA55}"="{75755467-B832-43FE-99A0-0DC523DE863C}"
"{0C80D95E-FA9B-4F5C-B014-83E3DAA3D210}"="{FE798561-759B-4105-A49C-695553287514}"
"{C3F00C1A-9B5F-4638-9E9D-D5D4B4D218EF}"="{FE798561-759B-4105-A49C-695553287514}"
"{F183A3B6-381E-41A9-8B93-B6DABB8211EE}"="{FE798561-759B-4105-A49C-695553287514}"
"{91836B63-53D9-4DEE-8F28-B5BC7CD93B27}"="{FE798561-759B-4105-A49C-695553287514}"
"{AE00176F-4610-4218-A88E-93B14498C459}"="{FE798561-759B-4105-A49C-695553287514}"
"{B14EBBE2-053D-4B96-B97C-B4EF0B3CE745}"="{FBAFEA1A-4399-42C4-A9A7-1C177AF10C61}"
"{5DF6E975-7C7F-4012-9BDA-21429BA12077}"="{FBAFEA1A-4399-42C4-A9A7-1C177AF10C61}"
"{3A2F8D98-5CAC-4EE1-B127-6C8E3F4BA970}"="{FBAFEA1A-4399-42C4-A9A7-1C177AF10C61}"
"{60AC5190-905E-4921-B865-7AAEF5C6BC05}"="{5C694D94-E773-45E3-84E6-80C3E7F9C124}"
"{875C719E-8DE8-4BE7-846E-A1CD92FB6E8D}"="{5C694D94-E773-45E3-84E6-80C3E7F9C124}"
"{C99CA9B8-BFCE-4622-8118-9C7FF78B6365}"="{E9C2A512-5B13-47CA-97BE-2E203D3E7927}"
"{D35B32D6-55E7-4991-9696-1AC59BA31C91}"="{E9C2A512-5B13-47CA-97BE-2E203D3E7927}"
"{4BE342A4-345D-4FEE-B592-465A47FE113F}"="{E9C2A512-5B13-47CA-97BE-2E203D3E7927}"
"{A201EA8F-E847-4023-9EF5-2A5DAA30526B}"="{E9C2A512-5B13-47CA-97BE-2E203D3E7927}"
"{191189C7-5FCD-4DCB-8815-97DAA22C70E6}"="{E9C2A512-5B13-47CA-97BE-2E203D3E7927}"
"{5D064DAE-DC5C-47C3-B32C-72B13D2BC3C8}"="{0094CE62-79BB-45C4-92F4-F3000463D318}"
"{4CD4FCB3-E077-43BC-AF4B-55D1620D54DF}"="{0094CE62-79BB-45C4-92F4-F3000463D318}"
"{EC13DE5A-7793-4C8D-B400-ADE9D287A3CE}"="{0094CE62-79BB-45C4-92F4-F3000463D318}"
"{E7A718F6-923F-4D63-8602-BB44926D484A}"="{948C8BEC-15A7-4E08-ABED-0C5E751B1D09}"
"{7C124753-A8A8-4B13-B2C0-768B4293DBD2}"="{948C8BEC-15A7-4E08-ABED-0C5E751B1D09}"
"{682C23E1-2D26-4B22-80B1-10AD4D4DA1C6}"="{948C8BEC-15A7-4E08-ABED-0C5E751B1D09}"
"{A8AE0AA4-7C01-4F92-88E8-7835CE93D49D}"="{948C8BEC-15A7-4E08-ABED-0C5E751B1D09}"
"{8F72DE12-4B06-4ED9-8978-DC9EDD523D18}"="{948C8BEC-15A7-4E08-ABED-0C5E751B1D09}"
"{ED40F62B-6558-4322-AF44-4150C637DCA5}"="{98294DD7-7D92-4E57-AA8C-55B6C0D4C78A}"
"{45F086E5-6FA5-412E-BC0C-FF7B5694DA0D}"="{98294DD7-7D92-4E57-AA8C-55B6C0D4C78A}"
"{ED5B5377-348F-4631-B009-D518CA6315DA}"="{2D936A6C-9607-4746-A5DE-9AC4D3FC105E}"
"{DBDC30A5-1BF9-43F6-B0A3-3093DA15B59C}"="{2D936A6C-9607-4746-A5DE-9AC4D3FC105E}"
"{A00A59FC-701F-4290-9105-3275F63606D8}"="{2D936A6C-9607-4746-A5DE-9AC4D3FC105E}"
"{207B0E7C-DA15-4EDF-9AC3-54A3FE0DF051}"="{E575BF64-20BD-49A8-B4C0-74E4404F1FA2}"
"{867111D5-8E55-496C-B71C-42F5A1B77C22}"="{E575BF64-20BD-49A8-B4C0-74E4404F1FA2}"
"{4E523946-E353-42FE-8547-CA649C617AC1}"="{E575BF64-20BD-49A8-B4C0-74E4404F1FA2}"
"{7628A297-B444-45A4-B698-87BBB6D2DCC0}"="{E575BF64-20BD-49A8-B4C0-74E4404F1FA2}"
"{D9AFE2E4-752C-4500-8BED-EDB2ED9999F6}"="{E575BF64-20BD-49A8-B4C0-74E4404F1FA2}"
"{C8DB05C5-D602-4971-807D-0BE120C9E723}"="{E575BF64-20BD-49A8-B4C0-74E4404F1FA2}"
"{C71E62B4-07CE-4F5D-AC6F-5453E0F3FD4C}"="{614127FA-B6F6-458F-95E1-BE6A64FF964C}"
"{7D972825-F5F8-40DC-9493-29CB80481C19}"="{614127FA-B6F6-458F-95E1-BE6A64FF964C}"
"{4AA53011-991C-4E1F-B908-EC8C6B256185}"="{A0036D84-0D3F-44EF-8386-3C52C204D445}"
"{B0C1693E-F095-472A-AF94-FF20CA23C0CC}"="{A0036D84-0D3F-44EF-8386-3C52C204D445}"
"{2CE068C0-C5E0-4B18-B011-0DF253DD3437}"="{0AE3A244-6BC7-4249-870D-E6EB7EEE0C3A}"
"{7E7F2EE1-3F21-4DB1-8E28-4D1777D655D2}"="{0AE3A244-6BC7-4249-870D-E6EB7EEE0C3A}"
"{3879AB14-7493-4755-B60D-B696741A3B44}"="{0AE3A244-6BC7-4249-870D-E6EB7EEE0C3A}"
"{377DD732-4609-4017-A7F0-7CEA8FB61904}"="{0AE3A244-6BC7-4249-870D-E6EB7EEE0C3A}"
"{0DF61948-73D6-4A83-AA10-DA62F694A19D}"="{0AE3A244-6BC7-4249-870D-E6EB7EEE0C3A}"
"{3893FF00-DDDE-4B22-82E8-74AA7C4565FE}"="{0AE3A244-6BC7-4249-870D-E6EB7EEE0C3A}"
"{D06CF57D-DC2D-499C-AD98-DFAE14BF97A3}"="{0AE3A244-6BC7-4249-870D-E6EB7EEE0C3A}"
"{770B1719-EA34-4DBC-8E9A-C0C95D456930}"="{0AE3A244-6BC7-4249-870D-E6EB7EEE0C3A}"
"{D660869A-DE16-4D1E-A255-FA2AB2339F6B}"="{BB8F791F-4FE7-41E7-A265-5F95DC4295DF}"
"{D43E8652-6873-4E55-9338-D9D1FD63F3E5}"="{BB8F791F-4FE7-41E7-A265-5F95DC4295DF}"
"{0D8F5CD1-3682-4390-AEB8-E7F4551B87C5}"="{BB8F791F-4FE7-41E7-A265-5F95DC4295DF}"
"{53E6669D-DEC7-4AB5-94EA-732954C58843}"="{BB8F791F-4FE7-41E7-A265-5F95DC4295DF}"
"{19FC04B6-44D9-4B5C-8888-F23A5376B89E}"="{BB8F791F-4FE7-41E7-A265-5F95DC4295DF}"
"{824B1D1E-3C24-4C8A-B480-9914050D908C}"="{E5AC69A9-8414-421C-96EC-8B87D82070A2}"
"{DD9B56AB-B698-4930-A4F2-68C1812DAD60}"="{6AFE8BFE-7468-4C06-962A-1CE9AFACA446}"
"{647BEF2D-A54B-4EFB-AD65-A2616F0067BB}"="{6AFE8BFE-7468-4C06-962A-1CE9AFACA446}"
"{82CEDF35-E131-4549-85E9-732BD3C9D3EB}"="{E7E76A21-6E5A-4662-B40E-A4975B7898B8}"
"{73953AD9-0CE3-439E-86B4-EE6F2FBD998A}"="{E7E76A21-6E5A-4662-B40E-A4975B7898B8}"
"{0CF607D1-E448-4968-80A8-5F7B740C644F}"="{6AFE8BFE-7468-4C06-962A-1CE9AFACA446}"
"{51D5A7E5-4E01-46F9-A9D5-C02D5C856E46}"="{6AFE8BFE-7468-4C06-962A-1CE9AFACA446}"
"{E999F83F-91B5-4D40-9127-C620B82A4E29}"="{6AFE8BFE-7468-4C06-962A-1CE9AFACA446}"
"{05ADB82A-A723-4BE9-B25B-FB1CAD8A4EF1}"="{1B0FCD74-5D6B-43C5-AE97-F365BEA81805}"
"{97025A50-B365-4468-8F06-D52EC1574303}"="{1B0FCD74-5D6B-43C5-AE97-F365BEA81805}"
"{DB2473EC-C66D-4A5F-922C-4FFF4579D7BA}"="{1B0FCD74-5D6B-43C5-AE97-F365BEA81805}"
"{676989C8-7DB3-4874-932B-76F494AC8F0D}"="{9F5E6236-5B5D-43EA-9585-3ADAC77CDA3F}"
"{17400A54-C858-4000-835C-716A05732BB5}"="{9F5E6236-5B5D-43EA-9585-3ADAC77CDA3F}"
"{77D2078D-DF5E-4191-B3EC-1075B1BF7861}"="{9F5E6236-5B5D-43EA-9585-3ADAC77CDA3F}"
"{56CF2E59-0FFE-4141-AA90-A9C930A116CD}"="{9F5E6236-5B5D-43EA-9585-3ADAC77CDA3F}"
"{32242B87-749B-49E8-9A41-9CE9CE2C8D87}"="{9F5E6236-5B5D-43EA-9585-3ADAC77CDA3F}"
"{2D82B246-CD3B-4D5A-A907-C5D26E6CF2ED}"="{27490EB8-8677-43C0-9B26-14B5A99940C0}"
"{7F185544-087D-41CF-8E1C-A56B6118D90E}"="{27490EB8-8677-43C0-9B26-14B5A99940C0}"
"{38C4A361-7B07-4D7A-B6A5-6AA27B051375}"="{FAD49C4D-55E3-40CF-80CE-F1523C2BC039}"
"{37566B75-AB65-4094-8172-29F5ABA66A8E}"="{FAD49C4D-55E3-40CF-80CE-F1523C2BC039}"
"{C2114544-D3F1-42F4-B4F5-9DAE1C4D6BC5}"="{AC697A5E-9793-4B28-8825-D77D8A99F08C}"
"{BA5EE57B-1069-474D-A843-EC3ABEEF53A1}"="{AC697A5E-9793-4B28-8825-D77D8A99F08C}"
"{646D097E-FF10-42EA-8A92-04A58184F108}"="{AC697A5E-9793-4B28-8825-D77D8A99F08C}"
"{FF070484-31A3-46DD-9110-A843C4ECD57C}"="{AC697A5E-9793-4B28-8825-D77D8A99F08C}"
"{EBFD756A-B895-4237-B310-F601C95E5669}"="{AC697A5E-9793-4B28-8825-D77D8A99F08C}"
"{47006AD7-3C3E-4177-B8A0-D8005A900275}"="{67160C80-5C38-4E5D-BA06-7731793EB3F0}"
"{BBD176FE-0FCC-4723-921F-F67FC8ACB185}"="{67160C80-5C38-4E5D-BA06-7731793EB3F0}"
"{F714FB6C-7E30-4441-8C78-DC978C4630FD}"="{67160C80-5C38-4E5D-BA06-7731793EB3F0}"
"{1C6B8D51-CD2D-4861-ACB8-3E670187B81E}"="{02F454FA-6D4C-440F-BAA0-D9FBBED57462}"
"{05943DDF-C0F0-4A2F-98EF-70E26EB7E4C1}"="{02F454FA-6D4C-440F-BAA0-D9FBBED57462}"
"{49E77C0A-A1E5-4887-8B1F-F20788848448}"="{22482F1A-9C83-4017-9B9A-C3533736FCCA}"
"{D2706F53-C27D-4E4C-BD53-13D1EDA011CB}"="{22482F1A-9C83-4017-9B9A-C3533736FCCA}"
"{4AF8E1D6-6B7B-4C84-9F6A-2A5E3BDDD079}"="{22482F1A-9C83-4017-9B9A-C3533736FCCA}"
"{CEBDABB7-0263-42C1-B760-1C065F60FAA5}"="{22482F1A-9C83-4017-9B9A-C3533736FCCA}"
"{A0221D97-0023-4D8E-89AA-FFBFB8A355D6}"="{22482F1A-9C83-4017-9B9A-C3533736FCCA}"
"{A4E4E7C1-C51B-45AA-889E-1D17A427D93D}"="{22482F1A-9C83-4017-9B9A-C3533736FCCA}"
"{9BD7900C-64AE-4012-89F5-DA23472DFF78}"="{22482F1A-9C83-4017-9B9A-C3533736FCCA}"
"{614ED7A1-2535-466C-AE62-42474706D9F1}"="{22482F1A-9C83-4017-9B9A-C3533736FCCA}"
"{F815BD12-172E-4C33-997C-8834D1A4444A}"="{DAFA071B-79BB-4B5F-B4EE-7D788F898364}"
"{4B3F3B78-7A5A-4ECB-9047-53379602EA41}"="{DAFA071B-79BB-4B5F-B4EE-7D788F898364}"
"{A13C8724-836C-4E5A-AC6E-1BA73BD2B93A}"="{DAFA071B-79BB-4B5F-B4EE-7D788F898364}"
"{EBBA00E6-9137-4BCB-8EFA-78F76696ED34}"="{238BE142-9BB4-4418-A804-8123FE1719E4}"
"{7132834F-C55D-4A9C-800B-32BE843CB3DE}"="{238BE142-9BB4-4418-A804-8123FE1719E4}"
"{C91C8C4E-2859-4762-864A-87405EEC43F9}"="{EEE9DE85-62F0-401C-BE6D-ED3F81B99E69}"
"{6E4F0C11-150B-4E0B-8FD8-8A929EFB17FF}"="{EEE9DE85-62F0-401C-BE6D-ED3F81B99E69}"
"{07277AE9-5D79-4C90-9BDD-B56747142A7C}"="{EEE9DE85-62F0-401C-BE6D-ED3F81B99E69}"
"{CC730AD2-D1AD-426A-81E9-FCC834996BF5}"="{EEE9DE85-62F0-401C-BE6D-ED3F81B99E69}"
"{0D4A2782-C93D-492B-B59D-F0C38CB93681}"="{EEE9DE85-62F0-401C-BE6D-ED3F81B99E69}"
"{5B85E984-1E21-424A-AA2A-AF0A1E011F56}"="{EEE9DE85-62F0-401C-BE6D-ED3F81B99E69}"
"{914841C4-0E96-4C28-AC0A-3C59C00B852C}"="{EEE9DE85-62F0-401C-BE6D-ED3F81B99E69}"
"{22DD41ED-A661-45FD-BB06-F37AE312B3C5}"="{EEE9DE85-62F0-401C-BE6D-ED3F81B99E69}"
"{C9FF3539-C40C-4157-896D-3ACCD586C17A}"="{B899466F-A149-4C19-BE4C-82F28E78C90C}"
"{513B3722-5E12-4BF7-8B74-401D7CD108D4}"="{B899466F-A149-4C19-BE4C-82F28E78C90C}"
"{1AF9E027-D20E-4493-9C52-3FEE80F2D85C}"="{B899466F-A149-4C19-BE4C-82F28E78C90C}"
"{448EAE52-64A9-4AE1-B692-8919FD98719B}"="{CD70742A-A310-4A83-AA3E-9EE6C713699B}"
"{E1DB68AD-8072-415C-ADDB-BE20DB38D222}"="{CD70742A-A310-4A83-AA3E-9EE6C713699B}"
"{6C310303-1AD6-4871-8DA9-FC5AB66CEF24}"="{1F61065D-8013-45D7-854C-841462A88AC0}"
"{0ECCC5DE-A027-44F1-8F7F-2FBA34A46838}"="{1F61065D-8013-45D7-854C-841462A88AC0}"
"{B6E4AF96-48C2-4ACA-9A16-6A08A0CDC37E}"="{1F61065D-8013-45D7-854C-841462A88AC0}"
"{6B62AC2C-A0A1-4328-B0E4-0CE4B8031111}"="{1F61065D-8013-45D7-854C-841462A88AC0}"
"{F041CADE-1427-443D-94D4-2D488EEE9903}"="{1F61065D-8013-45D7-854C-841462A88AC0}"
"{DBD6FFC1-E51D-4561-A8B1-A3E761CA9000}"="{1F61065D-8013-45D7-854C-841462A88AC0}"
"{52F428C6-3024-47FA-A6AD-820CA6637278}"="{1F61065D-8013-45D7-854C-841462A88AC0}"
"{465533BF-8BCA-4B90-B8F5-6170F6236890}"="{1F61065D-8013-45D7-854C-841462A88AC0}"
"{7E1A11F9-8015-4070-BA3E-7D1654DE0298}"="{910B8A31-95E6-44FC-8646-793F2B600259}"
"{E25FC7C6-FA91-458C-94D8-E722AB2FCFE3}"="{910B8A31-95E6-44FC-8646-793F2B600259}"
"{69D52080-40DB-41DD-B790-0BDE045EE7BA}"="{910B8A31-95E6-44FC-8646-793F2B600259}"
"{FF732987-8AB7-4C95-827A-BFB97BFBD12D}"="{BD873650-4B10-4C8E-A67E-AF79BCD40C4B}"
"{C125DD96-7711-495D-8430-3FE1690C044D}"="{BD873650-4B10-4C8E-A67E-AF79BCD40C4B}"
"{1098AA54-C745-4960-B488-08451B7A474C}"="{C9536046-D57B-4320-8ECF-BC05A509F217}"
"{2A474596-490B-408D-BE96-FF7A6B48F504}"="{C9536046-D57B-4320-8ECF-BC05A509F217}"
"{F88A0270-8643-49C5-8975-8CB2B1D78A12}"="{C9536046-D57B-4320-8ECF-BC05A509F217}"
"{1A7C8DF8-BB7A-4992-A83D-BCDB32E7BFF8}"="{C9536046-D57B-4320-8ECF-BC05A509F217}"
"{839522E1-EEA9-4CF8-B81B-E41E38F968AC}"="{C9536046-D57B-4320-8ECF-BC05A509F217}"
"{EA8B004E-FE7E-4731-942C-86B8040E3540}"="{C9536046-D57B-4320-8ECF-BC05A509F217}"
"{1C5FBE02-FC02-4439-9025-7D0EF1CA8D5B}"="{C9536046-D57B-4320-8ECF-BC05A509F217}"
"{DC22A8A7-6F42-497C-8AA5-CA5923132B2D}"="{C9536046-D57B-4320-8ECF-BC05A509F217}"
"{CA8BFE53-F13E-40CF-AE2C-ECB5B4DC56D4}"="{5F753B33-D188-4B3A-B4C0-76FE707F7296}"
"{28528495-E74F-401D-B7DC-575FD4600665}"="{5F753B33-D188-4B3A-B4C0-76FE707F7296}"
"{A5FB7118-C25E-44AF-BC4D-B6C5BE5C13E1}"="{5F753B33-D188-4B3A-B4C0-76FE707F7296}"
"{055DCE49-33A1-42B4-AD2B-C76BC0C2CF2B}"="{9E9753B3-A361-4E0A-8CCC-8B9380E6AC23}"
"{A8A895F3-7994-4F11-A1AC-6A0841C9402E}"="{9E9753B3-A361-4E0A-8CCC-8B9380E6AC23}"
"{936C6132-90AD-4417-BDA3-A2500F0C5AC0}"="{36616AA7-78BD-4304-9985-AF6BACEE56D0}"
"{833E5685-3EA7-48B1-A265-597158CFDCE9}"="{36616AA7-78BD-4304-9985-AF6BACEE56D0}"
"{E523B77A-86EB-4F15-A82E-34594651B37F}"="{36616AA7-78BD-4304-9985-AF6BACEE56D0}"
"{DFBE23C8-CCAC-460B-86D2-B88970B4ACB6}"="{36616AA7-78BD-4304-9985-AF6BACEE56D0}"
"{78E911D8-7ED6-49F5-9580-6099D0A5D6EE}"="{36616AA7-78BD-4304-9985-AF6BACEE56D0}"
"{FB081C8C-FED2-44A9-80EF-AAD23D06EE74}"="{36616AA7-78BD-4304-9985-AF6BACEE56D0}"
"{2335624F-29C8-4DC6-97D6-6FFAE5703F33}"="{36616AA7-78BD-4304-9985-AF6BACEE56D0}"
"{C1090242-1B85-4BE8-BB93-4B5BB0B54E2E}"="{36616AA7-78BD-4304-9985-AF6BACEE56D0}"
"{21C9E2F8-142C-44D5-87BA-3FF8094747E1}"="{2E2B80DF-C5A9-470B-8C6A-32DF00432964}"
"{E5CF211C-AC4A-4D6E-BFA8-685134FB1983}"="{CFC44A84-D2C6-4152-BAEA-28C973FE3E14}"
"{B6C8DF73-4C39-4F95-8B43-E2382736079A}"="{CFC44A84-D2C6-4152-BAEA-28C973FE3E14}"
"{CAE9506B-84C9-4065-9AA9-1897A7CD18CD}"="{C100DD80-C740-49D5-BECB-215C7C9B00F4}"
"{2D926FFA-178E-4E17-90EB-69316A80FC8A}"="{C100DD80-C740-49D5-BECB-215C7C9B00F4}"
"{D053B201-ADD4-40C8-9A44-2D5D7ED1A201}"="{C100DD80-C740-49D5-BECB-215C7C9B00F4}"
"{A3092916-1B06-4BFF-A054-3DA19CA9D593}"="{C100DD80-C740-49D5-BECB-215C7C9B00F4}"
"{A3F82B63-E63A-4E02-9ABA-3CE6577C2578}"="{C100DD80-C740-49D5-BECB-215C7C9B00F4}"
"{59EC1962-7C7B-4B2E-B792-159EDA04DCA3}"="{33216227-AE1F-4BCA-839C-0D3DCECDC56B}"
"{EE4E5DFD-22D3-4D9F-8501-FDF2BEA13D9F}"="{33216227-AE1F-4BCA-839C-0D3DCECDC56B}"
"{70AC2DFF-7F6E-4A59-956A-2148B896FE52}"="{33216227-AE1F-4BCA-839C-0D3DCECDC56B}"
"{98EC01A3-3509-4E8D-B415-F2B5DA65187C}"="{BBC45557-D3A0-4968-B31B-A1DD6EE48F5A}"
"{D087E2D5-11C2-4211-9B06-305FF3F0DD11}"="{BBC45557-D3A0-4968-B31B-A1DD6EE48F5A}"
"{AE232A9F-42CB-450A-BCAA-FCB71767F4EF}"="{136DED37-D3E3-40AC-B32C-75249F6AD948}"
"{3B4138A3-D261-4604-8139-30C4DDB7F269}"="{136DED37-D3E3-40AC-B32C-75249F6AD948}"
"{B862EA5C-3806-47A2-8FB8-E21DDBD42154}"="{136DED37-D3E3-40AC-B32C-75249F6AD948}"
"{DC4858A1-1DD6-4DB8-9CB8-E4566B958A8A}"="{136DED37-D3E3-40AC-B32C-75249F6AD948}"
"{B527E0DE-D6EA-4C95-9CF3-E72B4589184C}"="{136DED37-D3E3-40AC-B32C-75249F6AD948}"
"{02796C73-D9A2-4A92-A97B-300DB615B686}"="{136DED37-D3E3-40AC-B32C-75249F6AD948}"
"{0D56273B-C961-4490-956A-011013061F4D}"="{136DED37-D3E3-40AC-B32C-75249F6AD948}"
"{768D2D5F-7E45-4194-B2A9-AADDD5F59271}"="{136DED37-D3E3-40AC-B32C-75249F6AD948}"
"{FE94199C-F95B-4211-A3C5-986D9B73D990}"="{17DB7ADE-C558-401C-9A3F-7FA59D54A8B2}"
"{AEC3641F-140E-4BFE-9A8A-BC29530EA32A}"="{17DB7ADE-C558-401C-9A3F-7FA59D54A8B2}"
"{8432C32F-FBE0-466C-A620-BA7631E41EB5}"="{17DB7ADE-C558-401C-9A3F-7FA59D54A8B2}"
"{BBAF1D72-C613-4BB9-8E02-8CCCCCB74885}"="{ABC394C7-253B-4CDC-90C5-C3272B1F90BD}"
"{4D42B1AD-C3AC-4543-B31D-30D660E42170}"="{ABC394C7-253B-4CDC-90C5-C3272B1F90BD}"
"{65389FAC-5C56-42F9-89A3-E62CB4E85F24}"="{78626B2A-CD55-43BC-BA8E-36948C523E1E}"
"{2DC71DBF-8316-4D64-9DE3-7FB0B46E056F}"="{78626B2A-CD55-43BC-BA8E-36948C523E1E}"
"{0262BAE7-5292-4CF7-AD97-4701C75A41FC}"="{78626B2A-CD55-43BC-BA8E-36948C523E1E}"
"{4558F1C7-C202-4F78-9BEA-C66F4A73DC0E}"="{78626B2A-CD55-43BC-BA8E-36948C523E1E}"
"{82E5F2D9-9DC3-4B59-A8B4-1AC890A4D9C7}"="{78626B2A-CD55-43BC-BA8E-36948C523E1E}"
"{39738C8E-29FC-4DE9-9419-7446BF8289E7}"="{78626B2A-CD55-43BC-BA8E-36948C523E1E}"
"{246ED2D2-D88C-413E-86ED-9AD3C209AF5D}"="{78626B2A-CD55-43BC-BA8E-36948C523E1E}"
"{14DE47C2-22A6-4621-A0F4-31EDFEF86F2A}"="{78626B2A-CD55-43BC-BA8E-36948C523E1E}"
"{04413D01-E7F0-4C10-8473-23E25E5833FC}"="{BD59FB9C-98C9-49FA-AF29-3EEEA1595BE6}"
"{83DDBA60-A945-4E0B-A177-E88388AB009E}"="{BD59FB9C-98C9-49FA-AF29-3EEEA1595BE6}"
"{2A08795B-13BE-46E3-8D63-0F3DD38879CD}"="{B56398C6-C461-4AE5-8DE7-A2A69678979D}"
"{6B372822-2D9A-449B-8070-310872C003ED}"="{B56398C6-C461-4AE5-8DE7-A2A69678979D}"
"{713734A0-E2AB-434E-A8BE-3B67148C65BE}"="{B56398C6-C461-4AE5-8DE7-A2A69678979D}"
"{7ACF6C4F-2E42-4B91-BD91-679CDA224476}"="{467B100E-7E9D-43E3-A76A-014449365B2F}"
"{74D9D2BE-1C65-4382-B0FD-A3858D287F32}"="{467B100E-7E9D-43E3-A76A-014449365B2F}"
"{BF6036A8-3DAC-408D-BCF0-DD6378E0EBDA}"="{467B100E-7E9D-43E3-A76A-014449365B2F}"
"{47404449-43E8-4ED1-BC81-AC97D572A449}"="{467B100E-7E9D-43E3-A76A-014449365B2F}"
"{646DAE25-1CC9-4297-A22E-FD07867B47D8}"="{467B100E-7E9D-43E3-A76A-014449365B2F}"
"{D4691E25-F864-4E9B-AD52-00DBBE274950}"="{467B100E-7E9D-43E3-A76A-014449365B2F}"
"{7D14D084-B06C-4883-BC6A-CA56C44DC606}"="{467B100E-7E9D-43E3-A76A-014449365B2F}"
"{0F033C6E-3859-4067-8F3B-34BE3E4DFEF3}"="{467B100E-7E9D-43E3-A76A-014449365B2F}"
"{2C8003DC-FAAF-40A2-957B-69D393F0A7EF}"="{6D72DE4C-EF5C-4EB3-9F1D-7422E845B2BB}"
"{18809CD4-F5BE-4604-B751-25C08ADECF6D}"="{6D72DE4C-EF5C-4EB3-9F1D-7422E845B2BB}"
"{B555FAB0-685C-4514-A7C7-E0BFDB48E046}"="{6D72DE4C-EF5C-4EB3-9F1D-7422E845B2BB}"
"{CE1F2739-E14A-49E4-9F82-2B769E042E77}"="{391E29B7-3037-4AB8-B238-5AF828B16AB4}"
"{ADE245CD-10DF-45A7-99B3-250EAB4BA4B2}"="{391E29B7-3037-4AB8-B238-5AF828B16AB4}"
"{DB85F002-CCA2-4503-B530-CA26E46FAC7E}"="{280D34BA-601A-45BE-AFCA-F065C6608F0C}"
"{2D4CD886-906F-4163-AF36-73D8019EE3D6}"="{280D34BA-601A-45BE-AFCA-F065C6608F0C}"
"{B30E7C13-8EAF-49BA-B7AE-A7EFC9248457}"="{280D34BA-601A-45BE-AFCA-F065C6608F0C}"
"{0A85928C-14C9-4343-BA45-B7D1DB82F080}"="{280D34BA-601A-45BE-AFCA-F065C6608F0C}"
"{9ACB9632-E823-4D51-B1D5-28608DEACBD3}"="{280D34BA-601A-45BE-AFCA-F065C6608F0C}"
"{9B201D22-F04D-465F-8140-3C625F3EC58E}"="{280D34BA-601A-45BE-AFCA-F065C6608F0C}"
"{D7A640A8-641F-4185-9338-D68E6EA1FB5A}"="{280D34BA-601A-45BE-AFCA-F065C6608F0C}"
"{29AC4BBF-D82C-41BF-8AD2-127BBCBBC616}"="{280D34BA-601A-45BE-AFCA-F065C6608F0C}"
"{789B93D8-09D7-47CF-90BE-D023E500F7CD}"="{2D69BA53-72CF-4663-B8D8-32D40B6F581F}"
"{0BCCE404-75B9-4CA7-A9F7-62DA530870AE}"="{2D69BA53-72CF-4663-B8D8-32D40B6F581F}"
"{B22AE220-81FB-4F25-8080-DAA9A44F1B5A}"="{2D69BA53-72CF-4663-B8D8-32D40B6F581F}"
"{0DC4770B-3C91-43B4-9136-D7B49ACEF5E2}"="{50C8170E-79DA-49F0-B5B1-48BA82357D83}"
"{9C75AFE5-1EBE-46F1-A918-B219FC1DCF3F}"="{50C8170E-79DA-49F0-B5B1-48BA82357D83}"
"{A52FB15D-F1F5-456A-9752-5D46159D2030}"="{2CFE0A15-CDCE-4978-8639-99D5697F51D8}"
"{F52C8A55-C1D6-46D8-B1F5-64C7339F328F}"="{2CFE0A15-CDCE-4978-8639-99D5697F51D8}"
"{0E966F50-8447-48A8-95BE-3FD2D8FBBB82}"="{2CFE0A15-CDCE-4978-8639-99D5697F51D8}"
"{22A2094A-8CFE-4A7A-8F14-B13BF9C995CC}"="{2CFE0A15-CDCE-4978-8639-99D5697F51D8}"
"{DB19E559-906C-4221-8CCD-90E57866474B}"="{2CFE0A15-CDCE-4978-8639-99D5697F51D8}"
"{41D4FF75-4D11-4F03-A339-E42FEE71CC29}"="{7F0F8DDA-A104-440C-BA3C-34141F35126A}"
"{F7F279CA-DDFB-4A6D-96CD-B7C7C2D6137C}"="{7F0F8DDA-A104-440C-BA3C-34141F35126A}"
"{67EB6487-654C-43B5-801D-9264E2F325D8}"="{A3F1E27D-7AD4-4ADB-98E0-12F92AF81C95}"
"{88E96299-F096-4DC4-8481-54A8D5D9163A}"="{A3F1E27D-7AD4-4ADB-98E0-12F92AF81C95}"
"{3081FC38-9FA7-4F8B-821C-81DEA10F6D65}"="{94E19B14-45B2-41EB-ADC9-F8305E222D91}"
"{EB6FCFEB-4FEE-4527-BB32-0F70B29D3F40}"="{94E19B14-45B2-41EB-ADC9-F8305E222D91}"
"{46D2B353-0645-4387-B688-F35CCF9F1D49}"="{94E19B14-45B2-41EB-ADC9-F8305E222D91}"
"{3939155E-F29A-48F5-AAD7-4BADB37B1DBE}"="{94E19B14-45B2-41EB-ADC9-F8305E222D91}"
"{B9758959-DB41-45A0-9DED-D7F3CD60A615}"="{94E19B14-45B2-41EB-ADC9-F8305E222D91}"
"{5F135811-B325-484F-B7A5-ECF87179E758}"="{14088C6F-3664-4264-A07B-D6DC3B8691C9}"
"{8844A2D8-5FBF-4F1F-840B-595371A0DBF4}"="{14088C6F-3664-4264-A07B-D6DC3B8691C9}"
"{ABF29DEC-6A32-4970-A243-16B4E82BB59F}"="{14088C6F-3664-4264-A07B-D6DC3B8691C9}"
"{A42141DA-BD49-44BD-9807-EB32E2270C4D}"="{FCBEA820-4BC7-4CCA-9853-19B293C68471}"
"{C4CE52E8-3C93-46FC-AEC1-83799F754DF0}"="{FCBEA820-4BC7-4CCA-9853-19B293C68471}"
"{774D0066-4EAC-49A4-8DC8-552B41D4BBA6}"="{FCBEA820-4BC7-4CCA-9853-19B293C68471}"
"{261CA942-68FE-4FE6-94B5-7891DE9605CA}"="{FCBEA820-4BC7-4CCA-9853-19B293C68471}"
"{65D0AFF8-DAF6-48BE-938D-67DEF8EA6602}"="{FCBEA820-4BC7-4CCA-9853-19B293C68471}"
"{BC15812C-ABF8-4269-9915-362CDACB2C62}"="{FCBEA820-4BC7-4CCA-9853-19B293C68471}"
"{6D833695-F2FD-4CAD-8396-A822F318955B}"="{FCBEA820-4BC7-4CCA-9853-19B293C68471}"
"{9CDB1660-D609-42BA-B346-2D2A2D1305A6}"="{FCBEA820-4BC7-4CCA-9853-19B293C68471}"
"{B4B4C02D-90C4-4313-B030-B21E4DD68B3C}"="{A3860E7E-1F33-407F-A1B6-2486655CFB43}"
"{448DCF6C-FD66-4B60-A79D-D56E58A31772}"="{A3860E7E-1F33-407F-A1B6-2486655CFB43}"
"{B21E2AAD-D51C-4DDA-92CC-B9714B00C733}"="{1E478287-3FFA-49B2-B0DE-59C422C9C937}"
"{49B7E2A8-1ADA-4C00-B214-2F6F013EEDBF}"="{1E478287-3FFA-49B2-B0DE-59C422C9C937}"
"{7ECF0251-FB72-4ED4-828D-8AE2175FBF94}"="{1E478287-3FFA-49B2-B0DE-59C422C9C937}"
"{49420A61-2188-4989-8539-41BAC70A8B75}"="{D2F94D66-57E7-4267-9628-CDA206B8148B}"
"{C3F7135A-B8EA-4588-8E6D-4B128BFBAED3}"="{D2F94D66-57E7-4267-9628-CDA206B8148B}"
"{FAB55FE5-9752-487E-A909-83E41EE3791E}"="{B1A7C4E3-0653-4EA9-B8E2-1774FD4F888F}"
"{E0537022-874E-4074-B211-EA268EF484FB}"="{B1A7C4E3-0653-4EA9-B8E2-1774FD4F888F}"
"{1098C90F-064E-4B0A-B6B7-5EEF15212B6E}"="{B1A7C4E3-0653-4EA9-B8E2-1774FD4F888F}"
"{EC003826-D4AC-4273-B3CE-34AD867E9EDB}"="{B1A7C4E3-0653-4EA9-B8E2-1774FD4F888F}"
"{685CA88B-9702-419D-AD48-7EADA6D3E22F}"="{B1A7C4E3-0653-4EA9-B8E2-1774FD4F888F}"
"{96827657-349B-41E4-9946-7A823DF24F6F}"="{B1A7C4E3-0653-4EA9-B8E2-1774FD4F888F}"
"{6A0A0229-4BDD-416F-8862-D26299AF4103}"="{B1A7C4E3-0653-4EA9-B8E2-1774FD4F888F}"
"{AA378FDC-FC2D-4F75-9079-CDE58C83763E}"="{B1A7C4E3-0653-4EA9-B8E2-1774FD4F888F}"
"{0B09DDEE-BE84-4E4B-8EF2-55163D2272DB}"="{0297F0CA-3A98-48FA-AF0F-BBB37F797A15}"
"{45B445C5-0E2F-42A9-8585-B244C7DB9AF2}"="{0297F0CA-3A98-48FA-AF0F-BBB37F797A15}"
"{A956A538-8556-493E-987D-032684DA3FFC}"="{40F336AA-2DEF-4BFD-A916-E9541838B742}"
"{124C4BBB-022B-4002-82CF-83CC0F5323AD}"="{40F336AA-2DEF-4BFD-A916-E9541838B742}"
"{3E8AE868-937B-470F-BAF5-51918B32C685}"="{0297F0CA-3A98-48FA-AF0F-BBB37F797A15}"
"{4595C60C-059D-4610-82D4-BF555F39FA8B}"="{2F804C6E-E23E-4A15-902B-6F85EF530577}"
"{7B1922B0-AE8A-4D10-96E6-58BBECCF1C99}"="{2F804C6E-E23E-4A15-902B-6F85EF530577}"
"{37814041-0174-4D82-A511-04F750AC154C}"="{2F804C6E-E23E-4A15-902B-6F85EF530577}"
"{294D4FFE-1E13-4BB4-8351-17E8AEEF19D4}"="{2F804C6E-E23E-4A15-902B-6F85EF530577}"
"{D892C988-736B-4AC1-8C05-69705C62863C}"="{2F804C6E-E23E-4A15-902B-6F85EF530577}"
"{A1A7B685-B2F7-4669-9616-661A4B6D23D9}"="{2F804C6E-E23E-4A15-902B-6F85EF530577}"
"{5F5ABC2E-1519-4296-9DF3-1AF97B8A7BF6}"="{2F804C6E-E23E-4A15-902B-6F85EF530577}"
"{42BB2C30-F85C-4646-B98F-E8DC1EA381ED}"="{2F804C6E-E23E-4A15-902B-6F85EF530577}"
"{E0CD88A1-D5CC-466C-9EA7-F558DFE77FFF}"="{F2033916-E0C7-4E3D-85E8-C305A4833CF9}"
"{C3085D0A-3339-4E73-9BF4-E79AB026F573}"="{F2033916-E0C7-4E3D-85E8-C305A4833CF9}"
"{DC37DA4E-A0DA-4228-8F70-02C3C89926A9}"="{74392E45-9992-48F2-BB7D-1568110C0BBF}"
"{00FBC8D6-84E0-4EBE-BE0D-3ED2A60FD350}"="{74392E45-9992-48F2-BB7D-1568110C0BBF}"
"{A20FD829-126D-4295-A981-EB18074C2A0D}"="{74392E45-9992-48F2-BB7D-1568110C0BBF}"
"{CA1CB2B6-DD03-4A6A-89CE-DF2B610DB999}"="{74392E45-9992-48F2-BB7D-1568110C0BBF}"
"{F3895717-F5C5-4342-88BF-3650AEEECE90}"="{74392E45-9992-48F2-BB7D-1568110C0BBF}"
"{84906370-1F02-4AC4-8614-144D7B53505C}"="{AA4DA560-2123-4DD7-A084-D5137A43230C}"
"{019CA4BF-4C13-4019-84D4-774AEC364332}"="{AA4DA560-2123-4DD7-A084-D5137A43230C}"
"{F29828C8-4F5D-40FF-8B58-3CA3FE6EDF09}"="{AA4DA560-2123-4DD7-A084-D5137A43230C}"
"{361B1E1E-18A1-4F55-B3BA-ECBEFB218303}"="{56C4A16F-6818-44E9-8452-2DE8B9AD6225}"
"{BFE883A8-1538-4599-9AD7-D0B995056699}"="{56C4A16F-6818-44E9-8452-2DE8B9AD6225}"
"{6BC75E94-2A54-4AFA-8B28-B70A0301A405}"="{DFB98E40-2018-4691-A4F6-B17D18E6C520}"
"{5B5A4AB1-67F1-426F-AE7E-3625CD9A9741}"="{DFB98E40-2018-4691-A4F6-B17D18E6C520}"
"{82AB07EA-2F45-4C64-AC36-915319398BCC}"="{DFB98E40-2018-4691-A4F6-B17D18E6C520}"
"{4EF8AE39-EECB-4701-8E53-3740E5723ECE}"="{DFB98E40-2018-4691-A4F6-B17D18E6C520}"
"{8BF7BB32-3A30-4A81-B647-A9174C02BA60}"="{DFB98E40-2018-4691-A4F6-B17D18E6C520}"
"{C2A2D45F-45BD-471B-8F63-ECBAB9568ED4}"="{DFB98E40-2018-4691-A4F6-B17D18E6C520}"
"{34BEA3EB-3D15-4AA5-B1B4-AA35CF077CFF}"="{DFB98E40-2018-4691-A4F6-B17D18E6C520}"
"{149EE642-ED30-4A28-BA0C-9F0E166F9ACB}"="{DFB98E40-2018-4691-A4F6-B17D18E6C520}"
"{6450AF8E-5669-4830-B09E-97EAE4783DAC}"="{29BE8FBA-2DE5-4AB4-8225-E4481B6709FF}"
"{DA957AE3-BBE8-43CF-923E-1DCB905E4D4A}"="{29BE8FBA-2DE5-4AB4-8225-E4481B6709FF}"
"{EC8B61CD-468F-47D4-8AE3-FE9C4FBACEB1}"="{29BE8FBA-2DE5-4AB4-8225-E4481B6709FF}"
"{49AA2AD2-246C-44D4-9382-BF613C3E6142}"="{E8A99C93-3E77-4E05-BC9C-D52AB03903EB}"
"{3B0438EC-651D-43E1-AFBB-94969DDE9331}"="{E8A99C93-3E77-4E05-BC9C-D52AB03903EB}"
"{EB929DBE-BBCE-4581-808C-7A500180EE00}"="{4BD255D7-6229-4BB8-93B0-06C6DECC0AFB}"
"{052A04CD-505C-4A6C-A98A-CBFF1BBDFAAB}"="{4BD255D7-6229-4BB8-93B0-06C6DECC0AFB}"
"{885810E6-A333-49C1-BA9E-4EA0F73EB424}"="{4BD255D7-6229-4BB8-93B0-06C6DECC0AFB}"
"{E235F7BE-91C5-48FF-A908-9A3913DFCDFD}"="{4BD255D7-6229-4BB8-93B0-06C6DECC0AFB}"
"{E153140E-006D-4EA4-B02E-E3BEFD5EE4BF}"="{4BD255D7-6229-4BB8-93B0-06C6DECC0AFB}"
"{2DA4C0BD-C51E-4598-9912-B6ACC2FFA91A}"="{4BD255D7-6229-4BB8-93B0-06C6DECC0AFB}"
"{1CD4E72E-8A90-4F9F-8381-12884DD4DBB3}"="{4BD255D7-6229-4BB8-93B0-06C6DECC0AFB}"
"{015ABA7E-88CD-4F05-9462-2BE757814CEE}"="{4BD255D7-6229-4BB8-93B0-06C6DECC0AFB}"
"{BFEDD8E8-AB84-4E19-B1CA-2906B7B32875}"="{53A5C383-A8F5-425B-AEFB-B4BDE46C6A99}"
"{89011185-44B8-428E-B988-F4B4373753FF}"="{53A5C383-A8F5-425B-AEFB-B4BDE46C6A99}"
"{EBC0E9ED-2F56-4CEC-A896-6353637B19AA}"="{53A5C383-A8F5-425B-AEFB-B4BDE46C6A99}"
"{5800BCC7-716D-48C0-ADAB-6921BF946897}"="{2E51661B-86CF-4ABC-B205-DA944BC2B94D}"
"{27F960EC-8AF4-4CE8-8C43-D8D75EC534E4}"="{2E51661B-86CF-4ABC-B205-DA944BC2B94D}"
"{28EE6B27-4ECC-4989-AE82-061480C9E50D}"="{01F95042-294F-4798-93E2-31AC8ABB054F}"
"{6752E8D8-59A2-47C1-B759-DA22265D505B}"="{01F95042-294F-4798-93E2-31AC8ABB054F}"
"{77DE0315-6C5E-4DAE-99D9-6B18179A53D1}"="{6FFBD8B9-3AB4-4932-9C0A-0298C16F22F3}"
"{B6AAD151-5708-410B-9121-A0B9EE7E4A98}"="{6FFBD8B9-3AB4-4932-9C0A-0298C16F22F3}"
"{A2968EBB-2FE1-4FCA-AD09-AF6E9E9E982D}"="{6FFBD8B9-3AB4-4932-9C0A-0298C16F22F3}"
"{0F604FE4-0E0C-449F-9FA2-08F4D83C4F35}"="{6FFBD8B9-3AB4-4932-9C0A-0298C16F22F3}"
"{77610434-3AD9-4B90-9D69-10BBDECFEF20}"="{6FFBD8B9-3AB4-4932-9C0A-0298C16F22F3}"
"{3F6D5C56-69F6-48B0-A114-4C0D40AE4306}"="{E38EAD64-11B6-4758-A64B-AB5236FD81B1}"
"{D3829C59-9994-47D0-A6F5-36977937F526}"="{E38EAD64-11B6-4758-A64B-AB5236FD81B1}"
"{F150B48C-1318-4541-82A4-FD149E3825EE}"="{E38EAD64-11B6-4758-A64B-AB5236FD81B1}"
"{61F14932-DF8A-4ABB-98D3-571572B77BB2}"="{444B9C0F-6F7F-4CE2-B01B-379980F336DB}"
"{51AE48BA-C8B7-4DD2-BB5F-C9A080504BC7}"="{444B9C0F-6F7F-4CE2-B01B-379980F336DB}"
"{DFAD3B38-171C-4834-9DB5-F93B609651C2}"="{A3F599C2-A7BC-48E6-AE71-1F8126D9FDDB}"
"{8B44792A-35D0-43D8-8CA2-8162A2D38CA1}"="{A3F599C2-A7BC-48E6-AE71-1F8126D9FDDB}"
"{54EC886C-48C4-4A90-8165-511F5B00D026}"="{A3F599C2-A7BC-48E6-AE71-1F8126D9FDDB}"
"{E93B1ADC-96C6-482E-82BE-3E82053A1809}"="{A3F599C2-A7BC-48E6-AE71-1F8126D9FDDB}"
"{6DF4844B-4C94-4571-8826-1A942E4D0A1E}"="{A3F599C2-A7BC-48E6-AE71-1F8126D9FDDB}"
"{87085F46-0665-4E8C-85C6-2DEBF9C91F19}"="{A3F599C2-A7BC-48E6-AE71-1F8126D9FDDB}"
"{4C16B332-52FE-4D4B-8CCA-2638F9058986}"="{A3F599C2-A7BC-48E6-AE71-1F8126D9FDDB}"
"{07078797-E199-4A19-8B78-15B707A87213}"="{A3F599C2-A7BC-48E6-AE71-1F8126D9FDDB}"
"{2903FF09-F8A9-4F98-B9D0-97F6CF7F0B59}"="{0A6A688C-64CC-4B57-B505-7A63F8143EFF}"
"{3D73A879-754B-4C58-8B74-886131162AC0}"="{0A6A688C-64CC-4B57-B505-7A63F8143EFF}"
"{30F188C1-2FF0-47AF-BF96-C97ECFF74144}"="{0A6A688C-64CC-4B57-B505-7A63F8143EFF}"
"{11BF9378-6F0A-4922-B15E-4D93B8D317AD}"="{06E58B7C-205D-458C-9EB3-0053EE1CDB1A}"
"{A6E0D551-CE33-4592-B4CF-C6AEB80E2FA1}"="{06E58B7C-205D-458C-9EB3-0053EE1CDB1A}"
"{995B5A1D-42DF-425A-A01C-30DFE8A4F951}"="{912C6985-B9A2-4AF4-ABB6-09D9E2ECD215}"
"{5C1EFBD7-1A2E-4E13-9D9F-A16579312CCC}"="{912C6985-B9A2-4AF4-ABB6-09D9E2ECD215}"
"{4CEDFF4F-8027-49E5-ADDA-D1696CC01451}"="{912C6985-B9A2-4AF4-ABB6-09D9E2ECD215}"
"{93751D86-2C1C-47DC-BF19-FC83FF98283C}"="{912C6985-B9A2-4AF4-ABB6-09D9E2ECD215}"
"{BF8BDB16-F5D0-4350-91CB-22A809F0C8AA}"="{912C6985-B9A2-4AF4-ABB6-09D9E2ECD215}"
"{3F106879-2D21-4211-ACED-DF51F823786F}"="{912C6985-B9A2-4AF4-ABB6-09D9E2ECD215}"
"{AC538D3A-1156-477E-B710-B178D4DB4D63}"="{912C6985-B9A2-4AF4-ABB6-09D9E2ECD215}"
"{26E6A52E-ED1D-4A1A-9229-ABB9D58B3B19}"="{912C6985-B9A2-4AF4-ABB6-09D9E2ECD215}"
"{19780152-EC88-4A15-8DCF-EF69FF633690}"="{20340A5F-56E0-48EB-88A5-D34F7B9B8F6B}"
"{875B55AE-53C4-4A8B-8463-542BCE71FCBC}"="{20340A5F-56E0-48EB-88A5-D34F7B9B8F6B}"
"{00AC9506-9C77-4DF1-8AC3-3FB88FB4123E}"="{20340A5F-56E0-48EB-88A5-D34F7B9B8F6B}"
"{DB62AD6D-0EAE-44EE-9FD7-8CBF3DB98059}"="{CA1243D4-73D9-4B4B-B971-12E41731425B}"
"{27A2CABA-6CB3-4DB4-B59E-CBDB8B32AC77}"="{CA1243D4-73D9-4B4B-B971-12E41731425B}"
"{ED0A2EFD-2742-4CC9-B853-0F3AC064DC4E}"="{B93374FB-1936-44D3-B481-C05149B47E34}"
"{E8C153AE-8D92-4EAF-AAA2-356272D7A5BA}"="{B93374FB-1936-44D3-B481-C05149B47E34}"
"{9A04A597-D4AE-41C3-901C-519C6B38767A}"="{B93374FB-1936-44D3-B481-C05149B47E34}"
"{8AFF5C52-F75C-4624-8A28-163E8B268E27}"="{B93374FB-1936-44D3-B481-C05149B47E34}"
"{2E86FFA0-D7CB-4883-BE0C-6443DC677B59}"="{B93374FB-1936-44D3-B481-C05149B47E34}"
"{BB054723-4CE9-48FB-90D3-9419591B5EB5}"="{B93374FB-1936-44D3-B481-C05149B47E34}"
"{72D403AD-362C-4FF0-AE0C-483AEADC0A6D}"="{B93374FB-1936-44D3-B481-C05149B47E34}"
"{4E0A6EB7-6D35-4093-8B29-7690568C1BAA}"="{B93374FB-1936-44D3-B481-C05149B47E34}"
"{7C2B62C0-45F9-4491-8C51-B6AAF6A6F6B0}"="{C8C70070-15F9-43CC-8078-4DE0A8AA5D33}"
"{CBC8CB30-718C-4939-98F9-546E3EDA100D}"="{C8C70070-15F9-43CC-8078-4DE0A8AA5D33}"
"{E778172B-9689-48E8-B56F-BE92E78EBE1C}"="{C8C70070-15F9-43CC-8078-4DE0A8AA5D33}"
"{3D58AE93-2C4D-4920-9D3F-27B628A7FE7A}"="{E9FA7041-BA27-4DB1-8238-1427E2C0F612}"
"{2B72C666-AB6E-42B3-A436-B14C5F9A7C44}"="{E9FA7041-BA27-4DB1-8238-1427E2C0F612}"
"{73154978-63D4-4D29-B239-CDEEC1EE2D7F}"="{AC040E88-ECA5-425F-8A7F-678DB10F3492}"
"{60E6FC55-6CC1-4A5E-B97F-1F7EB33241BD}"="{AC040E88-ECA5-425F-8A7F-678DB10F3492}"
"{E823FB04-B13F-4B14-8619-26645D6150DD}"="{AC040E88-ECA5-425F-8A7F-678DB10F3492}"
"{6D2372E5-9C9B-4021-9F03-B9F5074C444B}"="{AC040E88-ECA5-425F-8A7F-678DB10F3492}"
"{BECB43B3-AF3D-46CC-BFD7-AE78D8A8B604}"="{AC040E88-ECA5-425F-8A7F-678DB10F3492}"
"{9453F5EC-590B-4145-A37C-72A32FEE0102}"="{A6420269-9244-4240-9781-A897369FB498}"
"{C6D4C0FB-74B9-4032-9728-A08737088104}"="{A6420269-9244-4240-9781-A897369FB498}"
"{AD52C911-6703-4AF4-80FC-FD62E3B17E16}"="{A6420269-9244-4240-9781-A897369FB498}"
"{BDFBBD87-39FE-462D-BA42-02AA8F6D9770}"="{23064D50-4BC4-4251-A5CE-A35F478B3C87}"
"{04B1B0D6-C848-46C9-A246-4D11B0678005}"="{23064D50-4BC4-4251-A5CE-A35F478B3C87}"
"{2D89CAF5-7469-4147-A9CB-D08BCCB7F852}"="{F54A34C9-3D13-47A0-87C2-7ABF7385AA65}"
"{763D21BC-3F9A-4BA2-8C87-4AC62D514974}"="{F54A34C9-3D13-47A0-87C2-7ABF7385AA65}"
"{67D50DAF-9BAB-406D-AF3C-148CD6C8225E}"="{F54A34C9-3D13-47A0-87C2-7ABF7385AA65}"
"{77169607-CBB4-429D-BFC0-750E9FE5D43B}"="{F54A34C9-3D13-47A0-87C2-7ABF7385AA65}"
"{67B0CC75-A5CC-46CB-8734-029B01252A8E}"="{F54A34C9-3D13-47A0-87C2-7ABF7385AA65}"
"{FE96AF76-46CA-4459-93AA-80F813377C19}"="{F54A34C9-3D13-47A0-87C2-7ABF7385AA65}"
"{BFDBBC60-0EBB-4A2B-B8B0-AA02FA371A82}"="{F54A34C9-3D13-47A0-87C2-7ABF7385AA65}"
"{41C2A9B7-176E-4C5D-9B21-9BAD5E4F5548}"="{F54A34C9-3D13-47A0-87C2-7ABF7385AA65}"
"{DA56EE4D-656F-4C3F-B2B5-61B5CDE6556F}"="{FDB7A554-E442-4BE0-BF31-3C90799FF9D6}"
"{64A00939-6EC4-4596-B9CB-211F83C4DA65}"="{FDB7A554-E442-4BE0-BF31-3C90799FF9D6}"
"{BA83AD70-E33C-4DB6-B844-B3790E101B55}"="{FDB7A554-E442-4BE0-BF31-3C90799FF9D6}"
"{0AE25F75-5CF1-4D24-9E0E-C862C40B4BD9}"="{B1FACDC5-5A2B-4F50-8AE7-8C15EF695A3D}"
"{01754B6B-D294-4C1E-9BE5-A2F1A7BEC2B8}"="{B1FACDC5-5A2B-4F50-8AE7-8C15EF695A3D}"
"{987C2419-6887-4B03-AF74-7800AED1F77C}"="{5EAD263D-2209-4770-BE6C-AA58D4407213}"
"{2A3F768E-7206-437B-A47B-1A50D3A3FA4B}"="{5EAD263D-2209-4770-BE6C-AA58D4407213}"
"{9540CDD1-E9DC-432D-9F77-EFADD9472094}"="{5EAD263D-2209-4770-BE6C-AA58D4407213}"
"{736BE774-B096-469E-AF5D-7DF9BFE3F68D}"="{5EAD263D-2209-4770-BE6C-AA58D4407213}"
"{2A70914D-7C73-41DC-975B-A9C457DD3A0C}"="{5EAD263D-2209-4770-BE6C-AA58D4407213}"
"{7F187632-BFA2-4B8A-ABCB-AD39FD6E659A}"="{5EAD263D-2209-4770-BE6C-AA58D4407213}"
"{59005154-F76B-457D-9823-3DECF701D208}"="{5EAD263D-2209-4770-BE6C-AA58D4407213}"
"{B913611F-FCDB-4427-AEFC-1D9760D5283D}"="{5EAD263D-2209-4770-BE6C-AA58D4407213}"
"{5E939319-0642-47F8-9BED-E6D5E710BC25}"="{8BB0FA2F-5777-4700-A532-F68DD11B8AB7}"
"{E351D09B-B24A-4A93-826F-9CB93022DD8C}"="{8BB0FA2F-5777-4700-A532-F68DD11B8AB7}"
"{05096381-1742-4256-B227-2A0933A233C9}"="{8BB0FA2F-5777-4700-A532-F68DD11B8AB7}"
"{7E2B779A-907A-4DBF-8A68-80C8D06DCB2C}"="{FE787C9C-D8AD-48B3-9C10-1D3FA1A46E47}"
"{6537E4DB-13FC-4AB7-AF72-1195001E57CE}"="{FE787C9C-D8AD-48B3-9C10-1D3FA1A46E47}"
"{63D54BAE-814B-4F18-BCE4-FDEF34409595}"="{C604968E-F399-4FF4-8DC8-9945BDC41B46}"
"{15FA48FC-136B-461C-A810-B1EF1402A211}"="{C604968E-F399-4FF4-8DC8-9945BDC41B46}"
"{81BDC0FF-C18F-44C8-98FB-29048414405D}"="{C604968E-F399-4FF4-8DC8-9945BDC41B46}"
"{CAB568DB-F143-4469-8F16-DDB78DFC5121}"="{C604968E-F399-4FF4-8DC8-9945BDC41B46}"
"{C6DCFEBC-9F3F-4FEA-AF18-84314DDB629E}"="{C604968E-F399-4FF4-8DC8-9945BDC41B46}"
"{7FE3CF19-12D0-4F0B-8B38-A43AE2592039}"="{95B551E3-05FA-4C04-AFE7-012560EA9DEA}"
"{C972A989-538D-4508-8942-CF1D5E29005C}"="{95B551E3-05FA-4C04-AFE7-012560EA9DEA}"
"{6C6CDF29-E2EB-4730-9AFC-F0B98799BFA1}"="{95B551E3-05FA-4C04-AFE7-012560EA9DEA}"
"{26380E66-E6F5-421C-93AE-92E1D8EA7BD6}"="{0A9B239B-68E2-41AF-9C30-0BF0E0EF1E05}"
"{549F6D2A-FB08-41BB-A3A2-215B961ACE78}"="{0A9B239B-68E2-41AF-9C30-0BF0E0EF1E05}"
"{F1EA64DA-66A5-4C9D-A287-4ED26BFE8828}"="{682A005A-01A5-48DF-9AB3-5FE0C694ED91}"
"{8167609F-CE0C-4FF6-9864-751AC7425419}"="{682A005A-01A5-48DF-9AB3-5FE0C694ED91}"
"{EA8C36EC-75E9-4B3C-A7EC-968DA34CC523}"="{682A005A-01A5-48DF-9AB3-5FE0C694ED91}"
"{E388C077-805C-4A6F-8D8E-F303CA42EB43}"="{682A005A-01A5-48DF-9AB3-5FE0C694ED91}"
"{C0F4D606-CB53-4D09-A802-7C830EE5D1B6}"="{682A005A-01A5-48DF-9AB3-5FE0C694ED91}"
"{BF4EFE25-8B3F-4107-AB6B-136656112070}"="{682A005A-01A5-48DF-9AB3-5FE0C694ED91}"
"{2461D2DF-D54A-44A2-A12E-414F2127036A}"="{682A005A-01A5-48DF-9AB3-5FE0C694ED91}"
"{9119B842-C949-4249-8029-33230FC031E2}"="{682A005A-01A5-48DF-9AB3-5FE0C694ED91}"
"{A5569A8B-074B-4BB6-A6C4-C0B0F95DA356}"="{0B0C559A-82CE-402E-858A-423931784C97}"
"{AE66BC61-D1C0-4111-89F5-79CB55DC34DD}"="{0B0C559A-82CE-402E-858A-423931784C97}"
"{26507288-8064-4147-A3CC-1B3713310F9D}"="{8680F8B8-1FFE-4B65-BF0D-3A6BD66BD70D}"
"{2CC336D9-8838-4BF3-8FC7-B693E95BD6B0}"="{8680F8B8-1FFE-4B65-BF0D-3A6BD66BD70D}"
"{3600D27C-A52E-4898-89AC-E5BB180FB7CA}"="{8680F8B8-1FFE-4B65-BF0D-3A6BD66BD70D}"
"{A97443CD-9AEF-4731-8180-E2BB52C7F49B}"="{8680F8B8-1FFE-4B65-BF0D-3A6BD66BD70D}"
"{C04A7988-3B46-4111-9544-01E6BB31AF3C}"="{8680F8B8-1FFE-4B65-BF0D-3A6BD66BD70D}"
"{0DB9BF44-D752-4FD0-8690-9ACBDF98DD1D}"="{1ADAD5C6-C633-4266-866C-EDF6E04CCA3F}"
"{82A109CB-47EF-4EE3-A40D-038A4D955DBF}"="{1ADAD5C6-C633-4266-866C-EDF6E04CCA3F}"
"{4EF3FF1B-B49F-4B66-9033-7DB6FB6CB900}"="{1ADAD5C6-C633-4266-866C-EDF6E04CCA3F}"
"{B78D41A3-0FD8-42FF-A14C-604A6A0742F8}"="{3941A945-3647-4316-BC63-E156DA143EF4}"
"{019D2BCF-DB05-4F67-96E7-34149D1DC3E1}"="{3941A945-3647-4316-BC63-E156DA143EF4}"
"{00A2AA81-C986-4447-AD15-6634B0D24FE5}"="{647596D9-87CD-4CAD-B649-25D4C249A189}"
"{57EE32E7-9E74-4798-866E-673ACE235692}"="{647596D9-87CD-4CAD-B649-25D4C249A189}"
"{7A662B6D-3CD5-4729-A01B-74B13BC96710}"="{647596D9-87CD-4CAD-B649-25D4C249A189}"
"{100383FC-E730-44B2-834B-A273EDB3CEFC}"="{647596D9-87CD-4CAD-B649-25D4C249A189}"
"{4CFE5C24-04E5-4C17-8623-B38127A22631}"="{647596D9-87CD-4CAD-B649-25D4C249A189}"
"{8948EBAB-6604-4E13-A212-7D9341031CF8}"="{647596D9-87CD-4CAD-B649-25D4C249A189}"
"{D5D55120-FE6A-49C4-840C-C0BEDD406F73}"="{647596D9-87CD-4CAD-B649-25D4C249A189}"
"{D596E925-58C3-496B-989E-20CAE88AB413}"="{647596D9-87CD-4CAD-B649-25D4C249A189}"
"{0D344D62-189A-4656-A255-E50C1ED1BEAA}"="{11AF209E-F9A0-4606-A4F6-6E887F48CE6C}"
"{E3090150-6427-402E-A376-0D21C7652EB3}"="{11AF209E-F9A0-4606-A4F6-6E887F48CE6C}"
"{DB09D5A8-D7E4-4002-95AD-B8874B8E3C70}"="{11AF209E-F9A0-4606-A4F6-6E887F48CE6C}"
"{03455C18-BF67-491F-A25C-C3769D458113}"="{9B524427-7C69-41F8-916B-0CB0EE4185AF}"
"{5D69D371-ED9D-4509-934C-1171182E3D84}"="{9B524427-7C69-41F8-916B-0CB0EE4185AF}"
"{9D4E70D6-BE0E-4943-BC75-F2CF056E5B6E}"="{414A277B-1ABE-4FF1-99D6-87F95227A667}"
"{FE97A1ED-F0D6-4BEC-B268-D12AB8ABE051}"="{414A277B-1ABE-4FF1-99D6-87F95227A667}"
"{135F4AF1-86A2-4ED4-B718-282FC9660ED5}"="{414A277B-1ABE-4FF1-99D6-87F95227A667}"
"{7FE92D5B-1E80-4995-8A9E-23F0475667BD}"="{414A277B-1ABE-4FF1-99D6-87F95227A667}"
"{67599316-CB9D-48DE-908A-70DA6C91EA6C}"="{414A277B-1ABE-4FF1-99D6-87F95227A667}"
"{ECE226FC-D583-42B9-8B78-8900B91CBCF8}"="{414A277B-1ABE-4FF1-99D6-87F95227A667}"
"{CDC53F7C-3977-4F99-B223-3731CAD20C2F}"="{414A277B-1ABE-4FF1-99D6-87F95227A667}"
"{6800CBC1-A6C8-4BD2-83DF-6DBFF40FB98C}"="{414A277B-1ABE-4FF1-99D6-87F95227A667}"
"{CC92F57E-7DE1-4925-AB9B-E37F7F96798B}"="{5A932282-2C17-4E8D-B43B-B91751E1BF0E}"
"{4BDAC934-3260-4C3B-B9B6-A29C7C4255AF}"="{5A932282-2C17-4E8D-B43B-B91751E1BF0E}"
"{A09C5BB5-67AB-4D5A-B1C0-7801EA13C42F}"="{5A932282-2C17-4E8D-B43B-B91751E1BF0E}"
"{43131E7C-02E6-46BD-BC18-1821DA47B09B}"="{532F7960-6A6F-43BA-BCF9-D48141004F41}"
"{4C609F02-E584-41F1-A7BD-FD256DE82B67}"="{532F7960-6A6F-43BA-BCF9-D48141004F41}"
"{453B5D84-C389-4A33-8B41-E42A49143911}"="{BDC4CA98-8C54-4FE7-B851-804E2CD8400A}"
"{9AEDF074-9E7A-4EFB-9983-4B3CF4D39C50}"="{BDC4CA98-8C54-4FE7-B851-804E2CD8400A}"
"{0287B5B6-7CCD-4058-A34F-A432FADCC9BD}"="{BDC4CA98-8C54-4FE7-B851-804E2CD8400A}"
"{5F14195E-FAAA-43EE-81E8-2863FF3B3256}"="{BDC4CA98-8C54-4FE7-B851-804E2CD8400A}"
"{01D46A14-8370-4E8A-A4B1-85CA388D47DD}"="{BDC4CA98-8C54-4FE7-B851-804E2CD8400A}"
"{7B137C4F-A1D8-49E6-B693-D63FA12C43C8}"="{FFBCDF9F-A2A6-43D2-9603-16F29E8C89F3}"
"{F06A7F66-60BC-4432-99FB-CE2D8F96EDBA}"="{FFBCDF9F-A2A6-43D2-9603-16F29E8C89F3}"
"{3B6886C8-A180-447F-8ABF-399C090E20DD}"="{25882375-2F9C-4976-8821-48E5C0E8510A}"
"{745922E3-46F2-4735-A5DB-B2CA725118D2}"="{25882375-2F9C-4976-8821-48E5C0E8510A}"
"{444EB005-B302-4BAF-9009-F2ABC3606F1F}"="{25882375-2F9C-4976-8821-48E5C0E8510A}"
"_AvProdSvcComm_"="{FE1BB958-F464-4355-B0BA-929FC256C622}"
"SubmissionEngineIPC"="{FE1BB958-F464-4355-B0BA-929FC256C622}"
"SubmissionEngineCallbackIPC"="{FE1BB958-F464-4355-B0BA-929FC256C622}"
"{38C4F460-852A-4A9F-9C95-C60F784F4D45}"="{281A59B3-A7D3-498D-A8B8-A4DBEB190B1F}"
"{33F37F9E-527E-40D7-8866-46CE221C89B4}"="{281A59B3-A7D3-498D-A8B8-A4DBEB190B1F}"
"{6B32AA0F-6253-4E94-B837-0529C5E5541B}"="{7DB4E95B-DCD7-44EA-9333-798D00E76D6D}"
"{708D59C2-A9AB-405A-8EC0-58A97BCF220F}"="{7DB4E95B-DCD7-44EA-9333-798D00E76D6D}"
"{8F31CF16-54C0-46EA-A85B-CFCB1ECFF432}"="{7DB4E95B-DCD7-44EA-9333-798D00E76D6D}"
"{2A8B5760-CD26-4CD2-84CE-30428697A230}"="{7DB4E95B-DCD7-44EA-9333-798D00E76D6D}"
"{66D6ED66-C640-4F21-B998-99B5E716931C}"="{7DB4E95B-DCD7-44EA-9333-798D00E76D6D}"
"{030B3265-65F3-40BD-87A2-F12E75B5B117}"="{7DB4E95B-DCD7-44EA-9333-798D00E76D6D}"
"{62910D56-C240-47E8-8BC1-350A108C41B2}"="{7DB4E95B-DCD7-44EA-9333-798D00E76D6D}"
"{29194720-87F2-4F0A-981B-3841DA57BE3E}"="{7DB4E95B-DCD7-44EA-9333-798D00E76D6D}"
"{2819699B-511C-4115-9841-8B83FDD4BFEE}"="{A595A698-8091-40CF-BD8B-3472D104FB73}"
"{22AACA55-697A-4433-9141-6FEAACAD71C7}"="{A595A698-8091-40CF-BD8B-3472D104FB73}"
"{3B92D4CA-38B5-4395-8B65-81916165B98C}"="{FE1BB958-F464-4355-B0BA-929FC256C622}"
"{05525442-1AA3-4BD9-A98F-26671708AD9D}"="{FE1BB958-F464-4355-B0BA-929FC256C622}"
"{A90A74AD-D821-4E27-AC3F-A492A72C5499}"="{FE1BB958-F464-4355-B0BA-929FC256C622}"
"{C84D8648-2CFE-4112-BE02-86245F137D2C}"="{50004891-569B-490F-AA77-0D7DE1F7FC9B}"
"{2E37040C-1931-4326-A6B2-425C5C82E188}"="{50004891-569B-490F-AA77-0D7DE1F7FC9B}"
"{5B13DAB8-01EC-4EB4-AE33-C26CD0A6194D}"="{50004891-569B-490F-AA77-0D7DE1F7FC9B}"
"{67B90921-ED0A-46AF-86A0-2BA0B8C907D1}"="{50004891-569B-490F-AA77-0D7DE1F7FC9B}"
"{1CEECA1A-B50D-41EA-8C0A-F24E3D4D7141}"="{50004891-569B-490F-AA77-0D7DE1F7FC9B}"
"{ED5337CA-3D7D-4801-A094-54BE522952A9}"="{12753ABF-9A04-4BC2-9591-7CE2E1604A70}"
"{D6DE7AA8-98E8-472D-A3ED-3E3AEBFD55DB}"="{12753ABF-9A04-4BC2-9591-7CE2E1604A70}"
"{1B9CBD02-127E-4758-9A16-982B579E72F6}"="{12753ABF-9A04-4BC2-9591-7CE2E1604A70}"
"{33727F2D-0B9C-4A55-9C61-D705DC97C0D9}"="{749A355D-1F83-4218-BBBA-95FA7B9E90F4}"
"{94E7E7DE-F340-4448-ABC5-06FD09AD3482}"="{06D6BBCD-A7AD-40DC-95F0-F9B591A1A198}"
"{FA15D3F3-D5DF-426C-BEE3-A81BE4837DA8}"="{9515DED7-DAD8-45F6-B923-01D5F8D30717}"
"{446B6448-A9BE-40D8-A8D3-FD221D83A957}"="{4F845F3B-7339-42F4-98AC-13E5CFC5346F}"
"{3EE9240D-E3B8-46DB-A911-EFD779DB15F9}"="{4F845F3B-7339-42F4-98AC-13E5CFC5346F}"
"{13F0DD75-8BE3-4167-83BA-34B16429DDA8}"="{4F845F3B-7339-42F4-98AC-13E5CFC5346F}"
"{6C4AEEE7-9463-45B6-AA48-F5AF1EB75BA4}"="{716F5273-EF1F-484B-8F52-4E7210AD8DF1}"
"{2CEABFB3-40EA-4615-B26A-6BADAAE496B7}"="{716F5273-EF1F-484B-8F52-4E7210AD8DF1}"
"{E0C71D74-E8DA-4FAD-9439-2A9BCC80C410}"="{716F5273-EF1F-484B-8F52-4E7210AD8DF1}"
"ccSvcHst_ccSetMgr"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"{A6D74B3B-C009-48ce-ADB6-159798ECB2C0}"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"SNDServiceRequestChannel"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"SNDLocationChannel"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"ccSettingsService"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"ccSvcHst_CLTNetCnService"="{A39B34B0-EF1B-4691-8726-B37FA95B8404}"
"cltIPCServer_Channel"="{A39B34B0-EF1B-4691-8726-B37FA95B8404}"
"ccSvcHst_ccEvtMgr"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"IPS_COMMAND_CHANNEL"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"ccEvtCli"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"{00D569D0-E16A-480B-990E-E51D66D73069}"="{6B800528-1B54-472B-AD40-4BBB9202BE3C}"
"{79376521-18B8-4CFE-908B-8B17F8779227}"="{6B800528-1B54-472B-AD40-4BBB9202BE3C}"
"{25E5C968-4CC7-430C-A92F-0F50DB292C10}"="{6B800528-1B54-472B-AD40-4BBB9202BE3C}"
"{3455C5E4-B1BE-456E-9128-350C48DCE6DB}"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"{16C67DA3-E339-4EC2-86F8-5D8413DA3890}"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
"{BCC5DDE5-CDB7-44EB-8F9C-9E494BA98A6E}"="{E6B3B65D-8845-40F2-A910-B0DDCA462162}"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(5900)
c:\program files\IDM\Desktop SMS\oehook.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\progra~1\AVG\AVG2013\avgrsx.exe
c:\program files\AVG\AVG2013\avgcsrvx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Symantec Shared\ccSvcHst.exe
c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe
c:\program files\Common Files\Symantec Shared\ccSvcHst.exe
c:\program files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
c:\program files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
c:\windows\system32\TODDSrv.exe
c:\program files\TOSHIBA\Power Saver\TosCoSrv.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\taskhost.exe
c:\program files\AVG\AVG2013\avgnsx.exe
c:\program files\AVG\AVG2013\avgemcx.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\windows\RtHDVCpl.exe
c:\program files\Synaptics\SynTP\SynTPEnh.exe
c:\program files\Synaptics\SynTP\SynToshiba.exe
c:\program files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
c:\program files\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
c:\program files\Windows Mail\WinMail.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Ask.com\UpdateTask.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-01-31  18:46:02 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-01-31 17:46
.
Vor Suchlauf: 9 Verzeichnis(se), 46.256.812.032 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 45.911.203.840 Bytes frei
.
- - End Of File - - CD1793964776BD7CB519ABA26C5F1FE7

--- --- ---

achso, ist es normal, dass mein Bildschirmhintergrund weg ist und die Symbole auf meinem Desktop jetzt etwas anders angeordnet sind?

markusg · 31.01.2013, 19:27

hi
norton remover ausführen, neustarten:
Download Avira RegistryCleaner
ausführen, neustarten, dann bitte melden

Carrab17 · 31.01.2013, 19:44

hey

Norton hab ich ausgeführt und neu gestartet.

eine kurze Frage noch:

Bei Avira muss ich auf "Keys auslesen" drücken und die gefundenen Keys dann löschen und dann neustarten, oder?

28.01.2013, 15:00	#2
markusg /// Malware-holic	verdächtige E-Mail erhalten, Zip-Datei im Anhang geöffnet hi bitte solche Mails immer an uns weiterleiten. wie das geht, steht in meiner signatur. Avira logs mit funden posten, lizenzangaben bitte streichen. welches Betriebssystem? __________________ __________________

29.01.2013, 16:38	#6
markusg /// Malware-holic	verdächtige E-Mail erhalten, Zip-Datei im Anhang geöffnet hi öffne mal avira, verwaltung, quarantäne, poste die Fundmeldungen mit Pfadangabe bitte programm und txt schließen. __________________ --> verdächtige E-Mail erhalten, Zip-Datei im Anhang geöffnet

verdächtige E-Mail erhalten, Zip-Datei im Anhang geöffnet

Plagegeister aller Art und deren Bekämpfung: verdächtige E-Mail erhalten, Zip-Datei im Anhang geöffnet