| |
| |||||||
Log-Analyse und Auswertung: BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
17.01.2014, 23:45
| #1 |
| |  BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Hallo Zusammen, gestern öffnete sich ein Fenster, mit dem Hinweis, dass der Browser (IE 11) gesperrt wurde und eine Zahlung geleistet werden solle. Der Browser liess sich nicht mehr schließen und ich drückte voller Panik einfach den ON/OFF-Schalter. Der PC startete danach wie immer und der Browser arbeitet auch normal. Ich habe heute Avira EU-Cleaner und danach den Systemtest mit Avira Free Antivirus durchgeführt. Dabei wurden 3 Schädlinge festgestellt,diese habe ich gelöscht. Leider habe ich nicht notiert, was da stand. Ich bin mir nicht sicher, ob nicht doch irgendetwas zurückgeblieben ist oder bereits Schaden auf meinem System angerichtet wurde. Ich habe defogger, FRST und GMER laufen lassen. GMER hat den Scan nicht zu Ende durchgeführt. Er brach ab mit der Meldung: gmer.exe funktioniert nicht mehr.Das Programm wird aufgrund eines Problems nicht richtig ausgeführt.Das Programm wird geschlossen und Sie werden benachrichtigt, wenn eine Lösung verfügbar ist. Habe es danach auch im abgesicherten Modus versucht - selbes Ergebnis. Ich bitte um Eure Hilfe! Code:
ATTFilter Exportierte Ereignisse:
17.01.2014 21:44 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde abgebrochen!].
Anzahl Dateien: 0
Anzahl Verzeichnisse: 0
Anzahl Malware: 0
Anzahl Warnungen: 0
17.01.2014 21:15 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 808000
Anzahl Verzeichnisse: 40906
Anzahl Malware: 0
Anzahl Warnungen: 0
17.01.2014 19:27 [Updater] Update nicht ausgeführt
Das Update von Computer JANET-PC (127.0.0.1) von
"hxxp://perspeak.avira-update.com/update" ist fehlgeschlagen.
Während des Herunterladens ist ein Fehler aufgetreten.
Es wurden keine neuen Dateien geladen.
17.01.2014 19:27 [Planer] Auftrag gestartet
Auftrag "Automatisches Update"
wurde erfolgreich gestartet.
17.01.2014 18:14 [Planer] Auftrag gestartet
Auftrag "Vollständige Systemprüfung"
wurde erfolgreich gestartet.
17.01.2014 18:14 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer JANET-PC (192.168.2.103)
erfolgreich durchgeführt.
Folgende Dateien wurden von "hxxp://80.190.148.75/update" aktualisiert:
webcat1.dat
webcat2.dat
webcat3.dat
webcat4.dat
vbase026.vdf 7.11.125.149
vbase027.vdf 7.11.125.150
vbase028.vdf 7.11.125.151
vbase029.vdf 7.11.125.152
vbase030.vdf 7.11.125.153
vbase031.vdf 7.11.125.156
aevdf.dat 7.11.125.156
17.01.2014 18:13 [Planer] Auftrag gestartet
Auftrag "AVImmediateUpdateJobEx"
wurde erfolgreich gestartet.
17.01.2014 18:11 [Browser-Schutz] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.00.02.254
Engine Version: 8.2.12.174
VDF Version: 7.11.125.138
17.01.2014 18:11 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.1.519
Engine Version:
VDF Version:
17.01.2014 18:11 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.2.254
Engine Version: 8.2.12.174
VDF Version: 7.11.125.138
17.01.2014 18:09 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.2.180
17.01.2014 15:04 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
17.01.2014 15:04 [Browser-Schutz] Dienst gestoppt
Der Dienst wurde gestoppt.
17.01.2014 15:04 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
17.01.2014 13:27 [Updater] Update nicht ausgeführt
Das Update von Computer JANET-PC (127.0.0.1) von
"hxxp://perspeak.avira-update.com/update" ist fehlgeschlagen.
Während des Herunterladens ist ein Fehler aufgetreten.
Es wurden keine neuen Dateien geladen.
17.01.2014 13:27 [Planer] Auftrag gestartet
Auftrag "Automatisches Update"
wurde erfolgreich gestartet.
17.01.2014 07:28 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer JANET-PC (192.168.2.103)
erfolgreich durchgeführt.
Folgende Dateien wurden von "hxxp://89.105.213.18/update" aktualisiert:
webcat1.dat
webcat4.dat
vbase031.vdf 7.11.125.138
aevdf.dat 7.11.125.138
17.01.2014 07:27 [Planer] Auftrag gestartet
Auftrag "Automatisches Update"
wurde erfolgreich gestartet.
17.01.2014 07:23 [Browser-Schutz] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.00.02.254
Engine Version: 8.2.12.174
VDF Version: 7.11.125.128
17.01.2014 07:23 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.1.519
Engine Version:
VDF Version:
17.01.2014 07:23 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.2.254
Engine Version: 8.2.12.174
VDF Version: 7.11.125.128
17.01.2014 07:22 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.2.180
17.01.2014 00:21 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
17.01.2014 00:21 [Browser-Schutz] Dienst gestoppt
Der Dienst wurde gestoppt.
17.01.2014 00:21 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
17.01.2014 00:07 [Browser-Schutz] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.00.02.254
Engine Version: 8.2.12.174
VDF Version: 7.11.125.128
17.01.2014 00:07 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.1.519
Engine Version:
VDF Version:
17.01.2014 00:07 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.2.254
Engine Version: 8.2.12.174
VDF Version: 7.11.125.128
17.01.2014 00:07 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.2.180
17.01.2014 00:06 [Browser-Schutz] Dienst gestoppt
Der Dienst wurde gestoppt.
17.01.2014 00:06 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
17.01.2014 00:06 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Freitag, 17. Januar 2014 18:14
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Free Antivirus
Seriennummer : 0000149996-ADJIE-0000001
Plattform : Windows 7 Home Premium
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : SYSTEM
Computername : JANET-PC
Versionsinformationen:
BUILD.DAT : 14.0.2.286 55547 Bytes 09.12.2013 11:37:00
AVSCAN.EXE : 14.0.2.254 1032760 Bytes 18.12.2013 19:44:40
AVSCANRC.DLL : 14.0.2.180 62008 Bytes 18.12.2013 19:44:40
LUKE.DLL : 14.0.2.234 65592 Bytes 18.12.2013 19:45:05
AVSCPLR.DLL : 14.0.2.254 124472 Bytes 18.12.2013 19:44:41
AVREG.DLL : 14.0.2.212 250424 Bytes 18.12.2013 19:44:40
avlode.dll : 14.0.2.254 540216 Bytes 18.12.2013 19:44:30
avlode.rdf : 13.0.1.66 56973 Bytes 15.01.2014 19:37:28
VBASE000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 19:19:11
VBASE001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 17:23:12
VBASE002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 18:05:38
VBASE003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 18:34:34
VBASE004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 17:50:32
VBASE005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 18:37:29
VBASE006.VDF : 7.11.103.230 2293248 Bytes 24.09.2013 16:30:33
VBASE007.VDF : 7.11.116.38 5485568 Bytes 28.11.2013 19:59:17
VBASE008.VDF : 7.11.120.140 1154560 Bytes 19.12.2013 18:53:46
VBASE009.VDF : 7.11.120.141 2048 Bytes 19.12.2013 18:53:46
VBASE010.VDF : 7.11.120.142 2048 Bytes 19.12.2013 18:53:47
VBASE011.VDF : 7.11.120.143 2048 Bytes 19.12.2013 18:53:47
VBASE012.VDF : 7.11.120.144 2048 Bytes 19.12.2013 18:53:47
VBASE013.VDF : 7.11.120.145 2048 Bytes 19.12.2013 18:53:47
VBASE014.VDF : 7.11.121.19 126976 Bytes 21.12.2013 13:52:35
VBASE015.VDF : 7.11.121.147 122880 Bytes 24.12.2013 08:13:25
VBASE016.VDF : 7.11.121.233 115712 Bytes 25.12.2013 20:43:34
VBASE017.VDF : 7.11.122.57 325120 Bytes 27.12.2013 20:03:19
VBASE018.VDF : 7.11.122.123 199680 Bytes 28.12.2013 15:22:49
VBASE019.VDF : 7.11.122.219 368640 Bytes 01.01.2014 20:07:39
VBASE020.VDF : 7.11.123.39 182272 Bytes 03.01.2014 19:50:42
VBASE021.VDF : 7.11.123.141 124416 Bytes 05.01.2014 08:57:18
VBASE022.VDF : 7.11.124.11 172032 Bytes 08.01.2014 15:15:10
VBASE023.VDF : 7.11.124.79 144896 Bytes 09.01.2014 18:27:52
VBASE024.VDF : 7.11.124.177 178176 Bytes 11.01.2014 17:57:26
VBASE025.VDF : 7.11.125.41 319488 Bytes 14.01.2014 06:25:51
VBASE026.VDF : 7.11.125.149 260096 Bytes 17.01.2014 17:13:49
VBASE027.VDF : 7.11.125.150 2048 Bytes 17.01.2014 17:13:50
VBASE028.VDF : 7.11.125.151 2048 Bytes 17.01.2014 17:13:50
VBASE029.VDF : 7.11.125.152 2048 Bytes 17.01.2014 17:13:50
VBASE030.VDF : 7.11.125.153 2048 Bytes 17.01.2014 17:13:50
VBASE031.VDF : 7.11.125.156 78848 Bytes 17.01.2014 17:13:50
Engineversion : 8.2.12.174
AEVDF.DLL : 8.1.3.4 102774 Bytes 13.06.2013 18:23:14
AESCRIPT.DLL : 8.1.4.180 520574 Bytes 16.01.2014 15:48:42
AESCN.DLL : 8.1.10.6 131447 Bytes 12.12.2013 20:17:31
AESBX.DLL : 8.2.20.6 1331575 Bytes 13.01.2014 18:50:01
AERDL.DLL : 8.2.0.138 704888 Bytes 02.12.2013 19:59:25
AEPACK.DLL : 8.3.3.8 762232 Bytes 19.12.2013 18:54:00
AEOFFICE.DLL : 8.1.2.76 205181 Bytes 10.08.2013 11:05:09
AEHEUR.DLL : 8.1.4.870 6459770 Bytes 16.01.2014 15:48:42
AEHELP.DLL : 8.1.27.10 266618 Bytes 24.11.2013 20:55:51
AEGEN.DLL : 8.1.7.22 446839 Bytes 15.01.2014 19:37:27
AEEXP.DLL : 8.4.1.164 409976 Bytes 09.01.2014 18:27:59
AEEMU.DLL : 8.1.3.2 393587 Bytes 10.07.2012 19:03:01
AECORE.DLL : 8.1.33.0 225657 Bytes 12.12.2013 20:17:31
AEBB.DLL : 8.1.1.4 53619 Bytes 05.11.2012 15:08:48
AVWINLL.DLL : 14.0.2.180 23608 Bytes 18.12.2013 19:44:15
AVPREF.DLL : 14.0.2.180 48696 Bytes 18.12.2013 19:44:40
AVREP.DLL : 14.0.2.180 175672 Bytes 18.12.2013 19:44:40
AVARKT.DLL : 14.0.2.254 256056 Bytes 18.12.2013 19:44:19
AVEVTLOG.DLL : 14.0.2.180 165944 Bytes 18.12.2013 19:44:22
SQLITE3.DLL : 3.7.0.1 397704 Bytes 23.02.2013 15:59:01
AVSMTP.DLL : 14.0.2.180 60472 Bytes 18.12.2013 19:44:41
NETNT.DLL : 14.0.2.180 13368 Bytes 18.12.2013 19:45:05
RCIMAGE.DLL : 14.0.2.180 4786744 Bytes 18.12.2013 19:44:15
RCTEXT.DLL : 14.0.2.270 73272 Bytes 18.12.2013 19:44:15
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, Q:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Abweichende Gefahrenkategorien........: +APPL,+GAME,+JOKE,+PCK,+SPR,
Beginn des Suchlaufs: Freitag, 17. Januar 2014 18:14
Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, Q:)'
[INFO] Es wurde kein Virus gefunden!
Der Suchlauf nach versteckten Objekten wird begonnen.
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '96' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '171' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'NvXDSync.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '90' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '106' Modul(e) wurden durchsucht
Durchsuche Prozess 'adminservice.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'dsiwmis.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMutilps32.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'ePowerSvc.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'GREGsvc.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'UpdaterService.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'NOBuAgent.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'IScheduleSvc.exe' - '81' Modul(e) wurden durchsucht
Durchsuche Prozess 'PSIService.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.EXE' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'sftvsa.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSVC.EXE' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'sftlist.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '181' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSvcM.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'CVHSVC.EXE' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxtray.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'hkcmd.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxpers.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'SynTPEnh.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVCpl64.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVBg64.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'BtvStack.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'AthBtTray.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'ePowerTray.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'BJMYPRT.EXE' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'Skype.exe' - '129' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxext.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxsrvc.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'unsecapp.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'clear.fiAgent.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'DMREngine.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'msnmsgr.exe' - '144' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'Kies.exe' - '88' Modul(e) wurden durchsucht
Durchsuche Prozess 'KiesAirMessage.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'KiesPDLR.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'ePowerEvent.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAStorIcon.exe' - '57' Modul(e) wurden durchsucht
Durchsuche Prozess 'SuiteTray.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'PmmUpdate.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'BackupManagerTray.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'LManager.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'nusb3mon.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'pcee4.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'clear.fiMovieService.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'Updater.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'AllShareAgent.exe' - '103' Modul(e) wurden durchsucht
Durchsuche Prozess 'MMDx64Fx.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'CNSEMAIN.EXE' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'KiesTrayAgent.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMworker.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'EgisUpdate.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '98' Modul(e) wurden durchsucht
Durchsuche Prozess 'DivXUpdate.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'splwow64.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'AVWEBGRD.EXE' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'SynTPHelper.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '129' Modul(e) wurden durchsucht
Durchsuche Prozess 'DllHost.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'PhotoshopElementsFileAgent.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAStorDataMgrSvc.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMS.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'daemonu.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'AllShareDMS.exe' - '115' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '126' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'UNS.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '32' Modul(e) wurden durchsucht
Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '2223' Dateien ).
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\' <Acer>
Beginne mit der Suche in 'Q:\'
Der zu durchsuchende Pfad Q:\ konnte nicht geöffnet werden!
Systemfehler [5]: Zugriff verweigert
Ende des Suchlaufs: Freitag, 17. Januar 2014 21:15
Benötigte Zeit: 3:00:08 Stunde(n)
Der Suchlauf wurde vollständig durchgeführt.
40906 Verzeichnisse wurden überprüft
808000 Dateien wurden geprüft
0 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
0 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
808000 Dateien ohne Befall
12458 Archive wurden durchsucht
0 Warnungen
0 Hinweise
1128300 Objekte wurden beim Rootkitscan durchsucht
0 Versteckte Objekte wurden gefunden
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2014 02
Ran by Janet (administrator) on JANET-PC on 17-01-2014 21:52:14
Running from C:\Users\Janet\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\Windows\SysWOW64\PSIService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\DOLBY PCEE4\pcee4.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
({StringFileInfo_CompanyName}) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE
() C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\OFFICEVIRT.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-10-08] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [615584 2011-01-20] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-01-20] (Atheros Commnucations)
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831528 2011-05-10] (Acer Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1580368 2010-11-03] (Logitech, Inc.)
HKLM\...\Run: [Corel Photo Downloader] - C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [531272 2007-08-28] (Corel, Inc.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (CANON INC.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340336 2010-09-28] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-09-18] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-09-18] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-03-09] (NTI Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1081424 2011-03-14] (Dritek System Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-05-09] (CyberLink Corp.)
HKLM-x32\...\Run: [Corel Photo Downloader] - "C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel PhotoDownloader.exe" -startup
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [888488 2011-09-08] ({StringFileInfo_CompanyName})
HKLM-x32\...\Run: [AllShareAgent] - C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [226920 2011-03-30] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [193128 2011-03-30] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://t-online.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://facebook.de/
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll ()
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: HKLM-x32 {3CA45906-EF10-4E4E-9BE4-B444D220FCB0} hxxp://ua.foto.com/ImageUploader6.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\0du26tms.Janet
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\0du26tms.Janet\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation)
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()
==================== Drivers (Whitelisted) ====================
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-02] (Avira Operations GmbH & Co. KG)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-05-22] ()
S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-17 21:52 - 2014-01-17 21:53 - 00019165 _____ C:\Users\Janet\Downloads\FRST.txt
2014-01-17 21:51 - 2014-01-17 21:51 - 00000000 ____D C:\FRST
2014-01-17 21:50 - 2014-01-17 21:50 - 00000472 _____ C:\Users\Janet\Downloads\defogger_disable.log
2014-01-17 21:50 - 2014-01-17 21:50 - 00000000 _____ C:\Users\Janet\defogger_reenable
2014-01-17 21:43 - 2014-01-17 21:43 - 00370610 _____ C:\Users\Janet\Downloads\gmer_2.1.19323.zip
2014-01-17 21:42 - 2014-01-17 21:42 - 02075648 _____ (Farbar) C:\Users\Janet\Downloads\FRST64.exe
2014-01-17 21:33 - 2014-01-17 21:34 - 00050477 _____ C:\Users\Janet\Downloads\Defogger.exe
2014-01-17 07:49 - 2014-01-17 07:49 - 00002029 _____ C:\Users\Janet\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-17 07:49 - 2014-01-17 07:49 - 00001973 _____ C:\Users\Janet\Desktop\Avira EU-Cleaner.lnk
2014-01-17 07:26 - 2014-01-17 07:26 - 00000000 ____D C:\Users\Janet\AppData\Local\{A6684821-0E6E-4D1E-A50A-D17A860EEBAD}
2014-01-16 20:28 - 2014-01-16 20:28 - 00000000 ____D C:\Users\Janet\Documents\Adobe
2014-01-16 16:55 - 2014-01-16 20:46 - 00000000 ____D C:\Users\Janet\Eigene DVD
2014-01-16 16:54 - 2014-01-16 16:54 - 00000000 ____D C:\Users\Janet\Downloads\Neuer Ordner
2014-01-16 16:47 - 2014-01-16 16:47 - 00000000 ____D C:\Users\Janet\AppData\Local\{FFCB9A8C-1016-4391-B60F-8AE95A98F6B6}
2014-01-15 23:22 - 2014-01-16 16:52 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft Video Converter Ultimate
2014-01-15 23:22 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-16 16:49 - 00000000 ____D C:\ProgramData\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-15 23:21 - 00001446 _____ C:\Users\Public\Desktop\Aimersoft Video Converter Ultimate.lnk
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Users\Janet\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files\Common Files\Aimersoft
2014-01-15 23:21 - 2013-08-23 13:36 - 00721263 _____ () C:\Windows\SysWOW64\AiCM64.dll
2014-01-15 23:21 - 2013-08-07 14:31 - 00214528 _____ () C:\Windows\SysWOW64\AiCM32.dll
2014-01-15 23:19 - 2014-01-15 23:20 - 36573803 _____ (Aimersoft Software ) C:\Users\Janet\Downloads\aimer-video-ultimate_full523.exe
2014-01-15 21:53 - 2014-01-15 21:53 - 00000000 ____D C:\ProgramData\xml_param
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files (x86)\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:47 - 00001220 _____ C:\Users\Janet\Desktop\Aimersoft DVD Ripper.lnk
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\AppData\Local\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\ProgramData\Aimersoft DVD Ripper
2014-01-15 21:46 - 2013-05-07 09:08 - 00892928 _____ (Free Software Foundation) C:\Windows\SysWOW64\iconv.dll
2014-01-15 21:46 - 2013-05-07 09:08 - 00675840 _____ () C:\Windows\SysWOW64\ac3filter.ax
2014-01-15 21:46 - 2013-05-07 09:08 - 00496640 _____ C:\Windows\SysWOW64\xvid.ax
2014-01-15 20:49 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 20:49 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 20:49 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 20:35 - 2014-01-15 20:36 - 00000000 ____D C:\Users\Janet\AppData\Local\{06C9A5D6-6788-4180-9A14-FDA0422AEE00}
2014-01-15 07:23 - 2014-01-15 07:23 - 00000000 ____D C:\Users\Janet\AppData\Local\{384B42F7-D6BC-4C66-AA82-7B2245725B8D}
2014-01-15 00:22 - 2014-01-15 00:23 - 00000021 _____ C:\Windows\DVDShrink.txt
2014-01-15 00:21 - 2014-01-15 00:21 - 00001157 _____ C:\Users\Public\Desktop\AVS DVD Copy.lnk
2014-01-15 00:21 - 2011-09-22 19:55 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2014-01-15 00:21 - 2011-09-22 19:55 - 00487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp70.dll
2014-01-15 00:19 - 2014-01-15 00:20 - 14837688 _____ (Online Media Technologies Ltd. ) C:\Users\Janet\Downloads\AVSDVDCopy.exe
2014-01-15 00:11 - 2014-01-15 00:11 - 00000000 ____D C:\Users\Janet\AppData\Roaming\7168
2014-01-15 00:10 - 2014-01-15 00:10 - 00000000 ____D C:\Users\Janet\Documents\AnyDVDHD
2014-01-15 00:04 - 2014-01-17 07:24 - 00000040 ___SH C:\ProgramData\.zreglib
2014-01-15 00:04 - 2014-01-15 00:04 - 00001105 _____ C:\Users\Public\Desktop\AnyDVD.lnk
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\ProgramData\SlySoft
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\Program Files (x86)\SlySoft
2014-01-14 22:40 - 2014-01-16 21:20 - 00000000 ____D C:\Program Files (x86)\DVDFab 9
2014-01-14 22:40 - 2014-01-14 23:36 - 00000000 ____D C:\Users\Janet\Documents\DVDFab9
2014-01-14 22:03 - 2014-01-14 22:05 - 00000000 ____D C:\ProgramData\DVD Shrink
2014-01-14 22:02 - 2014-01-14 22:03 - 00598086 _____ (DVD Shrink) C:\Users\Janet\Downloads\DVDShrink.exe
2014-01-14 18:42 - 2014-01-14 18:43 - 00000000 ____D C:\Users\Janet\AppData\Local\{6187B567-6601-43F3-BE50-C1F19B2322AD}
2014-01-13 19:45 - 2014-01-13 19:45 - 00000000 ____D C:\Users\Janet\AppData\Local\{FD74DBE5-0FFD-43EE-A412-94D9989A16D0}
2014-01-12 21:32 - 2014-01-12 21:32 - 00000000 ____D C:\Users\Janet\AppData\Local\{334CC952-B111-47B0-A59D-60FB697828FD}
2014-01-12 19:50 - 2014-01-12 19:50 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-12 09:32 - 2014-01-12 09:32 - 00000000 ____D C:\Users\Janet\AppData\Local\{65F4F4F5-1EE3-4F66-A3EC-E04DCB312275}
2014-01-12 09:29 - 2014-01-17 18:09 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-12 09:29 - 2014-01-12 09:29 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2014-01-11 18:54 - 2014-01-11 18:54 - 00000000 ____D C:\Users\Janet\AppData\Local\{F4E86DF6-46B1-403A-B971-B847E073BC36}
2014-01-10 19:26 - 2014-01-10 19:26 - 00000000 ____D C:\Users\Janet\AppData\Local\{52D3692E-83A9-4631-B13A-78086BA0DBA0}
2014-01-09 19:25 - 2014-01-09 19:25 - 00000000 ____D C:\Users\Janet\AppData\Local\{ECD53D4A-8BA8-48AE-83E3-27D79601A322}
2014-01-08 16:18 - 2014-01-08 16:18 - 00000724 _____ C:\Users\Janet\Desktop\index.html
2014-01-08 16:11 - 2014-01-08 16:11 - 00000000 ____D C:\Users\Janet\AppData\Local\{2CCFEEA3-E483-4874-9281-E6CE34F648FF}
2014-01-07 19:39 - 2014-01-07 19:39 - 00000000 ____D C:\Users\Janet\AppData\Local\{12DB25D5-C652-4877-AAA6-6F327BA68D84}
2014-01-06 09:52 - 2014-01-06 21:52 - 00000000 ____D C:\Users\Janet\AppData\Local\{5A5E664B-2C8F-4B81-B053-9BC56EBDFACB}
2014-01-04 21:28 - 2014-01-04 21:28 - 00000000 ____D C:\Users\Janet\AppData\Local\{F8454033-78FF-415A-AB9C-7CA8EAF132FC}
2014-01-03 21:15 - 2014-01-03 21:29 - 990570856 _____ C:\Users\Janet\Downloads\Die_Weihnachtsgans_Auguste_2013-12-22_1545_307454.mp4
2014-01-03 20:50 - 2014-01-03 20:50 - 00000000 ____D C:\Users\Janet\AppData\Local\{95023F0F-5A14-418B-A7F5-54B89BF527D3}
2014-01-02 20:12 - 2014-01-02 20:14 - 00000000 ____D C:\Users\Janet\AppData\Local\{BC144211-BA9E-404F-B5A6-5C38F7134982}
2014-01-01 21:02 - 2014-01-01 21:03 - 00000000 ____D C:\Users\Janet\AppData\Local\{9823F6F8-8EFF-4668-9AA2-2BE700EBB44E}
2013-12-30 21:47 - 2013-12-30 21:47 - 00000132 _____ C:\Users\Janet\Desktop\DVD Fatburner.ashprj
2013-12-30 19:31 - 2013-12-30 19:32 - 00000000 ____D C:\Users\Janet\AppData\Local\{6DF02C5F-0DDD-4BF6-8FE9-AEF5FC9C570B}
2013-12-29 22:01 - 2013-12-29 22:01 - 00000000 ____D C:\Users\Janet\AppData\Local\{80FF7092-481A-48A1-8B34-81C2A1CAB242}
2013-12-29 11:31 - 2013-12-29 11:31 - 00401768 _____ (Softonic ) C:\Users\Janet\Downloads\SoftonicDownloader_fuer_free-download-manager.exe
2013-12-29 10:00 - 2013-12-29 10:01 - 00000000 ____D C:\Users\Janet\AppData\Local\{B4591F35-BE13-4E5C-B8FE-304C1D13F0A7}
2013-12-28 16:18 - 2013-12-28 16:20 - 00000000 ____D C:\Users\Janet\AppData\Local\{0E0FC107-4745-4C01-9420-67D657382E35}
2013-12-27 21:01 - 2013-12-27 21:01 - 00000000 ____D C:\Users\Janet\AppData\Local\{92618971-794B-4C98-BC3A-F0998C73CB9C}
2013-12-26 21:05 - 2013-12-26 21:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-26 20:03 - 2013-12-26 20:03 - 00000000 ____D C:\Users\Janet\AppData\Local\{E1D436B3-EE8C-4891-811A-3BDF41179ADF}
2013-12-25 22:31 - 2013-12-25 22:31 - 00000000 ___RD C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-12-25 21:38 - 2013-12-25 21:39 - 00000000 ____D C:\Users\Janet\AppData\Local\{96ED6B80-D154-464F-A385-A4859DD0F9A0}
2013-12-24 09:09 - 2013-12-24 09:09 - 00000000 ____D C:\Users\Janet\AppData\Local\{C33C6597-CEA6-443A-819F-6F93AE5B057C}
2013-12-23 20:04 - 2013-12-23 20:04 - 00000000 ____D C:\Users\Janet\AppData\Local\{EF3BDE23-1F24-48A5-8317-B06B925301B9}
2013-12-22 20:57 - 2013-12-22 20:57 - 00000000 ____D C:\Users\Janet\AppData\Local\{FDF14275-656F-42D2-B3F8-8A274E1D0D65}
2013-12-21 14:50 - 2013-12-21 14:51 - 00000000 ____D C:\Users\Janet\AppData\Local\{BBAC6FB4-9C6C-4134-89B5-32FD34E2AFF2}
2013-12-19 19:49 - 2013-12-19 19:49 - 00000000 ____D C:\Users\Janet\AppData\Local\{3C996BD9-78D5-4B2A-A46F-EE9ED1419569}
2013-12-18 20:39 - 2013-12-18 20:39 - 00000000 ____D C:\Users\Janet\AppData\Local\{3EEBFFCC-C931-48CA-845E-50ED8BDA73F1}
==================== One Month Modified Files and Folders =======
2014-01-17 21:53 - 2014-01-17 21:52 - 00019165 _____ C:\Users\Janet\Downloads\FRST.txt
2014-01-17 21:51 - 2014-01-17 21:51 - 00000000 ____D C:\FRST
2014-01-17 21:50 - 2014-01-17 21:50 - 00000472 _____ C:\Users\Janet\Downloads\defogger_disable.log
2014-01-17 21:50 - 2014-01-17 21:50 - 00000000 _____ C:\Users\Janet\defogger_reenable
2014-01-17 21:50 - 2011-09-13 21:37 - 00000000 ____D C:\Users\Janet
2014-01-17 21:43 - 2014-01-17 21:43 - 00370610 _____ C:\Users\Janet\Downloads\gmer_2.1.19323.zip
2014-01-17 21:42 - 2014-01-17 21:42 - 02075648 _____ (Farbar) C:\Users\Janet\Downloads\FRST64.exe
2014-01-17 21:34 - 2014-01-17 21:33 - 00050477 _____ C:\Users\Janet\Downloads\Defogger.exe
2014-01-17 21:12 - 2012-05-16 18:29 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-17 20:42 - 2011-07-26 06:44 - 01909752 _____ C:\Windows\WindowsUpdate.log
2014-01-17 20:41 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-17 20:41 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-17 19:18 - 2011-09-15 10:33 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Skype
2014-01-17 18:11 - 2011-09-14 18:47 - 00000000 ____D C:\ProgramData\clear.fi
2014-01-17 18:10 - 2012-06-21 16:29 - 00000000 ____D C:\Users\Janet\Tracing
2014-01-17 18:09 - 2014-01-12 09:29 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-17 18:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-17 18:09 - 2009-07-14 05:51 - 00144196 _____ C:\Windows\setupact.log
2014-01-17 15:04 - 2013-09-07 19:49 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Free Download Manager
2014-01-17 07:49 - 2014-01-17 07:49 - 00002029 _____ C:\Users\Janet\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-17 07:49 - 2014-01-17 07:49 - 00001973 _____ C:\Users\Janet\Desktop\Avira EU-Cleaner.lnk
2014-01-17 07:26 - 2014-01-17 07:26 - 00000000 ____D C:\Users\Janet\AppData\Local\{A6684821-0E6E-4D1E-A50A-D17A860EEBAD}
2014-01-17 07:24 - 2014-01-15 00:04 - 00000040 ___SH C:\ProgramData\.zreglib
2014-01-17 00:07 - 2010-11-21 04:47 - 00100768 _____ C:\Windows\PFRO.log
2014-01-17 00:05 - 2011-09-15 10:26 - 00000000 ____D C:\Users\Janet\AppData\Roaming\SoftGrid Client
2014-01-16 23:50 - 2013-01-18 23:21 - 00000000 ____D C:\ProgramData\PhotoME
2014-01-16 23:49 - 2012-09-25 18:41 - 00000000 ____D C:\Users\Janet\AppData\Local\Google
2014-01-16 23:49 - 2012-09-25 18:41 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-16 23:48 - 2012-07-19 19:25 - 00000000 ____D C:\Program Files (x86)\OnlineFotoservice
2014-01-16 23:47 - 2012-07-19 21:47 - 00000000 ____D C:\Program Files (x86)\Pixum
2014-01-16 21:20 - 2014-01-14 22:40 - 00000000 ____D C:\Program Files (x86)\DVDFab 9
2014-01-16 20:46 - 2014-01-16 16:55 - 00000000 ____D C:\Users\Janet\Eigene DVD
2014-01-16 20:28 - 2014-01-16 20:28 - 00000000 ____D C:\Users\Janet\Documents\Adobe
2014-01-16 20:28 - 2011-09-13 21:46 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Adobe
2014-01-16 18:59 - 2011-07-26 16:36 - 00654852 _____ C:\Windows\system32\perfh007.dat
2014-01-16 18:59 - 2011-07-26 16:36 - 00130434 _____ C:\Windows\system32\perfc007.dat
2014-01-16 18:59 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-16 16:54 - 2014-01-16 16:54 - 00000000 ____D C:\Users\Janet\Downloads\Neuer Ordner
2014-01-16 16:52 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft Video Converter Ultimate
2014-01-16 16:49 - 2014-01-15 23:21 - 00000000 ____D C:\ProgramData\Aimersoft Video Converter Ultimate
2014-01-16 16:47 - 2014-01-16 16:47 - 00000000 ____D C:\Users\Janet\AppData\Local\{FFCB9A8C-1016-4391-B60F-8AE95A98F6B6}
2014-01-16 16:43 - 2009-07-14 05:45 - 03315920 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 00:43 - 2013-08-15 21:33 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 00:40 - 2011-09-17 19:34 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 23:22 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-15 23:21 - 00001446 _____ C:\Users\Public\Desktop\Aimersoft Video Converter Ultimate.lnk
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Users\Janet\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files\Common Files\Aimersoft
2014-01-15 23:21 - 2014-01-15 21:46 - 00000000 ____D C:\Program Files (x86)\Aimersoft
2014-01-15 23:20 - 2014-01-15 23:19 - 36573803 _____ (Aimersoft Software ) C:\Users\Janet\Downloads\aimer-video-ultimate_full523.exe
2014-01-15 22:50 - 2011-09-16 10:52 - 00000000 ____D C:\Users\Janet\AppData\Local\CrashDumps
2014-01-15 21:53 - 2014-01-15 21:53 - 00000000 ____D C:\ProgramData\xml_param
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft DVD Ripper
2014-01-15 21:47 - 2014-01-15 21:46 - 00001220 _____ C:\Users\Janet\Desktop\Aimersoft DVD Ripper.lnk
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\AppData\Local\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\ProgramData\Aimersoft DVD Ripper
2014-01-15 21:32 - 2011-10-04 20:27 - 00000000 ____D C:\Users\Janet\Downloads\Programme
2014-01-15 20:36 - 2014-01-15 20:35 - 00000000 ____D C:\Users\Janet\AppData\Local\{06C9A5D6-6788-4180-9A14-FDA0422AEE00}
2014-01-15 07:23 - 2014-01-15 07:23 - 00000000 ____D C:\Users\Janet\AppData\Local\{384B42F7-D6BC-4C66-AA82-7B2245725B8D}
2014-01-15 07:23 - 2013-09-15 13:27 - 00000000 ____D C:\Users\Janet\AppData\Roaming\DivX
2014-01-15 00:23 - 2014-01-15 00:22 - 00000021 _____ C:\Windows\DVDShrink.txt
2014-01-15 00:22 - 2011-10-04 20:34 - 00000000 ____D C:\Users\Janet\AppData\Roaming\AVS4YOU
2014-01-15 00:21 - 2014-01-15 00:21 - 00001157 _____ C:\Users\Public\Desktop\AVS DVD Copy.lnk
2014-01-15 00:21 - 2012-02-04 23:32 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2014-01-15 00:21 - 2011-10-04 20:32 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2014-01-15 00:20 - 2014-01-15 00:19 - 14837688 _____ (Online Media Technologies Ltd. ) C:\Users\Janet\Downloads\AVSDVDCopy.exe
2014-01-15 00:11 - 2014-01-15 00:11 - 00000000 ____D C:\Users\Janet\AppData\Roaming\7168
2014-01-15 00:10 - 2014-01-15 00:10 - 00000000 ____D C:\Users\Janet\Documents\AnyDVDHD
2014-01-15 00:04 - 2014-01-15 00:04 - 00001105 _____ C:\Users\Public\Desktop\AnyDVD.lnk
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\ProgramData\SlySoft
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\Program Files (x86)\SlySoft
2014-01-14 23:36 - 2014-01-14 22:40 - 00000000 ____D C:\Users\Janet\Documents\DVDFab9
2014-01-14 22:16 - 2011-09-13 21:38 - 00000000 ____D C:\Users\Janet\AppData\Local\VirtualStore
2014-01-14 22:05 - 2014-01-14 22:03 - 00000000 ____D C:\ProgramData\DVD Shrink
2014-01-14 22:03 - 2014-01-14 22:02 - 00598086 _____ (DVD Shrink) C:\Users\Janet\Downloads\DVDShrink.exe
2014-01-14 18:43 - 2014-01-14 18:42 - 00000000 ____D C:\Users\Janet\AppData\Local\{6187B567-6601-43F3-BE50-C1F19B2322AD}
2014-01-13 19:45 - 2014-01-13 19:45 - 00000000 ____D C:\Users\Janet\AppData\Local\{FD74DBE5-0FFD-43EE-A412-94D9989A16D0}
2014-01-12 21:32 - 2014-01-12 21:32 - 00000000 ____D C:\Users\Janet\AppData\Local\{334CC952-B111-47B0-A59D-60FB697828FD}
2014-01-12 19:50 - 2014-01-12 19:50 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-12 09:32 - 2014-01-12 09:32 - 00000000 ____D C:\Users\Janet\AppData\Local\{65F4F4F5-1EE3-4F66-A3EC-E04DCB312275}
2014-01-12 09:29 - 2014-01-12 09:29 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2014-01-11 20:02 - 2012-02-16 22:55 - 00000000 ____D C:\Users\Janet\Documents\Rezepte
2014-01-11 18:54 - 2014-01-11 18:54 - 00000000 ____D C:\Users\Janet\AppData\Local\{F4E86DF6-46B1-403A-B971-B847E073BC36}
2014-01-10 19:26 - 2014-01-10 19:26 - 00000000 ____D C:\Users\Janet\AppData\Local\{52D3692E-83A9-4631-B13A-78086BA0DBA0}
2014-01-09 19:25 - 2014-01-09 19:25 - 00000000 ____D C:\Users\Janet\AppData\Local\{ECD53D4A-8BA8-48AE-83E3-27D79601A322}
2014-01-08 16:23 - 2012-03-02 12:05 - 00000000 ____D C:\ProgramData\CanonIJPLM
2014-01-08 16:18 - 2014-01-08 16:18 - 00000724 _____ C:\Users\Janet\Desktop\index.html
2014-01-08 16:11 - 2014-01-08 16:11 - 00000000 ____D C:\Users\Janet\AppData\Local\{2CCFEEA3-E483-4874-9281-E6CE34F648FF}
2014-01-07 19:57 - 2011-07-26 07:06 - 00001024 ___RH C:\Users\Public\Documents\NTILiveUpdateV9.dll
2014-01-07 19:57 - 2011-07-26 07:05 - 00001024 ___RH C:\Users\Public\Documents\NTIMMV9Acer.dll
2014-01-07 19:54 - 2011-07-26 07:05 - 00001024 ___RH C:\Users\Public\Documents\NTIMMV9REGET.dll
2014-01-07 19:39 - 2014-01-07 19:39 - 00000000 ____D C:\Users\Janet\AppData\Local\{12DB25D5-C652-4877-AAA6-6F327BA68D84}
2014-01-06 21:52 - 2014-01-06 09:52 - 00000000 ____D C:\Users\Janet\AppData\Local\{5A5E664B-2C8F-4B81-B053-9BC56EBDFACB}
2014-01-04 21:28 - 2014-01-04 21:28 - 00000000 ____D C:\Users\Janet\AppData\Local\{F8454033-78FF-415A-AB9C-7CA8EAF132FC}
2014-01-03 21:29 - 2014-01-03 21:15 - 990570856 _____ C:\Users\Janet\Downloads\Die_Weihnachtsgans_Auguste_2013-12-22_1545_307454.mp4
2014-01-03 20:50 - 2014-01-03 20:50 - 00000000 ____D C:\Users\Janet\AppData\Local\{95023F0F-5A14-418B-A7F5-54B89BF527D3}
2014-01-02 20:14 - 2014-01-02 20:12 - 00000000 ____D C:\Users\Janet\AppData\Local\{BC144211-BA9E-404F-B5A6-5C38F7134982}
2014-01-01 21:03 - 2014-01-01 21:02 - 00000000 ____D C:\Users\Janet\AppData\Local\{9823F6F8-8EFF-4668-9AA2-2BE700EBB44E}
2013-12-30 21:47 - 2013-12-30 21:47 - 00000132 _____ C:\Users\Janet\Desktop\DVD Fatburner.ashprj
2013-12-30 19:32 - 2013-12-30 19:31 - 00000000 ____D C:\Users\Janet\AppData\Local\{6DF02C5F-0DDD-4BF6-8FE9-AEF5FC9C570B}
2013-12-29 22:01 - 2013-12-29 22:01 - 00000000 ____D C:\Users\Janet\AppData\Local\{80FF7092-481A-48A1-8B34-81C2A1CAB242}
2013-12-29 11:31 - 2013-12-29 11:31 - 00401768 _____ (Softonic ) C:\Users\Janet\Downloads\SoftonicDownloader_fuer_free-download-manager.exe
2013-12-29 10:01 - 2013-12-29 10:00 - 00000000 ____D C:\Users\Janet\AppData\Local\{B4591F35-BE13-4E5C-B8FE-304C1D13F0A7}
2013-12-28 16:37 - 2011-09-16 08:31 - 00000000 ____D C:\Users\Janet\AppData\Local\Corel
2013-12-28 16:36 - 2011-09-16 08:30 - 00003140 ___SH C:\Windows\SysWOW64\KGyGaAvL.sys
2013-12-28 16:20 - 2013-12-28 16:18 - 00000000 ____D C:\Users\Janet\AppData\Local\{0E0FC107-4745-4C01-9420-67D657382E35}
2013-12-27 21:01 - 2013-12-27 21:01 - 00000000 ____D C:\Users\Janet\AppData\Local\{92618971-794B-4C98-BC3A-F0998C73CB9C}
2013-12-27 20:57 - 2012-12-14 15:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-26 21:05 - 2013-12-26 21:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-26 20:03 - 2013-12-26 20:03 - 00000000 ____D C:\Users\Janet\AppData\Local\{E1D436B3-EE8C-4891-811A-3BDF41179ADF}
2013-12-25 22:31 - 2013-12-25 22:31 - 00000000 ___RD C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-12-25 21:39 - 2013-12-25 21:38 - 00000000 ____D C:\Users\Janet\AppData\Local\{96ED6B80-D154-464F-A385-A4859DD0F9A0}
2013-12-24 09:09 - 2013-12-24 09:09 - 00000000 ____D C:\Users\Janet\AppData\Local\{C33C6597-CEA6-443A-819F-6F93AE5B057C}
2013-12-23 20:04 - 2013-12-23 20:04 - 00000000 ____D C:\Users\Janet\AppData\Local\{EF3BDE23-1F24-48A5-8317-B06B925301B9}
2013-12-22 20:57 - 2013-12-22 20:57 - 00000000 ____D C:\Users\Janet\AppData\Local\{FDF14275-656F-42D2-B3F8-8A274E1D0D65}
2013-12-21 14:51 - 2013-12-21 14:50 - 00000000 ____D C:\Users\Janet\AppData\Local\{BBAC6FB4-9C6C-4134-89B5-32FD34E2AFF2}
2013-12-19 19:49 - 2013-12-19 19:49 - 00000000 ____D C:\Users\Janet\AppData\Local\{3C996BD9-78D5-4B2A-A46F-EE9ED1419569}
2013-12-18 22:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-18 20:45 - 2013-05-07 19:49 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-18 20:45 - 2013-03-30 13:39 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-18 20:45 - 2013-03-30 13:39 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-18 20:39 - 2013-12-18 20:39 - 00000000 ____D C:\Users\Janet\AppData\Local\{3EEBFFCC-C931-48CA-845E-50ED8BDA73F1}
Some content of TEMP:
====================
C:\Users\Janet\AppData\Local\Temp\2kdnyn0x.dll
C:\Users\Janet\AppData\Local\Temp\AskSLib.dll
C:\Users\Janet\AppData\Local\Temp\avgnt.exe
C:\Users\Janet\AppData\Local\Temp\C7F.exe
C:\Users\Janet\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe
C:\Users\Janet\AppData\Local\Temp\INST01.dll
C:\Users\Janet\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Janet\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Janet\AppData\Local\Temp\jre-7u5-windows-i586-iftw.exe
C:\Users\Janet\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe
C:\Users\Janet\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\Janet\AppData\Local\Temp\mdm_z4_ext_77922376_7020.dll
C:\Users\Janet\AppData\Local\Temp\mdm_z4_ext_80871496_8916.dll
C:\Users\Janet\AppData\Local\Temp\MoviesToolbarSetup_Somoto29_9_13.exe
C:\Users\Janet\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Janet\AppData\Local\Temp\qgp1vh1t.dll
C:\Users\Janet\AppData\Local\Temp\readSTILog.dll
C:\Users\Janet\AppData\Local\Temp\setup.exe
C:\Users\Janet\AppData\Local\Temp\siup1hyb.dll
C:\Users\Janet\AppData\Local\Temp\UpdateCheckerSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-10 20:18
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-01-2014 02
Ran by Janet at 2014-01-17 21:53:50
Running from C:\Users\Janet\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
"Ponky gezielt Deutsch 1+2" (x32 Version: 2.00 - Engel Edition)
1912 Titanic Mystery (x32 Version: - Oberon Media)
4Free Video Converter 2 (x32 Version: - 4Free Studio)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Acer Backup Manager (x32 Version: 3.0.0.90 - NTI Corporation)
Acer Crystal Eye Webcam (x32 Version: 1.0.1523 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.0.1523 - CyberLink Corp.) Hidden
Acer ePower Management (x32 Version: 6.00.3007 - Acer Incorporated)
Acer eRecovery Management (x32 Version: 5.00.3004 - Acer Incorporated)
Acer GameZone Console (x32 Version: 6.1.0.40497 - Oberon Media, Inc.)
Acer Registration (x32 Version: 1.03.3004 - Acer Incorporated)
Acer ScreenSaver (x32 Version: 1.1.0527.2011 - Acer Incorporated)
Acer Updater (x32 Version: 1.02.3005 - Acer Incorporated)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
ActiveX контрола на Windows Live Mesh за отдалечени връзки (x32 Version: 15.4.5722.2 - Microsoft Corporation)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Photoshop Elements 11 (x32 Version: 11.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 11 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop Lightroom 4.4 64-bit (Version: 4.4.1 - Adobe)
Adobe Premiere Elements 11 (Version: 11.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 11 (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Reader 9.5.5 MUI (x32 Version: 9.5.5 - Adobe Systems Incorporated)
Aimersoft DVD Ripper(Build 3.0.0.2) (x32 Version: - Aimersoft Software)
Aimersoft Video Converter Ultimate(Build 5.7.1.0) (x32 Version: 5.7.1.0 - Aimersoft Software)
Alien Skin Eye Candy 5 Textures (x32 Version: - )
AnyDVD (x32 Version: 7.4.0.0 - SlySoft)
Ashampoo Burning Studio 6 FREE v.6.80 (x32 Version: 6.8.0 - ashampoo GmbH & Co. KG)
Ask Toolbar (x32 Version: 1.15.11.0 - Ask.com) <==== ATTENTION
Avidemux 2.6 (32-bit) (x32 Version: 2.6.5.8897 - )
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
AVS Audio Converter 7 (x32 Version: - Online Media Technologies Ltd.)
AVS Audio Editor 7.1 (x32 Version: - Online Media Technologies Ltd.)
AVS DVD Copy 4.1.2.283 (x32 Version: 4.1.2.283 - Online Media Technologies Ltd.)
AVS Image Converter 2.2.1.209 (x32 Version: - Online Media Technologies Ltd.)
AVS Screen Capture version 2.0.1 (x32 Version: - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (x32 Version: - Online Media Technologies Ltd.)
AVS Video Converter 8 (x32 Version: - Online Media Technologies Ltd.)
AVS Video Editor 6 (x32 Version: - Online Media Technologies Ltd.)
AVS Video Recorder 2.5 (x32 Version: - Online Media Technologies Ltd.)
AVS Video ReMaker 4.0.8.140 (x32 Version: - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.4 (x32 Version: - Online Media Technologies Ltd.)
Backup Manager V3 (x32 Version: 3.0.0.90 - NTI Corporation) Hidden
Bejeweled 2 Deluxe (x32 Version: - Oberon Media)
Belles Beauty Boutique (x32 Version: - Oberon Media)
Bing Bar (x32 Version: 7.0.610.0 - Microsoft Corporation)
Bluetooth Win7 Suite (64) (Version: 7.2.0.56 - Atheros Communications)
Broadcom Card Reader Driver Installer (Version: 14.6.1.2 - Broadcom Corporation)
Broadcom Gigabit NetLink Controller (Version: 14.6.1.2 - Broadcom Corporation)
Canon Easy-PhotoPrint EX (x32 Version: - )
Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data (x32 Version: - )
Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data (x32 Version: - )
Canon Easy-PhotoPrint Pro (x32 Version: - )
Canon Easy-WebPrint EX (x32 Version: - )
Canon MG8100 series Benutzerregistrierung (x32 Version: - )
Canon MG8100 series MP Drivers (Version: - )
Canon MP Navigator EX 4.0 (x32 Version: - )
Canon My Printer (x32 Version: - )
Canon Solution Menu EX (x32 Version: - )
CD-LabelPrint (x32 Version: - )
Chicken Invaders 3 (x32 Version: - Oberon Media)
clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 1.0.1720.00 - CyberLink Corp.)
clear.fi (x32 Version: 1.0.1720.00 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.7709 - CyberLink Corp.) Hidden
clear.fi Client (x32 Version: 1.00.3008 - Acer Incorporated)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Control ActiveX del Windows Live Mesh per a connexions remotes (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Controle ActiveX do Windows Live Mesh para Conexões Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Corel Paint Shop Pro Photo X2 (x32 Version: 12.001.0000 - Corel Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DivX-Setup (x32 Version: 2.6.1.84 - DivX, LLC)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.4 - Dolby Laboratories Inc)
Dream Day First Home (x32 Version: - Oberon Media)
eBay Worldwide (x32 Version: 2.2.0409 - OEM)
Elements 11 Organizer (x32 Version: 11.0 - Ihr Firmenname) Hidden
Eye Candy 4000 (x32 Version: - )
Farm Frenzy 3 Ice Age (x32 Version: - Oberon Media)
Filters Unlimited 2.0 (x32 Version: - )
Flip Words (x32 Version: - Oberon Media)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free Download Manager 3.0 (x32 Version: - FreeDownloadManager.ORG)
Free YouTube Download version 3.1.29.608 (x32 Version: 3.1.29.608 - DVDVideoSoft Ltd.)
Galapago (x32 Version: - Oberon Media)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Identity Card (x32 Version: 1.00.3006 - Acer Incorporated)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2372 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046 - Intel Corporation)
IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kontrola Windows Live Mesh ActiveX za daljinske veze (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Launch Manager (x32 Version: 5.1.4 - Acer Inc.)
MediaInfo 0.7.61 (Version: 0.7.61 - MediaArea.net)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKCU Version: - )
MyWinLocker (Version: 4.0.14.11 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.11 - Egis Technology Inc.) Hidden
MyWinLocker Suite (x32 Version: 4.0.14.11 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.11 - Egis Technology Inc.) Hidden
NEF Codec (x32 Version: 1.00.0000 - Nikon)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Norton Online Backup (x32 Version: 2.1.17869 - Symantec Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden
NVIDIA Grafiktreiber 268.00 (Version: 268.00 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.39.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.0.21 (Version: 1.0.21 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Systemsteuerung 268.00 (Version: 268.00 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.0.21 - NVIDIA Corporation) Hidden
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PRE11 STI 64Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PSE11 STI Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Ravensburger tiptoi (x32 Version: - )
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6329 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden
Samsung AllShare (x32 Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)
Samsung AllShare (x32 Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (x32 Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Story Album Viewer (x32 Version: 1.0.0.13052_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13052_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.24.0 - SAMSUNG Electronics Co., Ltd.)
Shredder (Version: 2.0.8.7 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.7 - Egis Technology Inc.) Hidden
Skype™ 5.10 (x32 Version: 5.10.116 - Skype Technologies S.A.)
Sprill and Ritchie (x32 Version: - Oberon Media)
Synaptics Pointing Device Driver (Version: 15.1.6.0 - Synaptics Incorporated)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.0.82.0 - Intel)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Urruneko konexioetarako Windows Live Mesh ActiveX kontrola (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Welcome Center (x32 Version: 1.02.3103 - Acer Incorporated)
Windows Live Argazki Galeria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
World of Goo (x32 Version: - Oberon Media)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ตัวควบคุม ActiveX ใน Windows Live Mesh สำหรับการเชื่อมต่อระยะไกล (ไทย) (x32 Version: 15.4.5722.2 - Microsoft Corporation)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2 - Microsoft Corporation)
==================== Restore Points =========================
15-01-2014 19:43:06 Windows Update
15-01-2014 23:40:00 Windows Update
16-01-2014 22:45:38 Removed Saal Design Software
16-01-2014 22:46:24 Removed Saal Design Software
17-01-2014 10:25:54 Avira EU-Cleaner - 17.01.2014 11:25
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {068BDF34-B82F-43CC-ACC8-F8BCAA71131F} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-02-22] (CyberLink Corp.)
Task: {58526065-6FE3-45B8-BDA7-3929B1FB8398} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-05-20] (Acer Incorporated)
Task: {7596B756-74B5-49A6-BCA6-AACD650E0652} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {89826975-1011-4063-BBC4-D35CBED82955} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-05-20] (CyberLink)
Task: {8E8B587D-B8F0-4A54-B231-C26F2D11D7B5} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2012-11-09] ()
Task: {953C64FD-ADA3-4B9E-B75A-317FB33C93D0} - System32\Tasks\AdobeAAMUpdater-1.0-Janet-PC-Janet => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16] (Adobe Systems Incorporated)
Task: {DFF6C5EE-8871-4704-8144-40C966C8D17F} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SelfUpdater\SoftwareUpdater.Ui.exe
Task: {E1484A8F-54F6-4DA8-A9D3-B2EE957B6CB0} - System32\Tasks\Software Updater => C:\Program Files (x86)\SelfUpdater\SoftwareUpdater.Bootstrapper.exe
Task: {F0C0F1B6-5B71-44D8-91EA-60BB86CB3D98} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-01-15 23:21 - 2013-08-23 13:36 - 00721263 _____ () C:\Windows\SysWOW64\AiCM64.dll
2011-06-08 08:30 - 2011-04-15 18:16 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-23 17:09 - 2013-02-23 16:59 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-03-09 18:13 - 2011-03-09 18:13 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-03-09 18:12 - 2011-03-09 18:12 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-03-09 18:12 - 2011-03-09 18:12 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2011-05-20 11:13 - 2011-05-20 11:13 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-08-18 17:53 - 2013-08-18 17:53 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\cd9a4b4dbc1a4b564ebed696e18cadb6\IsdiInterop.ni.dll
2011-06-08 07:52 - 2010-09-14 02:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 01135616 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMSWrap.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00656896 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ContentDirectoryPresenter.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00105472 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMCDP.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00098816 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\FolderCDP.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00077312 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MetadataFramework.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00520234 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\sqlite3.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00450560 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MoodExtractor.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 05717504 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMImgExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00029184 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AutoChaptering.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00147456 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexpat.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoThumb.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 04671488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avcodec-52.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00070656 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avutil-50.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00686080 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avformat-52.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00152064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\swscale-0.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00027648 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AudioExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00063488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ID3Driver.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00366592 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\tag.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00289792 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libThumbnail.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00023040 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RichInfoDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ThumbnailMaker.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00133120 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoMetadataDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00290304 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libKeyFrame.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\SECMetaDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ImageExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\photoDriver.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00399826 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexif-12.dll.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00013824 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\TextExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00031232 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\Autobackup.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00054784 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RosettaAllShare.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00044032 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\us.dll
2013-12-26 21:05 - 2013-12-26 21:05 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-10 20:12 - 2013-12-10 20:12 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:C46995DA
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/17/2014 06:10:03 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/17/2014 08:14:32 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error: (01/17/2014 07:24:03 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/17/2014 00:07:39 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/16/2014 09:13:16 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error: (01/16/2014 09:13:16 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error: (01/16/2014 09:13:16 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error: (01/16/2014 04:43:42 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/15/2014 10:50:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AVSVideoConverter.exe, Version: 8.1.2.510, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x18b4
Startzeit der fehlerhaften Anwendung: 0xAVSVideoConverter.exe0
Pfad der fehlerhaften Anwendung: AVSVideoConverter.exe1
Pfad des fehlerhaften Moduls: AVSVideoConverter.exe2
Berichtskennung: AVSVideoConverter.exe3
Error: (01/15/2014 09:32:36 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
System errors:
=============
Error: (01/17/2014 09:30:35 PM) (Source: DCOM) (User: Janet-PC)
Description: AnwendungsspezifischLokalAktivierung{D3DCB472-7261-43CE-924B-0704BD730D5F}{D3DCB472-7261-43CE-924B-0704BD730D5F}Janet-PCJanetS-1-5-21-3017719555-1145446499-239650940-1001LocalHost (unter Verwendung von LRPC)
Error: (01/17/2014 09:30:35 PM) (Source: DCOM) (User: Janet-PC)
Description: AnwendungsspezifischLokalAktivierung{145B4335-FE2A-4927-A040-7C35AD3180EF}{145B4335-FE2A-4927-A040-7C35AD3180EF}Janet-PCJanetS-1-5-21-3017719555-1145446499-239650940-1001LocalHost (unter Verwendung von LRPC)
Error: (01/17/2014 09:16:35 PM) (Source: DCOM) (User: Janet-PC)
Description: AnwendungsspezifischLokalAktivierung{D3DCB472-7261-43CE-924B-0704BD730D5F}{D3DCB472-7261-43CE-924B-0704BD730D5F}Janet-PCJanetS-1-5-21-3017719555-1145446499-239650940-1001LocalHost (unter Verwendung von LRPC)
Error: (01/17/2014 09:16:35 PM) (Source: DCOM) (User: Janet-PC)
Description: AnwendungsspezifischLokalAktivierung{145B4335-FE2A-4927-A040-7C35AD3180EF}{145B4335-FE2A-4927-A040-7C35AD3180EF}Janet-PCJanetS-1-5-21-3017719555-1145446499-239650940-1001LocalHost (unter Verwendung von LRPC)
Error: (01/17/2014 08:26:41 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{1233AE2F-B7C9-4383-8965-996EB12509E0}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.
Error: (01/17/2014 06:33:14 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.165.2095.0)
Error: (01/17/2014 06:21:36 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error: (01/17/2014 06:16:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Samsung AllShare PC" wurde nicht richtig gestartet.
Error: (01/17/2014 06:10:26 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (01/17/2014 07:25:32 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (01/17/2014 06:10:03 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/17/2014 08:14:32 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Janet\Downloads\Programme\SoftonicDownloader_fuer_4free-video-converter.exe
Error: (01/17/2014 07:24:03 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/17/2014 00:07:39 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/16/2014 09:13:16 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Janet\Documents\PW\SoftonicDownloader_fuer_minisebran.exe
Error: (01/16/2014 09:13:16 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Janet\Documents\PW\SoftonicDownloader_fuer_pysycache.exe
Error: (01/16/2014 09:13:16 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Janet\Documents\PW\SoftonicDownloader_fuer_santa-claus-in-trouble.exe
Error: (01/16/2014 04:43:42 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/15/2014 10:50:16 PM) (Source: Application Error)(User: )
Description: AVSVideoConverter.exe8.1.2.51000000000unknown0.0.0.000000000c00000050000000018b401cf12294d03a2b9C:\Program Files (x86)\AVS4YOU\AVSVideoConverter\AVSVideoConverter.exeunknown04804823-7e2f-11e3-b259-b870f4a48311
Error: (01/15/2014 09:32:36 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Janet\Downloads\Programme\SoftonicDownloader_fuer_4free-video-converter.exe
CodeIntegrity Errors:
===================================
Date: 2013-07-11 11:33:34.955
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:34.907
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:32.631
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:32.582
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:30.309
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:30.261
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:27.863
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:27.813
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:25.734
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-11 11:33:25.684
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
|
|
18.01.2014, 06:51
| #2 | |
| /// the machine /// TB-Ausbilder    | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? hi,
__________________Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
18.01.2014, 18:33
| #3 |
| | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Ich habe ComboFix durchlaufen lassen. Zum Neustart wurde ich nicht aufgefordert.
__________________Hier das Ergebnis: Code:
ATTFilter ComboFix 14-01-16.03 - Janet 18.01.2014 15:15:09.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8044.5160 [GMT 1:00]
ausgeführt von:: c:\users\Janet\Downloads\Programme\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\users\Public\Documents\NTILiveUpdateV9.dll
c:\users\Public\Documents\NTIMMV9Acer.dll
c:\users\Public\Documents\NTIMMV9REGET.dll
c:\windows\wininit.ini
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-12-18 bis 2014-01-18 ))))))))))))))))))))))))))))))
.
.
2014-01-18 14:23 . 2014-01-18 14:23 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-01-18 14:23 . 2014-01-18 14:23 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-18 14:17 . 2014-01-18 14:17 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B220F0FE-57A1-437C-81CF-F6F9E71BE3ED}\offreg.dll
2014-01-17 20:51 . 2014-01-17 20:51 -------- d-----w- C:\FRST
2014-01-17 20:19 . 2014-01-17 22:23 -------- d-----w- C:\LogS
2014-01-17 17:47 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B220F0FE-57A1-437C-81CF-F6F9E71BE3ED}\mpengine.dll
2014-01-16 15:55 . 2014-01-16 19:46 -------- d-----w- c:\users\Janet\Eigene DVD
2014-01-15 22:22 . 2014-01-15 22:22 -------- d-----w- c:\users\Janet\AppData\Roaming\Aimersoft Video Converter Ultimate
2014-01-15 22:21 . 2014-01-15 22:21 -------- d-----w- c:\users\Janet\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-01-15 19:49 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-15 19:49 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-15 19:49 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-15 19:49 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-15 19:49 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-15 19:49 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-15 19:49 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-15 19:49 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-01-15 19:49 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2014-01-14 23:21 . 2011-09-22 18:55 974848 ----a-w- c:\windows\SysWow64\mfc70.dll
2014-01-14 23:21 . 2011-09-22 18:55 487424 ----a-w- c:\windows\SysWow64\msvcp70.dll
2014-01-14 23:11 . 2014-01-14 23:11 -------- d-----w- c:\users\Janet\AppData\Roaming\7168
2014-01-14 23:04 . 2014-01-14 23:04 -------- d-----w- c:\programdata\SlySoft
2014-01-14 23:04 . 2014-01-14 23:04 -------- d-----w- c:\program files (x86)\SlySoft
2014-01-14 21:40 . 2014-01-16 20:20 -------- d-----w- c:\program files (x86)\DVDFab 9
2014-01-14 21:39 . 2014-01-14 21:39 -------- d-----w- c:\users\Janet\AppData\Local\Programs
2014-01-14 21:03 . 2014-01-14 21:05 -------- d-----w- c:\programdata\DVD Shrink
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-15 23:40 . 2011-09-17 18:34 86054176 ----a-w- c:\windows\system32\MRT.exe
2014-01-07 19:17 . 2011-09-15 09:57 893552 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2014-01-07 19:17 . 2011-09-15 09:57 42168 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-12-18 19:45 . 2013-05-07 18:49 84720 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-12-18 19:45 . 2013-03-30 12:39 131576 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-12-18 19:45 . 2013-03-30 12:39 108440 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-12-10 19:12 . 2012-05-16 17:29 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-10 19:12 . 2011-09-21 10:12 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-02 20:00 . 2013-03-30 12:39 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2013-11-26 21:09 . 2013-11-26 21:09 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-26 21:09 . 2013-11-26 21:09 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-11-26 21:09 . 2013-11-26 21:09 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-26 21:09 . 2013-11-26 21:09 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-11-26 21:09 . 2013-11-26 21:09 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-11-26 21:09 . 2013-11-26 21:09 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-11-26 21:09 . 2013-11-26 21:09 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-11-26 21:09 . 2013-11-26 21:09 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-11-26 21:09 . 2013-11-26 21:09 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-11-26 21:09 . 2013-11-26 21:09 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-26 21:09 . 2013-11-26 21:09 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-11-26 21:09 . 2013-11-26 21:09 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-11-26 21:09 . 2013-11-26 21:09 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-11-26 21:09 . 2013-11-26 21:09 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-11-26 21:09 . 2013-11-26 21:09 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-11-26 21:09 . 2013-11-26 21:09 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-11-26 21:09 . 2013-11-26 21:09 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-11-26 21:09 . 2013-11-26 21:09 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-11-26 21:09 . 2013-11-26 21:09 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-26 21:09 . 2013-11-26 21:09 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-11-26 21:09 . 2013-11-26 21:09 247808 ----a-w- c:\windows\system32\msls31.dll
2013-11-26 21:09 . 2013-11-26 21:09 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-11-26 21:09 . 2013-11-26 21:09 195584 ----a-w- c:\windows\system32\msrating.dll
2013-11-26 21:09 . 2013-11-26 21:09 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-11-26 21:09 . 2013-11-26 21:09 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-11-26 21:09 . 2013-11-26 21:09 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-11-26 21:09 . 2013-11-26 21:09 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-11-26 21:09 . 2013-11-26 21:09 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-11-26 21:09 . 2013-11-26 21:09 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-11-26 21:09 . 2013-11-26 21:09 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-11-26 21:09 . 2013-11-26 21:09 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-11-26 21:09 . 2013-11-26 21:09 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-11-26 21:09 . 2013-11-26 21:09 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-11-26 21:09 . 2013-11-26 21:09 81408 ----a-w- c:\windows\system32\icardie.dll
2013-11-26 21:09 . 2013-11-26 21:09 774144 ----a-w- c:\windows\system32\jscript.dll
2013-11-26 21:09 . 2013-11-26 21:09 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-11-26 21:09 . 2013-11-26 21:09 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-11-26 21:09 . 2013-11-26 21:09 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-11-26 21:09 . 2013-11-26 21:09 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-11-26 21:09 . 2013-11-26 21:09 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-11-26 21:09 . 2013-11-26 21:09 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-11-26 21:09 . 2013-11-26 21:09 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-11-26 21:09 . 2013-11-26 21:09 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-11-26 21:09 . 2013-11-26 21:09 413696 ----a-w- c:\windows\system32\html.iec
2013-11-26 21:09 . 2013-11-26 21:09 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-26 21:09 . 2013-11-26 21:09 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-11-26 21:09 . 2013-11-26 21:09 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-11-26 21:09 . 2013-11-26 21:09 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-11-26 21:09 . 2013-11-26 21:09 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-11-26 21:09 . 2013-11-26 21:09 235520 ----a-w- c:\windows\system32\url.dll
2013-11-26 21:09 . 2013-11-26 21:09 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-11-26 21:09 . 2013-11-26 21:09 147968 ----a-w- c:\windows\system32\occache.dll
2013-11-26 21:09 . 2013-11-26 21:09 143872 ----a-w- c:\windows\system32\wextract.exe
2013-11-26 21:09 . 2013-11-26 21:09 13824 ----a-w- c:\windows\system32\mshta.exe
2013-11-26 21:09 . 2013-11-26 21:09 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-11-26 21:09 . 2013-11-26 21:09 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-11-26 21:09 . 2013-11-26 21:09 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-11-26 21:09 . 2013-11-26 21:09 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-11-26 21:09 . 2013-11-26 21:09 101376 ----a-w- c:\windows\system32\inseng.dll
2013-11-26 14:46 . 2013-11-26 14:46 138152 ----a-w- c:\windows\SysWow64\drivers\AnyDVD.sys
2013-11-26 14:46 . 2013-11-26 14:46 138152 ----a-w- c:\windows\system32\drivers\AnyDVD.sys
2013-11-26 11:54 . 2013-12-15 20:02 23183360 ----a-w- c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-15 20:02 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-15 20:02 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-15 20:02 66048 ----a-w- c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-15 20:02 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-15 20:02 2764288 ----a-w- c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-15 20:02 53760 ----a-w- c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-15 20:02 33792 ----a-w- c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-15 20:02 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-15 20:02 574976 ----a-w- c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-15 20:02 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-15 20:02 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-15 20:02 708608 ----a-w- c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-15 20:02 218624 ----a-w- c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-15 20:02 5769216 ----a-w- c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-15 20:02 553472 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-15 20:02 4243968 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-15 20:02 1995264 ----a-w- c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-15 20:02 12996608 ----a-w- c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-15 20:02 1928192 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-15 20:02 2334208 ----a-w- c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-15 20:02 1395200 ----a-w- c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-15 20:02 817664 ----a-w- c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-15 20:02 1820160 ----a-w- c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-12 20:27 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-12 20:27 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-19 02:33 . 2010-11-21 03:27 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-11-12 02:23 . 2013-12-12 20:27 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-12 02:07 . 2013-12-12 20:27 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-10-30 02:32 . 2013-12-12 20:27 335360 ----a-w- c:\windows\system32\msieftp.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2012-11-09 11:03 1521872 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-11-09 1521872]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2013-05-23 1561968]
"KiesAirMessage"="c:\program files (x86)\Samsung\Kies\KiesAirMessage.exe" [2013-05-22 578560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-09-14 283160]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-09-28 340336]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-09-17 407920]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-09-17 201584]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2013-05-08 41056]
"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-03-09 297280]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-03-14 1081424]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"Dolby Advanced Audio v2"="c:\dolby pcee4\pcee4.exe" [2011-02-03 506712]
"ArcadeMovieService"="c:\program files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" [2011-05-09 177448]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2011-09-08 888488]
"AllShareAgent"="c:\program files (x86)\Samsung\AllShare\AllShareAgent.exe" [2012-03-01 285072]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"CanonSolutionMenuEx"="c:\program files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" [2010-04-02 1185112]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2013-05-23 311152]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-18 684600]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-08-21 450560]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-08-29 1861968]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\SysWOW64\FsUsbExDisk.SYS;c:\windows\SysWOW64\FsUsbExDisk.SYS [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MHIKEY10;MHIKEY10;c:\windows\system32\Drivers\MHIKEY10x64.sys;c:\windows\SYSNATIVE\Drivers\MHIKEY10x64.sys [x]
R3 SimpleSlideShowServer;SimpleSlideShowServer;c:\program files (x86)\Samsung\AllShare\AllShareSlideShowService.exe;c:\program files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x]
S2 SamsungAllShareV2.0;Samsung AllShare PC;c:\program files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe;c:\program files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\drivers\b57xdbd.sys;c:\windows\SYSNATIVE\drivers\b57xdbd.sys [x]
S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\drivers\b57xdmp.sys;c:\windows\SYSNATIVE\drivers\b57xdmp.sys [x]
S3 bScsiMSa;bScsiMSa;c:\windows\system32\drivers\bScsiMSa.sys;c:\windows\SYSNATIVE\drivers\bScsiMSa.sys [x]
S3 bScsiSDa;bScsiSDa;c:\windows\system32\DRIVERS\bScsiSDa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiSDa.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-16 19:12]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-05-09 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-05-09 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-05-09 416024]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-03-10 11785832]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-03-09 2189416]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-01-20 615584]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-01-20 379552]
"Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-05-10 1831528]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2010-11-03 1580368]
"Corel Photo Downloader"="c:\program files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" [2007-08-28 531272]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-03-24 2726728]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://t-online.de/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Alles mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlall.htm
IE: Auswahl mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlselected.htm
IE: Datei mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dllink.htm
IE: Free YouTube Download - c:\users\Janet\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Videos mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.2.1
DPF: {3CA45906-EF10-4E4E-9BE4-B444D220FCB0} - hxxp://ua.foto.com/ImageUploader6.cab
FF - ProfilePath - c:\users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\0du26tms.Janet\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-Corel Photo Downloader - c:\program files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel PhotoDownloader.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Eye Candy 4000 - c:\progra~2\Corel\CORELP~1\EYECAN~1\UNWISE.EXE
AddRemove-EyeCandy5Textures - c:\progra~2\Corel\Eyecandy\Alien Skin\Eye Candy 5 Textures\UNWISE.EXE
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-01-18 15:26:08
ComboFix-quarantined-files.txt 2014-01-18 14:26
.
Vor Suchlauf: 15 Verzeichnis(se), 155.579.817.984 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 161.199.607.808 Bytes frei
.
- - End Of File - - 7C343321163FF854BD3E8EC6F33C5930
Meldung: Internet Explorer funktioniert nicht richtig Firefox hat keine Probleme. Was nun? |
|
19.01.2014, 10:29
| #4 |
| /// the machine /// TB-Ausbilder | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Rechner einfach einmal neu starten. Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
19.01.2014, 12:43
| #5 |
| | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert?Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.19.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Janet :: JANET-PC [Administrator] 19.01.2014 11:37:19 mbam-log-2014-01-19 (11-37-19).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 237964 Laufzeit: 8 Minute(n), 34 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Users\Janet\Downloads\SoftonicDownloader_fuer_free-download-manager.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.017 - Bericht erstellt am 19/01/2014 um 12:05:04
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Janet - JANET-PC
# Gestartet von : C:\Users\Janet\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\Ask.com
Ordner Gelöscht : C:\Program Files (x86)\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Ordner Gelöscht : C:\Users\Janet\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\Janet\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Janet\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\Janet\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\op3i11lg.default\Extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Datei Gelöscht : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater Ui
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_4free-video-converter_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_4free-video-converter_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_7-zip_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_7-zip_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKCU\Software\Ask.com
Schlüssel Gelöscht : HKCU\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\0du26tms.Janet\prefs.js ]
[ Datei : C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\op3i11lg.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [7847 octets] - [19/01/2014 11:59:06]
AdwCleaner[S0].txt - [7360 octets] - [19/01/2014 12:05:04]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7420 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by Janet on 19.01.2014 at 12:24:42,05
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
~~~ Files
Successfully deleted: [File] C:\Windows\syswow64\sho6F5.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoA1C4.tmp
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0011A606-0C34-426A-9146-183080D3C98B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{00B7A721-AEF4-495B-8503-5FDB17DC3CBE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{01017F7D-2ADE-457F-9087-FC80570D567E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{011973EC-F4D3-4454-A596-C4C5E3382FEB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0123DA34-340B-4ABD-8A51-4BC40C0A98B0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{01747E28-36B5-43A2-AF8C-001C28103C2F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{019E5C7D-626D-4E04-874A-E3DBA2823E7B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{020891A9-02CF-439C-B960-92CAB725525C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0253E47C-117B-4F43-939A-9C05C5F5060F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{025E42CC-2C7D-4A7F-A2D5-58F6C1B41F11}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{02753F95-914C-49EB-816D-51E9DE994504}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{02AEB9B0-B2BC-4EC6-BCD5-9432C8C11751}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{02F33CF2-64C7-420D-9775-14032FE64736}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0306C8A6-1E7B-4351-9BB4-16FEEB2315AA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{032D421A-880F-40C5-B042-A4286555112F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{03A92EF9-3747-453B-AFF9-8C7CF7CBD891}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{04693B89-0C67-4D4F-AB7C-EA2A4C7C2523}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{051F50C8-96A9-49A2-ACC7-44E64EA35E90}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{052EECFD-AE9A-4E2B-B9D7-72E6FF10F39C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{05D75ED8-B4D8-4F19-8418-5D0F29E4A136}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{05EFF087-89F4-45F4-8385-ED79829EAF39}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{061E1126-7F35-49AE-9BEA-1DFFD555A986}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{06432F36-30EA-421E-A637-8CCE95F064E9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{067D772F-A636-4288-B1A1-48F496A1E1CA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{06C9A5D6-6788-4180-9A14-FDA0422AEE00}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{06E1559A-E715-4462-B1CD-9F355C948F50}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{06E280EB-96BB-4C72-A383-DE5CCBCB0A04}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{07259D5E-90D7-419F-AE51-8C5D114EE0F6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{075D6D37-C403-4118-BA5E-799947201626}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0766A38E-77B2-4F49-9E26-17E555902DC0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{07BE10FB-FFF4-4D16-B535-81A498D8DB0B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0806B3B1-66E7-4297-947B-478DD50431C4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{08E9CB8D-F230-4468-8702-859F0839EDF4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{094BDD04-16F0-472F-9766-59F3612152F6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0963ECC0-A0BF-4704-BCB2-FC3EF330B546}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0983D737-D986-4742-A4AC-90FC5DE42172}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{098CB663-8336-4D26-B2A3-44767F3AFEAA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{09C190BB-5C1A-479A-91E2-B47673026AF6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{09CFDFF7-8A77-4F7D-8153-5966A794CBAD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0A13677A-B79D-49D5-943A-3F9F21F4673C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0A3FFF40-C17E-44CD-99F8-C2EA45673456}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0A6A3F0C-198A-4B12-A3E1-44B660A8C0CA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0AA8431C-92DA-4778-B764-E45B8AF5FDD9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0AAE28AE-F70A-4BAF-B86E-7BAD1B4A5E59}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0BC13AF8-8C2A-4F5D-BD2D-0D6AA2AB5691}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0BF1D249-B59D-4A77-8856-D5F6D354BFB9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0BF49374-9D10-4129-98C8-DDF95437EB54}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0C01FF05-FA00-4F35-B99A-FA9A6BD7CCE2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0C48CA35-9A60-41B2-8762-04D344E9BBAC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0C77DBA2-C8A4-410D-9247-E13A5AF13EE5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0C9D8547-F0D0-4BF0-BE6C-0FC1F3242B94}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0CCEE465-1114-456C-8EBB-E574453BCE3C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0CE81E8A-47FA-43CB-A3CB-63F6ED062D56}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0D370F27-5D0C-4A61-BCA3-74B199EF1B9D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0D7DE616-111E-4C18-BF42-8D6296BA289D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0DC79DB3-1A5D-4F37-8345-D5CD2E4A4113}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0E0FC107-4745-4C01-9420-67D657382E35}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0E549445-97ED-41D8-95A7-145F6B7FFEFB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0E7B8566-C31C-4ABF-8124-9C0C96D87699}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0ECFB2E0-9AF5-43B7-9F75-436436660AF8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0F196B9C-39F7-4AC2-938E-57ECC642D682}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0F330479-2B4C-42BC-9C99-0560B500DF69}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0FAA8B49-F664-4CC8-B1D6-3E27D2B97849}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0FBC619F-6AAF-4B79-85A9-A87724891A99}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{0FD7B97F-7FA1-4AA9-867A-C8479E975F7D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{104739AC-C2F5-4CA5-BB52-5CACF44E5ED4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{104CCC22-0F48-4416-96E9-DC1B88C2EA8F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{109AD494-96A5-4CD1-92E1-0A7A75214C63}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{10FEB35D-482D-413A-977B-26B413D783D4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{11351C45-C119-4D4F-BF3A-DD8513E96369}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{11380078-A77A-43C7-8076-D6025ED04443}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{11ED2AF6-69B4-4334-93F8-39E95B0BF976}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{122DF37C-27C9-4A1F-8C2F-06987354AC56}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1246A8A1-D540-474A-B670-92FCC7DEF98C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1254B31D-56C0-44D8-BA6A-5FAD05D70F6B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{12989E4D-CCFF-4FAA-BBA3-549556CF33CC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{12B6A2C5-27D9-42CA-AA45-B3E47FDE1C0A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{12DB25D5-C652-4877-AAA6-6F327BA68D84}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{13255794-B350-406D-8F28-50484F60817E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1330BC0D-A82A-4E5C-9434-C8FE8447BDA8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{133EF51D-F462-42DB-8580-7C692272372B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{134968AF-77E7-4785-B45D-CAB8D42AB21C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{138BE0EE-C2A6-4FC6-A4EF-9B3CCAFBD2EB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{138F97C9-63C1-4410-9366-6F99E47DC678}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{140B2DE6-E8C0-49ED-BD41-CB3BFDDB3870}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{14408E84-B4D2-4E67-8490-DD991C62085C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{147E8C95-6012-4241-A2F0-26DEB6082AD9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1481608E-1161-4483-BF70-0FAD4D2CD6BA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1562608B-073B-44C7-8E58-A96D5660D379}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1686E1DB-3FD3-4F67-8D23-FA253254E96B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{16C45279-5FEC-4140-8774-0E109B5E99EE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{16E70881-43DC-4E8D-ABF9-F0C6212D0CF6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1771504C-ACB3-4B50-AFD9-24A8949AECCB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1780E8EA-EDBB-446A-9343-0FA3CA467EB7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{17E31D22-3BB0-4635-98C5-8A84AEFBC000}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1801DAF4-BA2E-4071-804A-2D1100988EBA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{18956F4B-5C8A-4CB7-9178-BD654AC9D325}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{18EC2860-8354-4EDC-9AFE-8C368B3AE7D7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{192D5277-21CF-4C57-B9F1-5B0D368F466A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1A082346-F09B-4150-983A-A7D7A45A86CA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1A9CB4FD-094F-4AF5-9D0D-4CBEF508315F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1AAF0C54-2C84-4B46-8182-DCA30BEB0668}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1B98FC0E-A91D-42AA-94FC-B80389823CE2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1BAF8DC4-C7F3-4AD7-BCCE-C3E1036F6B2D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1C741C55-F1EB-4A58-9C7C-810F3270D7B0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1D88769A-8FB6-463C-AE12-E9E8FA97B06D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1D91C7BA-6713-425C-99D5-2FBCDA5850C0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1DC5B344-9CE4-434A-8987-6CEAD4904789}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1DCE7B97-775B-4D38-B4F3-51D5ED9C8915}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1DF15C48-3CAC-4C46-A723-E35DB824F5A6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1DF1CB16-577D-4795-8B99-2127231B2C1D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1E05857E-BC8D-4144-A5DF-4398C9E42DFE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1F176934-4A9C-417A-B116-2FB302D9E768}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{1FB046CB-08D7-4B36-884C-1519B9A71FAA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{20448046-5BCA-40CD-998C-2FA0F24C7486}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{207FFAED-3A90-499C-963D-C1C79A3B3588}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2104D500-D93A-45D6-8C7B-0FF7F12EE595}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2116DE8F-50C1-439C-BDC2-CCB2262319AC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{21586B29-982B-4263-B688-E6326ECA510E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{215FEFD6-864D-4270-9FAC-1EBB80D1E8EC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{21D75D79-7EE6-42F1-8F73-9A378E0DE603}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{21EBE1C7-8987-4879-86D9-1CB47023E52A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{226245B5-C9D7-478C-9AC8-5D8DB7F9F655}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{22921FC5-472E-41B9-A5AB-35CCAFCA7E9A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{229CB5C7-23C6-4C7F-B1E5-42F5872C9A50}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{23255AB1-DBDD-4D75-BD18-9428FCE45CC5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2347DBC2-33EF-4ECE-8894-62EC6925E738}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2350EC6D-9F1D-4D0E-9E51-63ADF23D88AA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2381F239-B979-45B2-8D09-09457DCAACC5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{23820EC4-80FA-4DB4-A548-306BED66CDAB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2394DB3B-2163-4537-940D-6B883FE6FB1A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{23A3A6E6-E49E-49D8-BD16-62A3CA4B354A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{23FA1342-ED23-4BFF-AC15-D6821BDB84DE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2420480F-AFA7-4F3D-BBB9-5A6916BEE170}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2630DD93-85A3-4693-ABA9-C33D9C1C3E47}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2646ED29-A6B1-47E6-9B0A-E5F59C10D5A3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{26664A4A-1506-4A36-B12B-F116AC939F09}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{26A1D990-7380-43E6-A743-A1435C9C89E6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{26D2EC4F-95AB-4730-A91F-6A8B075DCF0D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{26D8274E-C6E1-4826-9315-95259D8CF9DF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2733CCDD-E7AC-4831-83AC-3FD4B2516CCF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{27D1ED46-EF15-4EC4-829C-414DE47F2E87}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{28AF81CC-53B4-4DA4-B198-87BB6D406ECD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{28D58FCE-AB0E-4B83-B1B5-D05E106131D3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{28F5F4B9-D68E-4989-92B3-51F9686EC6AF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2A56949B-4AD6-43E3-A30A-05D896D9742F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2A9FC7B7-5CAF-4E2A-A21D-08640FAE179D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2B0E3662-651B-421C-A00D-2EF205F73216}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2BCECE8D-2DB9-4DBE-BCE6-B429B6730860}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2BE4B7BA-1AD1-46A4-B3F8-96DD241031D2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2C2C0367-3A79-4A8C-B67D-670882EB148F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2C550EFC-1EB7-4DE7-8684-1227EE87A558}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2C6196FE-90E7-45E7-8A71-14F9D88B4052}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2C633180-CE7F-40AE-BAB9-6F467B5C05F2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2C760909-BCD7-4413-A508-FF0D2A41AC41}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2CCFEEA3-E483-4874-9281-E6CE34F648FF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2D060BC4-3256-4C93-8F7E-C04E15FE8B68}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2D0D5EDD-B038-4ECF-BAC7-EC3CE58BEAAB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2D5375BC-5E06-4A56-8FFD-BA77E29F0E9C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2D8003FE-A669-44EB-8A02-7E5EA3C9ECA4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2D821F73-ADFD-4378-9C1F-1750B4BA9809}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2D9B14E5-01AD-489C-9685-1570A2D5D3AB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2DDC1ADC-D014-4867-8111-C227CF51E9BC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2E21042F-1A88-4713-A6AA-170B753C2552}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2E31978C-63ED-4EDB-9EDF-0B95BC7244F3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2E3BD6FF-447A-44CF-801D-6AB6BB79406A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2E41B0E6-D748-47C4-97B8-DD7586C6A7F4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2E4C2C9F-8867-4B38-8E47-15AAFCB29CCB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2F9AF3E6-D34B-4409-A06D-FD7A60569CB2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{2FFC9065-BA03-4D1F-871B-CA73B6C6C9D3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{30E16C04-71CF-444A-AE9B-209F6A6DE72B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{321146DF-BFF3-474D-8D04-2E840E1F0A05}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3256CD28-911B-498F-8CC1-39CE198310CB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3260B807-32F5-4C16-AD64-A4B7E8550880}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{32B47390-498B-47A6-B334-51E65C799C6E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{32F7D137-14A5-4673-B245-D2F9210014D7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{330B986D-D0B8-44EC-B2F1-B23049FAA7FE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{334CC952-B111-47B0-A59D-60FB697828FD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{33872D55-ABB5-4F30-9C51-F1BA3340FFEE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3427A38F-B3F0-4B54-8B12-49971790F298}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{34582427-9B12-44CD-AA42-D95F3168633A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{347D051D-50E6-4EFA-9962-A66CA0BAE45C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{34D6D4C2-135E-4173-84A5-23B5FBB3BA26}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3532AABB-610C-4731-8D4A-6EA44C655B3B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{35977FFA-4FCB-4228-801D-3D0345AB8541}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{35E8DB99-D0BC-4395-80C5-ADA0B559D901}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{36681D95-444D-4525-AD03-BFF308218CA5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3671BCD8-9F8C-437F-B85B-1F5219BC3BCE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{37066219-DC70-4518-A408-4529615D3286}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3726876E-BF93-4E47-9E44-E5F7AC0EE9BA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{37B38BA6-0D27-4FED-8C19-602464E5C4A6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{384B42F7-D6BC-4C66-AA82-7B2245725B8D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{38518CF8-2FA0-421A-8703-908B247EFD8B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{38A01F71-E222-4036-B52D-F67A5C877609}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3924177C-A365-4C09-972B-0AE0C9272F1B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3976BB27-51CE-4698-8931-DDCE92572E49}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{39B5FF2E-01DF-4C9F-91DA-25C29D655936}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{39BB1CD7-EA77-40AA-AAC8-84ED400AFDB6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3A1AAFD5-72AD-4EBC-B078-B5AC2F09D09C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3A455807-10D3-47B7-819A-9A81ECE75345}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3A5D7775-4A48-4388-B5B1-68D1EB0A8FC6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3B4D817D-F703-4194-AB1E-7D27898F793C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3B53E5F1-53C8-4658-B3A7-15B87608168B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3B6A5D96-0DA8-418D-B2CC-15EA024FFF9E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3BBE88F3-005E-42CE-9043-9340F71BB3FC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3BC21634-7707-473D-AB2E-13C854F97C8A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3BFC7553-EE5C-4117-8564-D1D3C767DD6D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3C1BFEB0-D033-4D4A-AAF8-9F3E868EF43A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3C697AA2-40F0-483A-9DA5-9208400DBE5D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3C6BE34F-A139-4EE7-B0EF-BB7C85E093F8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3C996BD9-78D5-4B2A-A46F-EE9ED1419569}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3CFA8CC9-9B70-4EBD-9155-45E501D0611D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3D696A64-69B4-4EAC-94C0-6E9A18362938}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3DD95C99-D094-4DE1-8B2F-0D56B6D9B085}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3E0EE561-AFFB-4056-9CEE-9CC9977552A7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3E8C5D76-4254-412D-9E05-C32EA5C18D6F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3EEBFFCC-C931-48CA-845E-50ED8BDA73F1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3F17A35E-2265-41BB-958B-43613F8FF46D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3F228F76-942B-430F-8149-33F2C0E0603B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3F27A53B-7181-49B0-B9B8-A69DED45CDAD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3FAC5BFB-9696-4AC2-942F-D79D5DEF6B1E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3FC00815-1257-4824-8978-1E8DA318015E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{3FD46145-6965-4927-B92A-984E221E0E22}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{401F4CE6-E7B2-4F85-BDF2-ACFCBD2D6187}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4025BCFE-C810-4139-A194-5BBFDCBA8A38}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4067BBDF-38BA-49D2-B707-E5CF150B3F92}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{406B6CA2-594D-4241-9C92-15C7F61000F0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{40F2D003-7DFD-4101-B427-08D9ECE67D30}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{410BDBFD-791C-4248-B66C-51E6E976EC8A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{41160E7F-48DF-418F-AB88-EBE64822CBDC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{413239E0-1D01-4853-A629-11F8E8A68BBF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{414F932F-7B3D-4807-A371-FAF479A17191}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{419F2446-BA7F-4C33-9D87-5F8041999F7B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{41F2E787-175B-4767-8500-26D5A43700B8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{425CB56A-C455-4EB6-B955-AFC744B587D7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4267841C-89A5-4ECA-87FA-244F6989FA57}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{427C9FCE-CBCE-4C9B-A9F6-176DD2875AE6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{430EB4B7-A68C-4E89-AEC1-64C70F759E0F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{43588441-00BA-47BA-849D-C074592F9887}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4403A5D6-7E5F-4795-AF3B-918EFE025AC9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{441B6EED-6FE6-4786-9A05-C4C131797EC3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{44D21046-20BD-47A7-9E37-FB018C01B465}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{454B02F2-E286-460B-AED7-E5A6DADC4505}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{45C31F7E-5EA1-4DEF-8AA7-2FDB9A094C2A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{45D2CD4E-F65C-4102-B5A2-C00CB30F0320}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{45D4FCFE-C6DD-455E-B654-C5611EC26D72}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{45F08BCD-BA20-4199-8458-3288071C0D45}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4618042D-C2B2-460D-86AF-555F3C2859DC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4638FA4E-2730-4A01-B5CE-D5A4F947CA06}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{46F443F0-653D-4DF1-ACD1-6BF9CF0131C3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{470E551E-C3AB-4B9A-B9DF-F195386C65D4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{475A089E-D3CA-4752-8EE1-8481A5FBAC4C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{47B1CF23-3E36-45D6-B30F-CB9F8C4E8597}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{47B687CD-1363-42C3-9800-481DE11B00DC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{48258655-5149-4519-AC24-CADF68F049D8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4864B50C-E9A5-4F43-9E8D-E99007070EA4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{48AD14AE-5C02-4016-8A3A-4A07E8195F3A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4906608F-2706-41A1-AA1D-9C864DAD03D2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{490C7828-07D0-4CAA-93AD-34B5282EDF34}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{491AED3B-E794-44C6-89F8-022145DA6D8E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4A8226DD-3C15-493A-938F-1F1757F50428}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4B1C422F-DB81-47EA-BB1D-66103A7C19BE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4B779ADA-F1B3-48DB-841A-B27B2A685AF3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4B9A5079-6CB7-4761-9ECE-DED016AF27EC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4BE64AB6-64D1-4B41-9212-51E552C252DB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4BE82FA3-9C2F-4D69-A63C-9F0AE8199CE4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4C2600D9-EBD7-4DB6-A984-ACBF30B009E3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4C2681A5-9550-4948-84E9-D2FF03784F0C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4C67E66F-CEC8-4615-B68C-F8006EADECB2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4CA9F788-0FFB-43C2-8D2D-FFCDF2FB9BA0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4D3C915A-5708-445F-8043-2BF3287785CA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4D50638B-4CCE-4DA5-AC39-CA982738B315}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4D733001-C02D-41C8-AF62-FBDC2FD7C124}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4F63BBCF-70B3-42DC-AF43-600F74D9ED12}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{4F9A233A-5031-4C5E-9D3B-94E2F17C1E08}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{501B813E-EBE5-4904-B925-D4085908D98D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5076318D-8233-48F2-AC84-72185D97AD22}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5091040A-C332-425E-AAF8-C5B2BAB11FE4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{50EFFF00-3B50-4FA7-85E7-3461E9568322}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{511E0329-7BD3-4C77-B856-1BCFB16FD192}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{520B75C7-D870-42FA-9D96-83A30A738694}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{52A3A704-3148-4648-A233-2A2BC3FEC606}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{52B83D32-DAC5-4A5C-85E3-3AA574E25F70}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{52D3692E-83A9-4631-B13A-78086BA0DBA0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{52E9C7AE-F2D5-44AF-9145-989D5E12E0FE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{530828BA-0F7F-4880-9463-79DF7B623A91}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{53869C34-5420-4F3A-833E-89AA75C2DB3C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{53AE5BF1-C500-4F31-8351-31D6164838E9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{54278E2A-B329-499E-A2E3-E697984098DC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5441B2BF-E284-45F4-AA78-7590272F8A6F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5484FAB0-E164-48B5-AA86-DF90DF369454}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{54D2049A-BDA0-4742-A42F-D6B24D6C387A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{54EF82A4-2919-4C2C-96D6-EF5268CD5F6A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{54F178E9-5124-4F98-9F7D-E31E790CD5B8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{550F7322-C697-4E98-B2CD-DE34CC38FCC1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{554D19B0-C8E3-4683-BD2D-B7D5F26478C0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{55656320-D5C5-4EE9-9C61-6ACA072DF488}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{56842503-198C-43D6-BC3F-09D0168083AF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{56B227C0-0E72-46DB-82A8-368B66B9ED81}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{56C0CAC5-BC9B-48E6-981F-DAAC482C01AC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{56D74ABA-3CE6-49B2-9504-634608C94681}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{56F97506-7B7D-4453-85C7-941697A20A91}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{570076C4-9978-49EB-94CE-6E77174D4565}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5717B9D7-A348-465A-A8D5-D5C16F66A112}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{57419AC8-7161-42CD-9AFA-469FBED4312C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{57BE3048-9837-424D-A0FC-715100574050}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{585399AE-06F1-41EB-88C7-E5872FBF8943}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{58B7F3C4-0783-4EC5-BF5D-6E8C579A1AFB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{58CA6783-9407-4602-8D8B-79BDD3382732}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5A5E664B-2C8F-4B81-B053-9BC56EBDFACB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5A642748-A297-4B73-B849-7379D941CF6A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5B09BAA0-91F3-4F71-937B-46C8AD8850FB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5B80D3B1-6265-4E2E-954D-5FF584CF09EC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5CC3EDB9-C692-4C7C-B301-4D262C87D163}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5D04747A-0774-4ED7-A8DA-E13B3E893EAD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5D3F13EE-925F-4FCF-9D1B-6BB8B1DD13D5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5D49AF23-5622-402A-B20F-967920FE13CA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5DE02241-4E39-4CCA-A1DF-D610C21E8E76}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5E1C9688-F33A-4792-9556-AC76AF15D370}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5EE48D21-D11C-40C0-8486-074919B7F5F3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5EEE6FA0-AC11-4992-906F-B38767703094}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5FA3CC96-5E67-407C-962A-EAED2D729711}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{5FE5B051-B434-4A00-B071-57105850AC82}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{60A78D7D-8521-4142-8E12-04A5516AD805}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{616E5612-E6D7-42B7-97C1-95C98A83FF63}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6187B567-6601-43F3-BE50-C1F19B2322AD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6197E96A-53FA-422E-8133-BBB40C67E671}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{620C9EB6-0A90-424D-B80F-F34776B2B91C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{62A521E0-FBDA-4F9F-A625-CDEC57B34AF3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{62D1AA6D-B21D-457A-959F-8E635D1FD6BC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{62E7EF6C-1515-4375-A76E-3FF6BF3BAE03}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{633D1060-62F3-47A6-AFFD-F04335FF030C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6345A933-6D77-4472-A486-36D58DE95730}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6354ED36-85B3-43C4-A474-D4F91F01A8B2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{63E8A2EC-C831-4F38-B3FE-0FFCEE2536DA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{643D5DEF-0D2D-4748-83BF-9473C0A11358}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{64545A61-A9C6-42C0-BF82-6A56E0E1B393}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{64934801-97CD-47E9-B549-5274E2CE66FF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{65165E4E-4BAF-4380-81FD-1DD301484624}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6555FD15-0847-4921-A704-CC64B132A945}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{65625688-E228-4FEE-8364-A0538EB84C5C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6596EE6F-9AA3-4078-8DFD-F5D6C7BC5F39}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{65F4F4F5-1EE3-4F66-A3EC-E04DCB312275}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{663AD8BE-E822-4E2C-855F-D1398151F79C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{665AA405-B59B-4634-911C-70D2E933B413}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{66C686A5-D318-4636-B522-F9DE6AE06B05}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{66E6656F-0BF8-4FDA-95F0-98DD0B5AFFB3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{67209A81-C959-4EC2-BBC1-D2006E0D349D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{67914AD0-5D1B-406E-B777-C4B05E225001}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{67C2564C-0B3B-4728-AEB6-9838CA464E26}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{67DAF7F3-9728-4ABC-8662-475863B6EE6A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{689FC3DA-B07D-4E3F-8141-E4032A07A883}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{69005946-EBD5-402B-B319-2A4827D3B378}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{690BD2B3-4284-4AC6-A703-33435545D515}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{69577A34-7313-4828-B4E2-14E3A91E4508}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{69B12DCE-FB95-4699-B463-8613622D4DA5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{69D1CAD3-577C-49A0-A979-EBF8C918FCD3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6A0D0570-6C5A-4942-9F8A-A819EDDBF25A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6A1C30EA-E4B0-41C5-A33C-E05B01998D14}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6A1F2559-3DC7-4543-9B95-8F8F1774CB47}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6A9EC2F9-8D47-4CE3-81CB-E08B0D95C76C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6AEFCD69-1420-4A3A-8602-CAB1DD0A2BFB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6B88FC01-5652-4280-BF76-D5B6A38FC643}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6BA15CE0-FB70-467B-ABF7-0B40BE495DE8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6BE60A5F-36BA-4AD3-B66B-267AE38F5962}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6CCD19FD-64C2-4F69-ABAA-E01D868E4D6F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6CFFCCDF-68A8-4660-9FFC-6450DB3BE5B4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6D1AC277-C0AA-483B-A964-E5AAAE2B2DBE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6DB24AA6-4A52-4A4D-A516-AD25C9EEBB49}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6DF02C5F-0DDD-4BF6-8FE9-AEF5FC9C570B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6E216F2A-5D7D-46FF-B337-B9CD25F6312D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6E57A96B-6221-4BB9-8746-F999BBC51B8D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6F2D0C11-E708-434C-A227-19A93574D7B0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6F34B955-522A-4FDB-80B2-08EA1DC2FCAA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{6F5BF6E5-3CCE-450C-8562-87CA6329136C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{705CF4BF-F1F4-438F-AAE9-178D5F676D3B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{70BF6755-4ECC-4EE0-B73C-07137A723B1F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{71420A30-D47D-4B7B-A5C4-D8637AFB70B7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7155FAB4-6424-413A-95A0-98EC137514CF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{71EA54F9-80FF-444B-971F-0DCBDD339658}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{71FEE4EF-ED89-4E25-B5C6-3D4803B9E85E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{722263C5-29D0-49E1-9F69-05FB4ECF97A8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{72638AC4-2609-4C23-AE3B-84C7CB5E5F3D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{733CCA7B-6C09-4EF1-A188-A4B5F020FC30}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{73A9B856-9864-43AE-A4FD-BB795E52BD2D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{73AEA843-CFA9-4A33-9004-5198C3ABF849}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{73CFC275-DDEE-4720-B171-0D3937496A98}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{73D9A4ED-C354-4665-92E3-1F3C337A16F9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{73F8481D-BE4E-4D3D-AAF2-B71075ED54D7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{74258672-0095-4D7D-AF2E-E3F3AEE9091B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{747916BD-D5E8-4AC5-A1A2-C81A8DA06A85}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{74D57759-D554-4F8C-833F-5E2429ED4C56}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{74EC14A0-8621-47B2-B959-B4C95E1E145E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{750D51D2-13ED-497D-B550-ABC335CA3D79}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{754105DD-CD58-4459-97B6-0C2F3456B857}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{75FE184D-1E65-45A9-813B-C723D505EEF4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7601BD1F-411A-42BA-BABA-6456C00FF9E8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{761ADC3D-50DC-4404-917E-034BE606C9BB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7632BF40-3FCE-48CC-AB73-897C13E2F4B5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{769212A1-BF3E-43FF-9E19-53FC60DA089C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{76D1738D-F23C-4D2C-9A5F-8FDFD15DF3B8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{77264EE9-1FA1-4F13-B3A0-A830EC96C55F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{779648A6-635E-4AE7-AA0C-B233B0E34ED7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{77CDA241-C430-45F0-A708-9134661170B9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7830CE7B-1148-43B0-A489-9B851A1F01A7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{78C13373-50A4-4BBD-A236-162906ED632A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{78D43677-1DD0-4B8B-B618-68485A18D19C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{78E82A5B-8401-4ED4-898D-AA6E12F2364A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{790E300C-5998-4C03-89BB-D7B75C111A76}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{791EE139-FBCA-430E-9BA0-65CBE062AA05}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{79440CBF-0D01-454E-9432-4EBA398C006E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{795B34ED-F5B8-4441-A826-EF9829D6C525}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{799BEDEA-2802-497A-8178-70E77CD8C8BD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{79A9BB27-1026-431D-9476-FBC6A020D6DB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{79F5C0A1-5D10-4ADC-BCF4-EE0D456D453E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7A14019C-577B-424B-87FB-53293E29F5E7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7A387DD2-D406-404A-9925-34477C9FD11B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7A3E08F8-28C5-4B1F-815C-C05EB46899BC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7A5CB392-E47C-496F-995D-37BB14A6B2B0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7AF43742-F0AB-46AC-889A-415B3DDDA5E1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7B6AA97A-7C8E-4593-9157-B1F8F5FF67A7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7B8C245D-9D27-43A9-9318-0564DE300B4F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7BCA5420-600E-4CDB-81F2-604AA9DA6C4D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7CAC5D51-BE76-4106-A9DC-B496AA39B954}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7CB6A7F8-9EC8-4B5D-81D1-0FFDF0D02F1D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7CD42BCD-A532-45A1-BC94-6E411643589B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7CDF7C33-80B3-4400-A159-4F8B683C4937}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7CEA00ED-D2E4-4F94-A073-CAB56D1AB503}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7D215263-0272-4E1F-B4B0-379777506599}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7D6FC8AD-CF91-4499-97A2-BF748E29EE76}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7DF2258C-AEA3-4025-9B47-42B51A816B8D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7F9B552E-337D-4537-8B5F-F0E719DA11B5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7FE80FEF-1323-459F-81E6-6C82B30125F3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{7FF7A8E3-BC1F-4266-93A7-F774B3E4D345}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{800E1EAF-1D02-47EB-B60D-45597653763E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{805BCFA7-869A-41B7-87CC-38119290A714}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{80A8F541-AD26-4C50-923D-0ABF5690DF5C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{80AE7C08-D520-43E7-9C1F-3C9AA36CDC3A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{80F8ACF6-3757-47C3-93AF-03F7C8331904}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{80FF7092-481A-48A1-8B34-81C2A1CAB242}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{81B152F7-33F0-4FAE-A710-6DE1346F96D7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{81F771BE-3CC0-417F-B3D9-336C800926E2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{82499F4E-7F4F-4098-8950-54CC22CA8D60}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8253E21A-50B0-457A-91B2-2C7E1E483F9B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{827F2D37-413C-49A6-8F0E-690AE2273AE9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{830C6968-1617-42A5-A2EC-7B23E7DDD19A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{836BC35B-C346-42C3-97A4-CADCC7A74B35}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{83E97CE5-9DB4-41DA-A1E9-8539B13B566F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{84B5FD07-0CF1-4F51-BF98-C36C8144FA0E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8636CB82-5A2C-4145-BB86-027D69DE0951}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{86B60300-440E-420C-8C9C-AF4EA598023C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{86DC0FA8-F11D-4261-B008-1E3B902526D6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{881F3421-C3D2-429C-AEE5-CEB006595EFC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{88B17834-099B-4284-A864-CB0592136F3C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{88D66E0D-E150-4128-B80F-2107A92901B4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{892A9733-8B78-40C8-9FF9-91C1FCCC6914}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{893034E0-FED4-41C3-A6E4-D710728D74A1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{893BD3BE-B6D9-4029-BF20-E298BA7CDFFB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{895D978F-F82D-4BF5-B3A9-A188D01055B6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{89DE4AC3-CBE4-4840-9DEB-739B898BF1B0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8A031D3A-D189-4775-ABDA-ADD3EE09D275}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8A6D1AA1-8E3E-4B25-B4DA-408EC310A71E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8AE95681-6DEB-4340-8902-0CF4AC2E41AD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8B9D7158-D180-4F26-85EF-F111118296E4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8BE0AE71-27C6-44D2-B303-08CA230C1F13}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8D539C53-3A8C-40AD-9D23-92FB042A9B2C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8E345790-8FE1-4D95-AA22-219D2A6BC220}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8F0384DE-9FD3-41EE-B162-C05051BD32B9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8F0C8BD4-EBE1-46F8-857E-1DC346C64DBF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8F89C284-4DC9-4676-944D-53245633D6F6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8FDF7AE9-17E9-4177-B46D-9E5E76FE9F64}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{8FE88F61-F42F-4C09-982B-55C0F8FCD434}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{90082F48-199B-4F9D-92EC-D85B35E41953}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9009B1E8-46BE-4602-B500-976DA4696369}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{90135389-0583-4D9F-8C24-633E116C5567}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{90752203-73A5-4A83-9C6C-4C8FF3185E61}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{90763FAC-8296-40AA-86D3-BE10FB84D18E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{907FA196-CDC8-4A0F-8CC8-03A1550FDED5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{90BA552B-4E30-45C8-BF92-2A911064DADE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{90D9E01E-79C8-4E74-9BD5-775661491360}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9107EB78-71C3-4ED5-B126-50469A5B5CE8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{912A93DA-4006-4608-A515-3FD57F798B33}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{913075BB-6DA6-46E9-ACA0-81F259C76B5F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9154FBFC-6FA9-4A32-94EC-784CAE926C82}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{91D23EAD-2313-4C0B-BB9C-4332226F287B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9225306F-FC57-4174-BA95-7EE85D400113}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{92552C3D-CEBF-42CC-9223-0E0EE6C22D4F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{92618971-794B-4C98-BC3A-F0998C73CB9C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{928C6934-D01F-4849-99CE-F368803B5F5B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{92AED471-2F3C-4F1E-BC23-99A5C17C3CCB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{934D3B2D-666A-4D6D-A771-C91E50257D6C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9410FEFA-0108-4610-80BE-056827604385}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{94BFAE80-A7EF-4B8A-B61C-910B6A6A5D6E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{94CE6895-8DBC-4EF7-9229-846E62EF1C9F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{94DF67EF-5F1B-4931-9889-970E29509C82}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{95023F0F-5A14-418B-A7F5-54B89BF527D3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{95420A35-DCCE-4F89-9A68-A1271A85D76A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{954B246A-BDA6-4485-B237-F9F0B66FD35A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{959544AE-0B42-419C-AC57-AEB0989480E3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{959E36FA-ECCF-4502-9C24-E40D5C0C4A64}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9627DA4A-2801-401B-9876-74C9FC329144}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9636363F-A96F-41C8-8BE5-5108A755F5BC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9639E8F8-13D1-412C-8947-E03D339883DD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{96ED6B80-D154-464F-A385-A4859DD0F9A0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{97A2ABAE-AFBE-46E2-8663-12F00097D38F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{97AB85CE-0078-43BA-9D10-7E1C93C8C00C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{97BFACDE-C899-445C-A790-1EE195ABF326}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{97F2B8C2-410D-4902-8340-52E8B3D78D79}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9816254B-D578-4C08-BC98-3F3755483D7C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9823F6F8-8EFF-4668-9AA2-2BE700EBB44E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9870F614-98E7-463E-9F2F-501313E404E0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{98E9BD70-BE6F-46DC-914C-4F7DFFC9E5B7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{98F52E6D-D600-46AF-987C-2413B3F6F74D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{996E5C2F-0D0E-4685-BCAD-2E46492C5249}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{99E81508-8928-4889-9329-CD9086FBACE9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9A43FBAA-BAEE-4B68-8272-6E05D36DE3E6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9A4901E6-C61F-4883-A5C7-9C1E42A16BCB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9A5F82DF-DCA7-4BFD-A6B8-5254D8F34BD2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9AA9C14D-1E15-425B-8DC0-29B04CBDD5E7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9AB9F0E3-682C-4C49-BC69-BD53A3360C98}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9B962BA5-61E0-4FBF-A02E-B9B39E6A32FC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9BEF236F-9530-4BD1-8E95-3C4A32C0E872}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9BF0776C-ED64-41E1-935A-B7A3A56B7CB2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9C3C943B-540A-4A6C-9FAC-CFA1EC31C96E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9D2C5536-A816-462B-A9C8-7BCC18BB7F00}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9D50E678-491D-472B-B3B5-9ED40B3E3348}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9E085F60-EDE6-42C0-9F1D-90ABF68D5116}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9E176751-B66C-4CDE-B65C-B36E31B6A6B7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9EED20C4-E908-440D-A605-82E6A42E3347}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{9EF40AF4-070D-4067-A582-54FF2A5104D9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A03E82EA-E2FF-48B5-844D-E9510E23129D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A07F6CB3-641D-4AE1-AA52-B3D4B0BE0E6A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A089EA51-66DE-4FD6-A244-E90C50DBAB70}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A09BED39-131D-4A68-8FA8-98279C8668CB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A0ABB964-0345-461B-97EE-3E3F6FBDB4F8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A1045AEE-ACF7-4EC5-8CA5-6FB333154C24}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A106763D-0480-4DC9-91EB-D136388B0CE4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A170052A-E7C5-459F-AC9B-33DF464D0D8C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A17DF5D1-80F3-4931-86B1-EDB044F1DA40}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A2046090-F76F-41C3-8826-EFBBCC41D0A1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A25E9424-0378-4552-B97C-A336796E56EE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A26C71B9-2E10-4DCE-BDED-668283C9C637}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A2CAC32E-BE45-4782-84DE-D85647AF7836}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A32C7222-3677-40AB-97F3-8A3E5846A386}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A3674606-D3D5-42A6-9363-500E0338CBF5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A3A59A7B-D357-4074-9110-2FBA3B1C4412}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A3EC6E64-07A7-4B7B-A62A-C01B0DB4FF98}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A42AC993-9400-4568-B403-1BB8EFA11648}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A4A0A1B0-B960-4CB8-95A0-FCD4230AAF91}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A4BC52B0-B96E-4BAF-A471-2806876AA60F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A4BD8255-0819-4630-A4F4-4DB0DAE7DA32}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A4C1243D-BCDA-4D53-8010-6D4CF68D1AB0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A5149A51-A934-4225-B4F2-32FBEEED9904}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A536F4CD-7EC1-4A50-A70C-C69ABBFC118E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A57CBE82-EE85-44F0-B30E-4C674D8B012C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A590B2E5-45BE-4234-9D57-4F234A160BDD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A5B6B3DE-6C53-4AC6-9F22-8DD81A5E3ECA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A6684821-0E6E-4D1E-A50A-D17A860EEBAD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A6975118-DDAE-4E94-8D26-C51FCF0D1FC2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A6E2A128-6B01-42E7-86BB-F338508DCACF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A7039D65-0EDE-4B8A-BB16-CE140C6152F2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A7636907-B5CB-4853-92ED-9527B3F981A3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A7AA4277-EA41-4282-8057-4D6221B2E6F5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A7DDD1D4-AEA7-4388-AE2D-5B8CBD20B0EB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A7E5C4AA-2AC5-461A-BECC-1D5105FDD142}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A88B85FC-D64C-40A4-97F6-79910CEEEEC5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A89991DD-0E0C-4ADD-975E-38F620BC3293}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A8D17199-4578-48F2-B242-63EBED1E3577}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A8E8136D-D078-46C6-A015-E35A3F3C8D73}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A928A2F1-536E-4459-BA09-50916D766F19}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A9398171-6467-4356-84AD-05D039F5FAEB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A9701561-6A31-456A-A0D6-9177A33F1E11}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{A99C72D2-F843-4BEC-91E6-AA541E41735B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AA799C6D-DE24-4D2C-A211-6A0E1E6284A9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AAD58FED-74EC-4BD3-A27A-7EB08BAB745B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AAE23794-2868-4B2B-9B54-F2CA25EA2765}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AAE87E4E-BB2A-4F2B-98C5-DA5995DCD3C2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AB01F51B-FE4E-4883-9785-8D2E451D0B91}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AB3C9DAF-EC87-4CFB-B438-CC6AECC9F774}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AC04A3A9-019B-42F0-8F22-4D5F5C763ADF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AC0D6BB5-5090-4F17-A4A9-018E99701798}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AC1D9233-FFE9-4E78-9283-2E1DF95C6962}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AC34569C-170B-4DCD-8D50-940C50091810}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AC3A2B01-97A6-409D-B2A3-75CF02263055}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AD2388EB-694A-4C75-B1F0-DD3BA12684D7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{ADE7E3F8-5AE4-42CC-8CF6-A50823723E6B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AE98B1A7-56D5-48B5-894C-E9403FA2893E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AF6213CF-7CCE-4B4D-89FE-B7E1438F346D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AF815489-6DD2-488A-9B34-A0A21434CF1D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AF87CE4E-FD95-4EC5-BA61-4A170449BF08}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{AFFE664A-E4F5-416E-8766-E4F8F6889705}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B035096F-009B-4D6D-ACA3-A0EB9D2630C1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B07DD13E-4264-42DD-89E6-D5768727DCE2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B113F4EB-410E-46A8-A88A-893E8505CB16}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B130E8BF-F7EF-407A-B241-398987767FD5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B1AE3118-39CE-4DFF-A333-327CF0CEDB43}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B1C68DE8-FA2B-4866-AE5C-2ADD15BE8FAD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B1D3F3BA-D813-4237-B96A-B0D74D7F650C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B2432B1C-D452-4D10-A44A-A89A4EC3850F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B253DAC1-42BE-4B29-A130-0B3563D49E45}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B297E4D7-8166-4355-9E79-4390D10F5D45}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B32F3E65-496F-42D2-95AB-530EE68026C3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B3506E1E-A910-4768-ACFE-1353DB7D3773}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B3BB1AAF-95ED-472A-B132-B54A4BA2DCC1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B3D3AEAD-C3BC-4775-938A-BB852B902AFE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B415BECC-AF9A-473C-BCC5-F855582FDC7F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B42728F9-6E45-4B0F-B264-856CE899A984}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B442C90F-5318-45A9-8974-DCD51D94419A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B4591F35-BE13-4E5C-B8FE-304C1D13F0A7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B506F88D-B790-47F0-BBD1-A6700A06CE54}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B562B826-E2F4-41B3-BB3A-0056DB4B7BED}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B5E162A3-78AD-4B04-8D89-C5CB04CAEA69}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B66F763E-3F5C-4431-8BFC-30B12494F311}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B6CD7637-3591-4812-A74F-A23751DA286A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B6DA43B9-588E-4735-B8F9-18021630E848}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B72E7DCA-C781-438C-BC60-DD375C07A943}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B7A82494-5A90-447F-B37B-EB158613F7DF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B7B00BC3-9594-4563-83A5-FCB356724E0A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B8962B64-7A50-4AC0-8FEF-3111C9CC063D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B8FED6F9-A6C9-4C18-8E7E-48D8F20870AC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B90DA32F-4DD8-412E-8651-7EF9B9F464C8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{B9202636-2B80-4D6C-9451-954F2936ECB7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BA5AADB5-E147-45AF-BF65-57BC4879A11F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BA6EA483-6D22-4DA4-B621-58E18421616D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BB408748-946A-412E-BBE1-6FB1FADEE0AD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BB64AAF2-F38F-44B1-9D2B-4809B3A0E6C8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BBAC6FB4-9C6C-4134-89B5-32FD34E2AFF2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BBFF9248-84C3-4ED9-899F-90E22A9C67E7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BC144211-BA9E-404F-B5A6-5C38F7134982}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BC14A11A-2725-492D-BEBA-353F51C188B0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BC8096AA-E559-4893-8A3C-5DFB44F95136}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BC8174D1-1EBB-48BB-A7EC-1D2757310C1F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BCC7E03F-ADE4-4495-957A-295D27DFCA01}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BD213A2A-626F-4D17-8C57-1E296A4F275F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BD30E95D-55A5-4728-AE56-D952043574AC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BD6FC803-4388-4701-8A0A-28EE78735BF6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BD9A48AA-4B11-4B7E-80AC-A863937DE504}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BE7AAD0B-9BA9-4F6E-8120-C9EF716C413A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{BE88D989-A73F-496E-8EA2-2CE374C524DF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C00659F8-278E-46DC-A948-D0512481C921}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C0953852-FD80-4671-9F13-0712EF082021}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C0E846C9-4279-49F9-BF21-A47B52972CDA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C111F4ED-5581-4E24-BB9F-76154B164795}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C12D439A-7286-4C62-A618-470849D763B5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C1302976-1155-4AE0-B928-03C031D9DDB1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C148FFCB-4BFF-47F3-B35B-1557E6D9C402}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C20F31A2-B52A-433B-A62F-B0F597BCB910}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C2ECAFE2-EC28-45E0-955D-8FD79596F8F9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C2F1C1C9-8AD4-4D70-85B0-E89864653FC0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C33C6597-CEA6-443A-819F-6F93AE5B057C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C37E92FC-6014-4198-81B3-A2F6302C3F69}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C3BDF9D4-4058-46D7-88E6-FBFE8C7906BE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C3DDAEA2-D1A2-40DF-89BE-C36DE4078873}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C41DF143-9096-434B-B14C-3B056762D864}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C4541FC4-B61B-4BD2-BC82-1C9516AE7DBE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C473CDFE-1188-42AD-B211-6DA5707B0334}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C4EF8B4A-BF8D-4331-A3DF-49598D35898E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C55D63D7-780D-408E-8B46-CD436DB66825}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C55F49E1-FF45-4A30-A316-A37889A8D4B6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C5822AFF-C491-4D24-A361-796256A47B71}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C59C69B5-08CC-445E-BB9E-C3639EEAFF91}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C5B673A2-68A3-49FB-B7EC-114922FEAC05}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C5F6C7B3-4E02-4E0F-84B2-8EC905353814}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C63C1382-5A47-4145-8A1E-94D1D66FAC07}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C64720D0-7EDE-4387-AF8E-F5C3C4B67F2A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C6A45277-1981-4937-BD41-D5D81BB1778A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C748EE1E-A6A8-4438-BA7C-41A95892E926}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C78F20E5-69CA-4453-9AAC-E043AEE96DFE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C79FE1D7-0F00-4DDC-BFD2-8D6BD5F1C989}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C80D2815-8F08-47BF-98BF-2AAB6BA68793}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C8A3953D-5E61-47F6-A43D-95961BA6ECC9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C8B7416D-C31C-4CCE-9BFA-FF045AC95468}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C8DE79F8-8E81-4F61-8C67-54AA84A9280B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C98C4202-5258-4DDD-814C-B166738B7D2D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{C9DA32E7-8A56-4C21-BC0F-A525590CBB30}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CA1CF260-2C6D-4084-9763-C7564797DFC5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CA305931-D6DC-46E9-B88C-F0742AED818B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CA712B55-95C2-491F-A305-4EA16E19F4C5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CBACCB7B-F5CD-4274-8831-0D0FCFC078DA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CBB90315-B0EC-4B5D-ABA8-8ED35196747D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CBC1B9EC-5EB6-41C7-813E-7574F152BD8E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CC0B30FF-5E5E-4646-AD7A-ED8DAE73996F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CC48C661-BDB3-417A-B5C4-4D3615B025E4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CC4924A4-556F-46A6-9DA4-21BCB8B312B5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CC49F5A9-45A5-48C7-BA9E-B115E8315CD9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CC80C9C5-25BF-4E82-91B0-AC5AD94F9C69}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CCD09D22-8F86-4471-9728-070586F0F1D0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CCD0FBF3-5F6E-4230-9D2E-360C25762784}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CDADC36C-A9E0-45A3-8AA9-45F898832F0B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CE2FC2AC-E672-48CD-A92C-1DEBFB5B186A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CE79F097-D685-4457-85FD-94AFE43977D2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CEA3CA6A-2E62-4225-9553-5B93668F279B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CF7E69EE-30FC-41DC-9F5D-0F0CB5607267}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CF8F2730-F662-4479-8605-33E72630B5B5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{CFD422FE-4570-4399-81C2-0F13705ED944}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D0160F47-D7D5-41AF-B435-32458EDDC889}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D07203EB-9A9E-464C-8F52-79424F466DB3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D079CF9D-2A46-45F1-8766-501A0D26FA78}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D0CF043B-46D4-4132-88BB-5FBD11319499}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D0D70F5A-7D9D-43EC-A4D8-2D56F8D23A39}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D1003670-844F-491D-AA2E-6F7C5B7C9E01}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D189DDCC-A3A2-463E-92CF-E8524879C27E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D1A3DEBC-6372-4871-A65B-FD9878402D1D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D204B22C-33E3-4B7D-AD67-8702D061EC7F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D24CF1DB-CBD8-42B1-9113-92829BFABE41}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D2BC048E-8568-493F-A319-7D815E4B7E8A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D2CDF897-7E70-4E8D-9384-F1CEAEA56F52}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D2D94453-C25F-48EA-9C70-B743B03ABFA2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D39A4590-87CB-4F9E-B6D1-C13FB68B58D4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D41E84A5-C4C5-4AAF-8CE0-68CE1B88198B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D49D0B91-A99A-40AB-912F-E919FAC84CDF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D51D52BB-CC6A-4095-B0AF-0D7F0F7786F8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D556ADEF-0812-414D-930F-40EB27214223}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D5CD48DC-A4F4-4F89-8414-C1BF7F80D870}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D5D0977A-C9DC-4520-895D-DE5260A8F4DB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D65C0E5F-B570-4B4F-8C2D-65FEB9273707}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D6D83331-47D7-4857-9417-DADAEEF6C740}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D70FEF0C-C042-4D7B-B1E5-15E2E7D15F43}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D7905E58-A625-4922-9E41-097C425E6B31}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D7B666CD-44FC-47E3-B625-F14D2C7258E0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D94DCE63-A8D3-4EFE-9846-A177553380E0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D9566B3C-BDC8-4C63-B7A7-F7B41638F0AF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D9616C4F-DD59-451C-904F-62FCA5C5580B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D96832C5-39BB-4529-BE8F-A30DE7D30A1D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D968F82F-EAC5-4E5C-B531-7F2F5B6CB76D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D97386CF-82B4-43D6-B26F-EAAAECE23DCF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D983CA4A-1C73-44E0-91F9-E46BFF51E12E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D99CA18B-1F4B-4E0E-8F14-9D95367FE0DE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{D9A42668-E27A-416E-B261-A7D4DDD2094D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DA156D46-1129-47F7-84D6-B63274CF6C70}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DA802BE3-5A69-4A87-9E67-FEB56A95451D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DA977510-909F-4632-B928-CA6A559D92AC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DB0339FA-358E-4865-B6A0-224030F4E17D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DB6527EC-F18A-432A-BCAB-C7D845D482E1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DBE805E7-C8C3-4944-82DD-AEBDFF673E77}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DC24A66F-66CD-4AE3-9595-6193F1764E1D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DC78C75A-6D31-4C45-AD94-B7862794F82E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DC7CC0BC-C2AC-45FA-927D-B4D571F705A1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DD13D503-E9B0-4345-BFFC-8D5D7DA8CB41}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DD5286E4-40E7-4864-973F-28521CD4D7B5}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DDC06B30-F58B-4A1C-9965-57AA148395B1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DE135945-5D02-4608-B23C-B4ACAB79E90E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DE195B9B-AB3E-4954-BB3F-C3ACA17D129D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DE39C2FD-12AD-4DE2-BFAF-7A83B9693CAA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DE8BA886-BF48-4146-9B3E-664CD0D8B0C9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DEADC1AA-AEAD-4CB2-9142-E11F4EDC5E1F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DF1DEE8A-81FD-4F62-9E50-451802463DB2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DF1F25A8-3134-4CEA-9A2B-AAB5CAA2B9EB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DF593BD0-FACC-4FAF-9543-B084F0DEFA4E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{DF9D6A37-CDF1-47D3-BC8A-E6787B0BF0B7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E019FE4B-3CEA-4040-8D53-6720B3DE0CF4}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E0A175FB-F2C8-4344-83A1-B3F5F2B8CF39}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E0AB4FDF-21A3-4E77-964B-2EA1B5E84D3F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E0AC38A4-9BC6-4107-A6EF-2486481B869C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E0B1E3EB-E539-483C-812A-C03618B4537E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E0CE9F5B-C510-4FE6-91F0-38DE1D6469F9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E0EC4FFF-2E7E-454E-A2C9-DE98183F4FE6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E1013DCB-F9A8-4392-9812-1D64421C8ED7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E1D436B3-EE8C-4891-811A-3BDF41179ADF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E2270FFE-5FCE-4EE7-AD73-D54F8A7B4E8B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E2665617-92BB-432A-9F23-29E9A0E9E2B9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E2BE1FED-1FD7-4492-B4C9-3EB65D06CAD2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E33B171B-D338-4C93-8D2A-9CC677821FC1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E365E899-488B-4B39-BBD6-182DB34D5976}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E36B9261-F26B-4554-8EB5-5167363B8002}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E3C09212-2636-4149-B639-669E0EF9DE86}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E437A7B0-AD0B-41D8-B680-DCEB131548D8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E44623B5-6D62-44CA-ABBE-5E9DB568D997}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E511D83C-DA68-499F-A073-CC3DE3564344}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E581F3F1-F3EB-4E29-BB95-A07FA76C988F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E61C5FED-8C40-472C-AE5B-B35D9C8F37AB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E667F7DA-E7F9-4445-AE17-D47BFA1A18FB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E6EC9CBA-70F0-450C-AD81-329527B495D9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E7389921-40C0-4EE1-AB86-6A5DD017194E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E77A63E7-4DAD-47B1-A921-5EA0332AC313}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E8438587-E4CE-4CF9-AF26-462EC98EFC6C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E845DA61-0D34-42D1-B29A-BB98403B5F6D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E877AEC9-2206-4CF2-A6EB-33AAD63981DE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E8C0FBF9-C5CF-4129-B30B-23D7703679F9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E8C5004C-3984-4AAB-A51C-0570F1398D68}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E8DED382-1FA8-4782-ACC5-DB86FE9C718F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E90F5E2B-648B-4E16-9113-93F0AC4A05A2}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E91E70C9-82FA-4493-AFF4-6BF182CD4847}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E99A06B4-2257-4C8F-B773-8BEEE3381056}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{E9B426FD-4F33-402E-AAD8-3E898EBEC062}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EA260CC6-93AD-4D6D-AB4A-9FCD96AE4277}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EA2864BC-95AB-4C1F-871E-5DECD3857342}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EA5FCCE2-1BE6-473A-B1D4-217EB9AE1B52}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EB0F8CB8-B7E9-4D15-9057-0074EA3EDF35}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EB2F6794-57DD-4A98-9961-D05CA596EB2A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EBAB55E9-7D73-4442-8032-C2C7A53897DB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{ECD53D4A-8BA8-48AE-83E3-27D79601A322}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{ED4A3C00-DCCD-47B1-9CEC-CBDE1C2BF471}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{ED550742-7644-4C48-9128-F41F593B7F34}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{ED5B535A-E725-452F-AF57-449508729AF7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{ED736FF4-261D-4A78-8049-9B44F164A86C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{ED79F7E9-8129-4A33-9D96-BD10D8510EA8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{ED89156C-2EBB-4C6B-8F05-7C66817CFAF7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EDA1A011-DBCB-4545-96C7-54192F08F0C6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EDC8488D-FB4C-4380-B92B-4F48BD7BC011}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EE07DBA3-8A44-40B0-872D-62A5FD53967E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EEB90C8A-BB54-40A5-AD71-990A617E2CA7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EF3BDE23-1F24-48A5-8317-B06B925301B9}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{EF584354-AD2D-4D03-A16B-F50907A88239}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F04036A4-E49B-40B2-B9D8-99A39D09DD95}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F0C945E8-189E-4126-B345-1C7475C7AF81}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F0E12185-6D9D-4877-8654-6CA18CCAAB1E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F1B65D56-B9B9-4728-9421-A3AEA4D49ABF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F1E94B32-3250-4162-8571-26BDD83A25B3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F25E665E-AA13-430B-87D4-966E8CF929A0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F27DAB76-F09D-4CFF-A18A-237B0C409D3C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F3A3BF3B-43A3-438F-9DA3-7E1EE914CDE8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F3D3D637-4ABA-4915-9C2F-4B7254D419D3}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F3DDF17C-1E5E-4662-874F-C3FFD60B09FD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F4258366-9626-4272-AC29-36C7EE498796}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F49AD960-6F41-4C92-ABB5-CC40EB2AB3A7}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F4DDB2A0-451E-4BE3-B107-CB5FC5C15DE6}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F4E86DF6-46B1-403A-B971-B847E073BC36}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F4F55FD5-05D6-4840-972D-2DD8AB31D390}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F5143E59-BD56-4D69-BC13-06BEB070464F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F5339DE8-1135-4C43-9531-8EEAE7B10BD8}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F6183A53-4F88-4E1D-8FA4-184DBFCEC02B}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F62288EB-4E37-4ABE-95E2-517110D8BC24}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F631005F-B0B0-472B-9640-DED38B0A41AA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F63A4CC4-9005-4B80-BE21-CAA08D418602}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F6C5F7FB-2754-4906-BC8A-395E3BAF996A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F7196AB1-48C3-4E75-B428-D8DD56BD6443}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F71CBBDA-6690-40C9-8063-E04FE101EF9F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F7692668-852D-4897-8E7C-5C39180790C1}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F7730868-C23A-42D1-B744-0B69C761012D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F7754B1C-D0CE-4F21-A1C6-790A38CD2188}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F7B4CF06-5BFB-43E8-9FE7-2779891E3D26}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F83937BA-F872-45C8-806C-6084BA68576E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F8454033-78FF-415A-AB9C-7CA8EAF132FC}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F85C8AE8-51A5-4D29-A0E1-79148CB07ECD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F88868E5-0BB4-4B0B-8FFB-E00196A807AF}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F9318288-9237-4A52-8728-55A7ED95ECD0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F97C5993-EFA2-4889-905D-7349A26D0876}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F9BBD864-D3FC-40B0-91DC-66DA2A6D14A0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F9E5E950-21CA-41E0-AE74-24486762FA32}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F9F2BEC5-10C4-443F-A0E2-09C5C5653D56}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{F9F56F41-D9E4-4FA4-B372-2A3455E38BCE}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FA25B951-F041-4888-B433-71A70D1A7860}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FA78260E-58DA-435E-B4CF-98D56BA86CCA}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FABA0F2B-4CA5-479C-BA74-089369BD5DDD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FB0DF664-57F7-433E-9A94-2BD347073068}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FB30F761-F60C-4361-A974-03A33B7A621F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FB31A0D2-F47F-410B-A7DE-F04310FD0404}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FB5499A8-B8B5-4F8D-86CB-39E7BDBD4E71}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FCB25B01-DC53-401C-80B9-A1BAE360977A}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FCCAFE98-4EBF-4C29-848A-CEBD0CD7962F}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FCE30560-72CE-438B-8CF4-E8389D1FD6AB}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FD34AD5B-C234-4261-BB3C-94449316B42D}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FD4CCAB2-0034-4D3F-8F24-FF62A85F6452}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FD601C5E-D36A-4D6B-9027-3237A181DD8C}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FD74DBE5-0FFD-43EE-A412-94D9989A16D0}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FDD11649-80A9-4CF0-9C53-47725C60466E}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FDF14275-656F-42D2-B3F8-8A274E1D0D65}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FE239CBA-6E4D-45E1-8A7D-0A2945DFD9DD}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FF1F059D-DD83-4C88-9451-D23CEA05C867}
Successfully deleted: [Empty Folder] C:\Users\Janet\appdata\local\{FFCB9A8C-1016-4391-B60F-8AE95A98F6B6}
~~~ FireFox
Emptied folder: C:\Users\Janet\AppData\Roaming\mozilla\firefox\profiles\0du26tms.Janet\minidumps [48 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.01.2014 at 12:32:50,66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
19.01.2014, 12:50
| #6 |
| | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert?FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014
Ran by Janet (administrator) on JANET-PC on 19-01-2014 12:45:23
Running from C:\Users\Janet\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
() C:\Windows\SysWOW64\PSIService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\DOLBY PCEE4\pcee4.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-10-08] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [615584 2011-01-20] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-01-20] (Atheros Commnucations)
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831528 2011-05-10] (Acer Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1580368 2010-11-03] (Logitech, Inc.)
HKLM\...\Run: [Corel Photo Downloader] - C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [531272 2007-08-28] (Corel, Inc.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (CANON INC.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340336 2010-09-28] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-09-18] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-09-18] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-03-09] (NTI Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1081424 2011-03-14] (Dritek System Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-05-09] (CyberLink Corp.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [AllShareAgent] - C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [226920 2011-03-30] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [193128 2011-03-30] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://t-online.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll ()
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
DPF: HKLM-x32 {3CA45906-EF10-4E4E-9BE4-B444D220FCB0} hxxp://ua.foto.com/ImageUploader6.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\0du26tms.Janet
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\0du26tms.Janet\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation)
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()
==================== Drivers (Whitelisted) ====================
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-02] (Avira Operations GmbH & Co. KG)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-05-22] ()
S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-19 12:45 - 2014-01-19 12:45 - 00000000 ____D C:\Users\Janet\Downloads\FRST-OlderVersion
2014-01-19 12:32 - 2014-01-19 12:32 - 00092280 _____ C:\Users\Janet\Desktop\JRT.txt
2014-01-19 12:24 - 2014-01-19 12:24 - 00000000 ____D C:\Windows\ERUNT
2014-01-19 11:58 - 2014-01-19 12:05 - 00000000 ____D C:\AdwCleaner
2014-01-19 11:33 - 2014-01-19 11:33 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Malwarebytes
2014-01-19 11:32 - 2014-01-19 11:32 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-19 11:32 - 2014-01-19 11:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-19 11:32 - 2014-01-19 11:32 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-19 11:32 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-19 11:28 - 2014-01-19 11:28 - 01236282 _____ C:\Users\Janet\Downloads\adwcleaner.exe
2014-01-19 11:28 - 2014-01-19 11:28 - 01037068 _____ (Thisisu) C:\Users\Janet\Downloads\JRT.exe
2014-01-19 11:27 - 2014-01-19 11:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Janet\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-18 18:42 - 2014-01-18 18:42 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-18 16:05 - 2014-01-18 16:05 - 00000000 ____D C:\Users\Janet\Documents\My PSP Files
2014-01-18 15:26 - 2014-01-18 15:26 - 00032980 _____ C:\ComboFix.txt
2014-01-18 15:12 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-18 15:12 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-18 15:12 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-18 15:11 - 2014-01-18 15:26 - 00000000 ____D C:\Qoobox
2014-01-18 15:11 - 2014-01-18 15:24 - 00000000 ____D C:\Windows\erdnt
2014-01-17 21:53 - 2014-01-17 21:54 - 00047528 _____ C:\Users\Janet\Downloads\Addition.txt
2014-01-17 21:52 - 2014-01-19 12:45 - 00017777 _____ C:\Users\Janet\Downloads\FRST.txt
2014-01-17 21:51 - 2014-01-19 12:45 - 00000000 ____D C:\FRST
2014-01-17 21:50 - 2014-01-17 21:50 - 00000472 _____ C:\Users\Janet\Downloads\defogger_disable.log
2014-01-17 21:50 - 2014-01-17 21:50 - 00000000 _____ C:\Users\Janet\defogger_reenable
2014-01-17 21:43 - 2014-01-17 21:43 - 00370610 _____ C:\Users\Janet\Downloads\gmer_2.1.19323.zip
2014-01-17 21:42 - 2014-01-19 12:45 - 02076672 _____ (Farbar) C:\Users\Janet\Downloads\FRST64.exe
2014-01-17 21:33 - 2014-01-17 21:34 - 00050477 _____ C:\Users\Janet\Downloads\Defogger.exe
2014-01-17 07:49 - 2014-01-17 07:49 - 00002029 _____ C:\Users\Janet\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-17 07:49 - 2014-01-17 07:49 - 00001973 _____ C:\Users\Janet\Desktop\Avira EU-Cleaner.lnk
2014-01-16 20:28 - 2014-01-16 20:28 - 00000000 ____D C:\Users\Janet\Documents\Adobe
2014-01-16 16:55 - 2014-01-16 20:46 - 00000000 ____D C:\Users\Janet\Eigene DVD
2014-01-16 16:54 - 2014-01-16 16:54 - 00000000 ____D C:\Users\Janet\Downloads\Neuer Ordner
2014-01-15 23:22 - 2014-01-16 16:52 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft Video Converter Ultimate
2014-01-15 23:22 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-16 16:49 - 00000000 ____D C:\ProgramData\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-15 23:21 - 00001446 _____ C:\Users\Public\Desktop\Aimersoft Video Converter Ultimate.lnk
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Users\Janet\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files\Common Files\Aimersoft
2014-01-15 23:21 - 2013-08-23 13:36 - 00721263 _____ () C:\Windows\SysWOW64\AiCM64.dll
2014-01-15 23:21 - 2013-08-07 14:31 - 00214528 _____ () C:\Windows\SysWOW64\AiCM32.dll
2014-01-15 23:19 - 2014-01-15 23:20 - 36573803 _____ (Aimersoft Software ) C:\Users\Janet\Downloads\aimer-video-ultimate_full523.exe
2014-01-15 21:53 - 2014-01-15 21:53 - 00000000 ____D C:\ProgramData\xml_param
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files (x86)\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:47 - 00001220 _____ C:\Users\Janet\Desktop\Aimersoft DVD Ripper.lnk
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\AppData\Local\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\ProgramData\Aimersoft DVD Ripper
2014-01-15 21:46 - 2013-05-07 09:08 - 00892928 _____ (Free Software Foundation) C:\Windows\SysWOW64\iconv.dll
2014-01-15 21:46 - 2013-05-07 09:08 - 00675840 _____ () C:\Windows\SysWOW64\ac3filter.ax
2014-01-15 21:46 - 2013-05-07 09:08 - 00496640 _____ C:\Windows\SysWOW64\xvid.ax
2014-01-15 20:49 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 20:49 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 20:49 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 00:22 - 2014-01-15 00:23 - 00000021 _____ C:\Windows\DVDShrink.txt
2014-01-15 00:21 - 2014-01-15 00:21 - 00001157 _____ C:\Users\Public\Desktop\AVS DVD Copy.lnk
2014-01-15 00:21 - 2011-09-22 19:55 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2014-01-15 00:21 - 2011-09-22 19:55 - 00487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp70.dll
2014-01-15 00:19 - 2014-01-15 00:20 - 14837688 _____ (Online Media Technologies Ltd. ) C:\Users\Janet\Downloads\AVSDVDCopy.exe
2014-01-15 00:11 - 2014-01-15 00:11 - 00000000 ____D C:\Users\Janet\AppData\Roaming\7168
2014-01-15 00:10 - 2014-01-15 00:10 - 00000000 ____D C:\Users\Janet\Documents\AnyDVDHD
2014-01-15 00:04 - 2014-01-17 07:24 - 00000040 ___SH C:\ProgramData\.zreglib
2014-01-15 00:04 - 2014-01-15 00:04 - 00001105 _____ C:\Users\Public\Desktop\AnyDVD.lnk
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\ProgramData\SlySoft
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\Program Files (x86)\SlySoft
2014-01-14 22:40 - 2014-01-16 21:20 - 00000000 ____D C:\Program Files (x86)\DVDFab 9
2014-01-14 22:40 - 2014-01-14 23:36 - 00000000 ____D C:\Users\Janet\Documents\DVDFab9
2014-01-14 22:03 - 2014-01-14 22:05 - 00000000 ____D C:\ProgramData\DVD Shrink
2014-01-14 22:02 - 2014-01-14 22:03 - 00598086 _____ (DVD Shrink) C:\Users\Janet\Downloads\DVDShrink.exe
2014-01-12 09:29 - 2014-01-19 12:07 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-12 09:29 - 2014-01-12 09:29 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2014-01-08 16:18 - 2014-01-08 16:18 - 00000724 _____ C:\Users\Janet\Desktop\index.html
2014-01-03 21:15 - 2014-01-03 21:29 - 990570856 _____ C:\Users\Janet\Downloads\Die_Weihnachtsgans_Auguste_2013-12-22_1545_307454.mp4
2013-12-30 21:47 - 2013-12-30 21:47 - 00000132 _____ C:\Users\Janet\Desktop\DVD Fatburner.ashprj
2013-12-26 21:05 - 2013-12-26 21:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-25 22:31 - 2013-12-25 22:31 - 00000000 ___RD C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
==================== One Month Modified Files and Folders =======
2014-01-19 12:46 - 2014-01-17 21:52 - 00017777 _____ C:\Users\Janet\Downloads\FRST.txt
2014-01-19 12:45 - 2014-01-19 12:45 - 00000000 ____D C:\Users\Janet\Downloads\FRST-OlderVersion
2014-01-19 12:45 - 2014-01-17 21:51 - 00000000 ____D C:\FRST
2014-01-19 12:45 - 2014-01-17 21:42 - 02076672 _____ (Farbar) C:\Users\Janet\Downloads\FRST64.exe
2014-01-19 12:32 - 2014-01-19 12:32 - 00092280 _____ C:\Users\Janet\Desktop\JRT.txt
2014-01-19 12:24 - 2014-01-19 12:24 - 00000000 ____D C:\Windows\ERUNT
2014-01-19 12:19 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-19 12:19 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-19 12:12 - 2012-05-16 18:29 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-19 12:10 - 2011-09-14 18:47 - 00000000 ____D C:\ProgramData\clear.fi
2014-01-19 12:07 - 2014-01-12 09:29 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-19 12:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-19 12:07 - 2009-07-14 05:51 - 00145455 _____ C:\Windows\setupact.log
2014-01-19 12:06 - 2011-07-26 06:44 - 02026351 _____ C:\Windows\WindowsUpdate.log
2014-01-19 12:05 - 2014-01-19 11:58 - 00000000 ____D C:\AdwCleaner
2014-01-19 11:56 - 2011-09-15 10:33 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Skype
2014-01-19 11:54 - 2010-11-21 04:47 - 00101710 _____ C:\Windows\PFRO.log
2014-01-19 11:33 - 2014-01-19 11:33 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Malwarebytes
2014-01-19 11:32 - 2014-01-19 11:32 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-19 11:32 - 2014-01-19 11:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-19 11:32 - 2014-01-19 11:32 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-19 11:28 - 2014-01-19 11:28 - 01236282 _____ C:\Users\Janet\Downloads\adwcleaner.exe
2014-01-19 11:28 - 2014-01-19 11:28 - 01037068 _____ (Thisisu) C:\Users\Janet\Downloads\JRT.exe
2014-01-19 11:27 - 2014-01-19 11:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Janet\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-19 11:23 - 2011-09-16 10:52 - 00000000 ____D C:\Users\Janet\AppData\Local\CrashDumps
2014-01-18 18:42 - 2014-01-18 18:42 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-18 16:05 - 2014-01-18 16:05 - 00000000 ____D C:\Users\Janet\Documents\My PSP Files
2014-01-18 16:05 - 2011-09-16 08:31 - 00000000 ____D C:\Users\Janet\AppData\Local\Corel
2014-01-18 16:05 - 2011-09-16 08:30 - 00003088 ___SH C:\Windows\SysWOW64\KGyGaAvL.sys
2014-01-18 15:26 - 2014-01-18 15:26 - 00032980 _____ C:\ComboFix.txt
2014-01-18 15:26 - 2014-01-18 15:11 - 00000000 ____D C:\Qoobox
2014-01-18 15:24 - 2014-01-18 15:11 - 00000000 ____D C:\Windows\erdnt
2014-01-18 15:24 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-18 15:10 - 2011-10-04 20:27 - 00000000 ____D C:\Users\Janet\Downloads\Programme
2014-01-18 14:55 - 2012-06-21 16:29 - 00000000 ____D C:\Users\Janet\Tracing
2014-01-17 23:48 - 2011-09-15 10:26 - 00000000 ____D C:\Users\Janet\AppData\Roaming\SoftGrid Client
2014-01-17 21:54 - 2014-01-17 21:53 - 00047528 _____ C:\Users\Janet\Downloads\Addition.txt
2014-01-17 21:50 - 2014-01-17 21:50 - 00000472 _____ C:\Users\Janet\Downloads\defogger_disable.log
2014-01-17 21:50 - 2014-01-17 21:50 - 00000000 _____ C:\Users\Janet\defogger_reenable
2014-01-17 21:50 - 2011-09-13 21:37 - 00000000 ____D C:\Users\Janet
2014-01-17 21:43 - 2014-01-17 21:43 - 00370610 _____ C:\Users\Janet\Downloads\gmer_2.1.19323.zip
2014-01-17 21:34 - 2014-01-17 21:33 - 00050477 _____ C:\Users\Janet\Downloads\Defogger.exe
2014-01-17 15:04 - 2013-09-07 19:49 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Free Download Manager
2014-01-17 07:49 - 2014-01-17 07:49 - 00002029 _____ C:\Users\Janet\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-17 07:49 - 2014-01-17 07:49 - 00001973 _____ C:\Users\Janet\Desktop\Avira EU-Cleaner.lnk
2014-01-17 07:24 - 2014-01-15 00:04 - 00000040 ___SH C:\ProgramData\.zreglib
2014-01-16 23:50 - 2013-01-18 23:21 - 00000000 ____D C:\ProgramData\PhotoME
2014-01-16 23:49 - 2012-09-25 18:41 - 00000000 ____D C:\Users\Janet\AppData\Local\Google
2014-01-16 23:49 - 2012-09-25 18:41 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-16 23:48 - 2012-07-19 19:25 - 00000000 ____D C:\Program Files (x86)\OnlineFotoservice
2014-01-16 23:47 - 2012-07-19 21:47 - 00000000 ____D C:\Program Files (x86)\Pixum
2014-01-16 21:20 - 2014-01-14 22:40 - 00000000 ____D C:\Program Files (x86)\DVDFab 9
2014-01-16 20:46 - 2014-01-16 16:55 - 00000000 ____D C:\Users\Janet\Eigene DVD
2014-01-16 20:28 - 2014-01-16 20:28 - 00000000 ____D C:\Users\Janet\Documents\Adobe
2014-01-16 20:28 - 2011-09-13 21:46 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Adobe
2014-01-16 18:59 - 2011-07-26 16:36 - 00654852 _____ C:\Windows\system32\perfh007.dat
2014-01-16 18:59 - 2011-07-26 16:36 - 00130434 _____ C:\Windows\system32\perfc007.dat
2014-01-16 18:59 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-16 16:54 - 2014-01-16 16:54 - 00000000 ____D C:\Users\Janet\Downloads\Neuer Ordner
2014-01-16 16:52 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft Video Converter Ultimate
2014-01-16 16:49 - 2014-01-15 23:21 - 00000000 ____D C:\ProgramData\Aimersoft Video Converter Ultimate
2014-01-16 16:43 - 2009-07-14 05:45 - 03315920 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 00:43 - 2013-08-15 21:33 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 00:40 - 2011-09-17 19:34 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 23:22 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-15 23:21 - 00001446 _____ C:\Users\Public\Desktop\Aimersoft Video Converter Ultimate.lnk
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Users\Janet\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files\Common Files\Aimersoft
2014-01-15 23:21 - 2014-01-15 21:46 - 00000000 ____D C:\Program Files (x86)\Aimersoft
2014-01-15 23:20 - 2014-01-15 23:19 - 36573803 _____ (Aimersoft Software ) C:\Users\Janet\Downloads\aimer-video-ultimate_full523.exe
2014-01-15 21:53 - 2014-01-15 21:53 - 00000000 ____D C:\ProgramData\xml_param
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft DVD Ripper
2014-01-15 21:47 - 2014-01-15 21:46 - 00001220 _____ C:\Users\Janet\Desktop\Aimersoft DVD Ripper.lnk
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\AppData\Local\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\ProgramData\Aimersoft DVD Ripper
2014-01-15 07:23 - 2013-09-15 13:27 - 00000000 ____D C:\Users\Janet\AppData\Roaming\DivX
2014-01-15 00:23 - 2014-01-15 00:22 - 00000021 _____ C:\Windows\DVDShrink.txt
2014-01-15 00:22 - 2011-10-04 20:34 - 00000000 ____D C:\Users\Janet\AppData\Roaming\AVS4YOU
2014-01-15 00:21 - 2014-01-15 00:21 - 00001157 _____ C:\Users\Public\Desktop\AVS DVD Copy.lnk
2014-01-15 00:21 - 2012-02-04 23:32 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2014-01-15 00:21 - 2011-10-04 20:32 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2014-01-15 00:20 - 2014-01-15 00:19 - 14837688 _____ (Online Media Technologies Ltd. ) C:\Users\Janet\Downloads\AVSDVDCopy.exe
2014-01-15 00:11 - 2014-01-15 00:11 - 00000000 ____D C:\Users\Janet\AppData\Roaming\7168
2014-01-15 00:10 - 2014-01-15 00:10 - 00000000 ____D C:\Users\Janet\Documents\AnyDVDHD
2014-01-15 00:04 - 2014-01-15 00:04 - 00001105 _____ C:\Users\Public\Desktop\AnyDVD.lnk
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\ProgramData\SlySoft
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\Program Files (x86)\SlySoft
2014-01-14 23:36 - 2014-01-14 22:40 - 00000000 ____D C:\Users\Janet\Documents\DVDFab9
2014-01-14 22:16 - 2011-09-13 21:38 - 00000000 ____D C:\Users\Janet\AppData\Local\VirtualStore
2014-01-14 22:05 - 2014-01-14 22:03 - 00000000 ____D C:\ProgramData\DVD Shrink
2014-01-14 22:03 - 2014-01-14 22:02 - 00598086 _____ (DVD Shrink) C:\Users\Janet\Downloads\DVDShrink.exe
2014-01-12 09:29 - 2014-01-12 09:29 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2014-01-11 20:02 - 2012-02-16 22:55 - 00000000 ____D C:\Users\Janet\Documents\Rezepte
2014-01-08 16:23 - 2012-03-02 12:05 - 00000000 ____D C:\ProgramData\CanonIJPLM
2014-01-08 16:18 - 2014-01-08 16:18 - 00000724 _____ C:\Users\Janet\Desktop\index.html
2014-01-03 21:29 - 2014-01-03 21:15 - 990570856 _____ C:\Users\Janet\Downloads\Die_Weihnachtsgans_Auguste_2013-12-22_1545_307454.mp4
2013-12-30 21:47 - 2013-12-30 21:47 - 00000132 _____ C:\Users\Janet\Desktop\DVD Fatburner.ashprj
2013-12-27 20:57 - 2012-12-14 15:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-26 21:05 - 2013-12-26 21:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-25 22:31 - 2013-12-25 22:31 - 00000000 ___RD C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
Some content of TEMP:
====================
C:\Users\Janet\AppData\Local\Temp\avgnt.exe
C:\Users\Janet\AppData\Local\Temp\Quarantine.exe
C:\Users\Janet\AppData\Local\Temp\setup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-10 20:18
==================== End Of Log ============================
So alles erledigt. |
|
20.01.2014, 10:21
| #7 |
| /// the machine /// TB-Ausbilder | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert?ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.01.2014, 19:03
| #8 |
| | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Danke. Ich werde das nachher zu Hause abarbeiten. Muss ich alle Wechselmedien anschliessen? So viele USB-bzw. Kartensteckplätze hab ich gar nicht.  Oder nur die Wichtigsten? Oder das ganze Programm dann noch einmal mit den Wechselmedien, die beim ersten Mal nicht mehr dran gepasst haben, durchlaufen lassen?Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=ffff5d439b231f40b85b47fafb1892c6
# engine=16721
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-20 04:59:48
# local_time=2014-01-20 05:59:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 11590 160908493 4364 0
# compatibility_mode=5893 16776573 100 94 94969 141867038 0 0
# scanned=393266
# found=0
# cleaned=0
# scan_time=7114
Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 11.9.900.170 Adobe Reader 9 Adobe Reader out of Date! Mozilla Firefox (26.0) ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe Symantec Norton Online Backup NOBuAgent.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014
Ran by Janet (administrator) on JANET-PC on 20-01-2014 18:44:31
Running from C:\Users\Janet\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\Windows\SysWOW64\PSIService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\DOLBY PCEE4\pcee4.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-10-08] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [615584 2011-01-20] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-01-20] (Atheros Commnucations)
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831528 2011-05-10] (Acer Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1580368 2010-11-03] (Logitech, Inc.)
HKLM\...\Run: [Corel Photo Downloader] - C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [531272 2007-08-28] (Corel, Inc.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (CANON INC.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340336 2010-09-28] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-09-18] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-09-18] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-03-09] (NTI Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1081424 2011-03-14] (Dritek System Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-05-09] (CyberLink Corp.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [AllShareAgent] - C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [226920 2011-03-30] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [193128 2011-03-30] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://t-online.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll ()
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
DPF: HKLM-x32 {3CA45906-EF10-4E4E-9BE4-B444D220FCB0} hxxp://ua.foto.com/ImageUploader6.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\0du26tms.Janet
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Janet\AppData\Roaming\Mozilla\Firefox\Profiles\0du26tms.Janet\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation)
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()
==================== Drivers (Whitelisted) ====================
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-02] (Avira Operations GmbH & Co. KG)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-05-22] ()
S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-20 15:53 - 2014-01-20 15:53 - 02347384 _____ (ESET) C:\Users\Janet\Downloads\esetsmartinstaller_enu.exe
2014-01-20 15:52 - 2014-01-20 15:53 - 00987425 _____ C:\Users\Janet\Downloads\SecurityCheck.exe
2014-01-19 12:45 - 2014-01-19 12:45 - 00000000 ____D C:\Users\Janet\Downloads\FRST-OlderVersion
2014-01-19 12:32 - 2014-01-19 12:32 - 00092280 _____ C:\Users\Janet\Desktop\JRT.txt
2014-01-19 12:24 - 2014-01-19 12:24 - 00000000 ____D C:\Windows\ERUNT
2014-01-19 11:58 - 2014-01-19 12:05 - 00000000 ____D C:\AdwCleaner
2014-01-19 11:33 - 2014-01-19 11:33 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Malwarebytes
2014-01-19 11:32 - 2014-01-19 11:32 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-19 11:32 - 2014-01-19 11:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-19 11:32 - 2014-01-19 11:32 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-19 11:32 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-19 11:28 - 2014-01-19 11:28 - 01236282 _____ C:\Users\Janet\Downloads\adwcleaner.exe
2014-01-19 11:28 - 2014-01-19 11:28 - 01037068 _____ (Thisisu) C:\Users\Janet\Downloads\JRT.exe
2014-01-19 11:27 - 2014-01-19 11:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Janet\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-18 18:42 - 2014-01-18 18:42 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-18 16:05 - 2014-01-18 16:05 - 00000000 ____D C:\Users\Janet\Documents\My PSP Files
2014-01-18 15:26 - 2014-01-18 15:26 - 00032980 _____ C:\ComboFix.txt
2014-01-18 15:12 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-18 15:12 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-18 15:12 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-18 15:12 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-18 15:11 - 2014-01-18 15:26 - 00000000 ____D C:\Qoobox
2014-01-18 15:11 - 2014-01-18 15:24 - 00000000 ____D C:\Windows\erdnt
2014-01-17 21:53 - 2014-01-17 21:54 - 00047528 _____ C:\Users\Janet\Downloads\Addition.txt
2014-01-17 21:52 - 2014-01-20 18:44 - 00017979 _____ C:\Users\Janet\Downloads\FRST.txt
2014-01-17 21:51 - 2014-01-19 12:45 - 00000000 ____D C:\FRST
2014-01-17 21:50 - 2014-01-17 21:50 - 00000472 _____ C:\Users\Janet\Downloads\defogger_disable.log
2014-01-17 21:50 - 2014-01-17 21:50 - 00000000 _____ C:\Users\Janet\defogger_reenable
2014-01-17 21:43 - 2014-01-17 21:43 - 00370610 _____ C:\Users\Janet\Downloads\gmer_2.1.19323.zip
2014-01-17 21:42 - 2014-01-19 12:45 - 02076672 _____ (Farbar) C:\Users\Janet\Downloads\FRST64.exe
2014-01-17 21:33 - 2014-01-17 21:34 - 00050477 _____ C:\Users\Janet\Downloads\Defogger.exe
2014-01-17 07:49 - 2014-01-17 07:49 - 00002029 _____ C:\Users\Janet\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-17 07:49 - 2014-01-17 07:49 - 00001973 _____ C:\Users\Janet\Desktop\Avira EU-Cleaner.lnk
2014-01-16 20:28 - 2014-01-16 20:28 - 00000000 ____D C:\Users\Janet\Documents\Adobe
2014-01-16 16:55 - 2014-01-20 07:37 - 00000000 ____D C:\Users\Janet\Eigene DVD
2014-01-16 16:54 - 2014-01-16 16:54 - 00000000 ____D C:\Users\Janet\Downloads\Neuer Ordner
2014-01-15 23:22 - 2014-01-16 16:52 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft Video Converter Ultimate
2014-01-15 23:22 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-20 07:35 - 00000000 ____D C:\ProgramData\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-15 23:21 - 00001446 _____ C:\Users\Public\Desktop\Aimersoft Video Converter Ultimate.lnk
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Users\Janet\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files\Common Files\Aimersoft
2014-01-15 23:21 - 2013-08-23 13:36 - 00721263 _____ () C:\Windows\SysWOW64\AiCM64.dll
2014-01-15 23:21 - 2013-08-07 14:31 - 00214528 _____ () C:\Windows\SysWOW64\AiCM32.dll
2014-01-15 23:19 - 2014-01-15 23:20 - 36573803 _____ (Aimersoft Software ) C:\Users\Janet\Downloads\aimer-video-ultimate_full523.exe
2014-01-15 21:53 - 2014-01-15 21:53 - 00000000 ____D C:\ProgramData\xml_param
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files (x86)\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:47 - 00001220 _____ C:\Users\Janet\Desktop\Aimersoft DVD Ripper.lnk
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\AppData\Local\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\ProgramData\Aimersoft DVD Ripper
2014-01-15 21:46 - 2013-05-07 09:08 - 00892928 _____ (Free Software Foundation) C:\Windows\SysWOW64\iconv.dll
2014-01-15 21:46 - 2013-05-07 09:08 - 00675840 _____ () C:\Windows\SysWOW64\ac3filter.ax
2014-01-15 21:46 - 2013-05-07 09:08 - 00496640 _____ C:\Windows\SysWOW64\xvid.ax
2014-01-15 20:49 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 20:49 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 20:49 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 20:49 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 00:22 - 2014-01-15 00:23 - 00000021 _____ C:\Windows\DVDShrink.txt
2014-01-15 00:21 - 2014-01-15 00:21 - 00001157 _____ C:\Users\Public\Desktop\AVS DVD Copy.lnk
2014-01-15 00:21 - 2011-09-22 19:55 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2014-01-15 00:21 - 2011-09-22 19:55 - 00487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp70.dll
2014-01-15 00:19 - 2014-01-15 00:20 - 14837688 _____ (Online Media Technologies Ltd. ) C:\Users\Janet\Downloads\AVSDVDCopy.exe
2014-01-15 00:11 - 2014-01-15 00:11 - 00000000 ____D C:\Users\Janet\AppData\Roaming\7168
2014-01-15 00:10 - 2014-01-15 00:10 - 00000000 ____D C:\Users\Janet\Documents\AnyDVDHD
2014-01-15 00:04 - 2014-01-20 07:31 - 00000040 ___SH C:\ProgramData\.zreglib
2014-01-15 00:04 - 2014-01-15 00:04 - 00001105 _____ C:\Users\Public\Desktop\AnyDVD.lnk
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\ProgramData\SlySoft
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\Program Files (x86)\SlySoft
2014-01-14 22:40 - 2014-01-16 21:20 - 00000000 ____D C:\Program Files (x86)\DVDFab 9
2014-01-14 22:40 - 2014-01-14 23:36 - 00000000 ____D C:\Users\Janet\Documents\DVDFab9
2014-01-14 22:03 - 2014-01-14 22:05 - 00000000 ____D C:\ProgramData\DVD Shrink
2014-01-14 22:02 - 2014-01-14 22:03 - 00598086 _____ (DVD Shrink) C:\Users\Janet\Downloads\DVDShrink.exe
2014-01-12 09:29 - 2014-01-20 15:41 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-12 09:29 - 2014-01-12 09:29 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2014-01-08 16:18 - 2014-01-08 16:18 - 00000724 _____ C:\Users\Janet\Desktop\index.html
2014-01-03 21:15 - 2014-01-03 21:29 - 990570856 _____ C:\Users\Janet\Downloads\Die_Weihnachtsgans_Auguste_2013-12-22_1545_307454.mp4
2013-12-30 21:47 - 2013-12-30 21:47 - 00000132 _____ C:\Users\Janet\Desktop\DVD Fatburner.ashprj
2013-12-26 21:05 - 2013-12-26 21:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-25 22:31 - 2013-12-25 22:31 - 00000000 ___RD C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
==================== One Month Modified Files and Folders =======
2014-01-20 18:45 - 2014-01-17 21:52 - 00017979 _____ C:\Users\Janet\Downloads\FRST.txt
2014-01-20 18:12 - 2012-05-16 18:29 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-20 17:41 - 2011-07-26 06:44 - 02070995 _____ C:\Windows\WindowsUpdate.log
2014-01-20 15:54 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-20 15:54 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-20 15:53 - 2014-01-20 15:53 - 02347384 _____ (ESET) C:\Users\Janet\Downloads\esetsmartinstaller_enu.exe
2014-01-20 15:53 - 2014-01-20 15:52 - 00987425 _____ C:\Users\Janet\Downloads\SecurityCheck.exe
2014-01-20 15:44 - 2011-09-14 18:47 - 00000000 ____D C:\ProgramData\clear.fi
2014-01-20 15:41 - 2014-01-12 09:29 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-20 15:41 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-20 15:41 - 2009-07-14 05:51 - 00145769 _____ C:\Windows\setupact.log
2014-01-20 07:37 - 2014-01-16 16:55 - 00000000 ____D C:\Users\Janet\Eigene DVD
2014-01-20 07:35 - 2014-01-15 23:21 - 00000000 ____D C:\ProgramData\Aimersoft Video Converter Ultimate
2014-01-20 07:31 - 2014-01-15 00:04 - 00000040 ___SH C:\ProgramData\.zreglib
2014-01-19 20:02 - 2011-07-26 16:36 - 00654852 _____ C:\Windows\system32\perfh007.dat
2014-01-19 20:02 - 2011-07-26 16:36 - 00130434 _____ C:\Windows\system32\perfc007.dat
2014-01-19 20:02 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-19 12:45 - 2014-01-19 12:45 - 00000000 ____D C:\Users\Janet\Downloads\FRST-OlderVersion
2014-01-19 12:45 - 2014-01-17 21:51 - 00000000 ____D C:\FRST
2014-01-19 12:45 - 2014-01-17 21:42 - 02076672 _____ (Farbar) C:\Users\Janet\Downloads\FRST64.exe
2014-01-19 12:32 - 2014-01-19 12:32 - 00092280 _____ C:\Users\Janet\Desktop\JRT.txt
2014-01-19 12:24 - 2014-01-19 12:24 - 00000000 ____D C:\Windows\ERUNT
2014-01-19 12:05 - 2014-01-19 11:58 - 00000000 ____D C:\AdwCleaner
2014-01-19 11:56 - 2011-09-15 10:33 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Skype
2014-01-19 11:54 - 2010-11-21 04:47 - 00101710 _____ C:\Windows\PFRO.log
2014-01-19 11:33 - 2014-01-19 11:33 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Malwarebytes
2014-01-19 11:32 - 2014-01-19 11:32 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-19 11:32 - 2014-01-19 11:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-19 11:32 - 2014-01-19 11:32 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-19 11:28 - 2014-01-19 11:28 - 01236282 _____ C:\Users\Janet\Downloads\adwcleaner.exe
2014-01-19 11:28 - 2014-01-19 11:28 - 01037068 _____ (Thisisu) C:\Users\Janet\Downloads\JRT.exe
2014-01-19 11:27 - 2014-01-19 11:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Janet\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-19 11:23 - 2011-09-16 10:52 - 00000000 ____D C:\Users\Janet\AppData\Local\CrashDumps
2014-01-18 18:42 - 2014-01-18 18:42 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-18 16:05 - 2014-01-18 16:05 - 00000000 ____D C:\Users\Janet\Documents\My PSP Files
2014-01-18 16:05 - 2011-09-16 08:31 - 00000000 ____D C:\Users\Janet\AppData\Local\Corel
2014-01-18 16:05 - 2011-09-16 08:30 - 00003088 ___SH C:\Windows\SysWOW64\KGyGaAvL.sys
2014-01-18 15:26 - 2014-01-18 15:26 - 00032980 _____ C:\ComboFix.txt
2014-01-18 15:26 - 2014-01-18 15:11 - 00000000 ____D C:\Qoobox
2014-01-18 15:24 - 2014-01-18 15:11 - 00000000 ____D C:\Windows\erdnt
2014-01-18 15:24 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-18 15:10 - 2011-10-04 20:27 - 00000000 ____D C:\Users\Janet\Downloads\Programme
2014-01-18 14:55 - 2012-06-21 16:29 - 00000000 ____D C:\Users\Janet\Tracing
2014-01-17 23:48 - 2011-09-15 10:26 - 00000000 ____D C:\Users\Janet\AppData\Roaming\SoftGrid Client
2014-01-17 21:54 - 2014-01-17 21:53 - 00047528 _____ C:\Users\Janet\Downloads\Addition.txt
2014-01-17 21:50 - 2014-01-17 21:50 - 00000472 _____ C:\Users\Janet\Downloads\defogger_disable.log
2014-01-17 21:50 - 2014-01-17 21:50 - 00000000 _____ C:\Users\Janet\defogger_reenable
2014-01-17 21:50 - 2011-09-13 21:37 - 00000000 ____D C:\Users\Janet
2014-01-17 21:43 - 2014-01-17 21:43 - 00370610 _____ C:\Users\Janet\Downloads\gmer_2.1.19323.zip
2014-01-17 21:34 - 2014-01-17 21:33 - 00050477 _____ C:\Users\Janet\Downloads\Defogger.exe
2014-01-17 15:04 - 2013-09-07 19:49 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Free Download Manager
2014-01-17 07:49 - 2014-01-17 07:49 - 00002029 _____ C:\Users\Janet\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-17 07:49 - 2014-01-17 07:49 - 00001973 _____ C:\Users\Janet\Desktop\Avira EU-Cleaner.lnk
2014-01-16 23:50 - 2013-01-18 23:21 - 00000000 ____D C:\ProgramData\PhotoME
2014-01-16 23:49 - 2012-09-25 18:41 - 00000000 ____D C:\Users\Janet\AppData\Local\Google
2014-01-16 23:49 - 2012-09-25 18:41 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-16 23:48 - 2012-07-19 19:25 - 00000000 ____D C:\Program Files (x86)\OnlineFotoservice
2014-01-16 23:47 - 2012-07-19 21:47 - 00000000 ____D C:\Program Files (x86)\Pixum
2014-01-16 21:20 - 2014-01-14 22:40 - 00000000 ____D C:\Program Files (x86)\DVDFab 9
2014-01-16 20:28 - 2014-01-16 20:28 - 00000000 ____D C:\Users\Janet\Documents\Adobe
2014-01-16 20:28 - 2011-09-13 21:46 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Adobe
2014-01-16 16:54 - 2014-01-16 16:54 - 00000000 ____D C:\Users\Janet\Downloads\Neuer Ordner
2014-01-16 16:52 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft Video Converter Ultimate
2014-01-16 16:43 - 2009-07-14 05:45 - 03315920 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 00:43 - 2013-08-15 21:33 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 00:40 - 2011-09-17 19:34 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 23:22 - 2014-01-15 23:22 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft Video Converter Ultimate
2014-01-15 23:21 - 2014-01-15 23:21 - 00001446 _____ C:\Users\Public\Desktop\Aimersoft Video Converter Ultimate.lnk
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Users\Janet\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-01-15 23:21 - 2014-01-15 23:21 - 00000000 ____D C:\Program Files\Common Files\Aimersoft
2014-01-15 23:21 - 2014-01-15 21:46 - 00000000 ____D C:\Program Files (x86)\Aimersoft
2014-01-15 23:20 - 2014-01-15 23:19 - 36573803 _____ (Aimersoft Software ) C:\Users\Janet\Downloads\aimer-video-ultimate_full523.exe
2014-01-15 21:53 - 2014-01-15 21:53 - 00000000 ____D C:\ProgramData\xml_param
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Aimersoft DVD Ripper
2014-01-15 21:47 - 2014-01-15 21:46 - 00001220 _____ C:\Users\Janet\Desktop\Aimersoft DVD Ripper.lnk
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\Documents\Aimersoft DVD Ripper
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\Users\Janet\AppData\Local\Aimersoft
2014-01-15 21:46 - 2014-01-15 21:46 - 00000000 ____D C:\ProgramData\Aimersoft DVD Ripper
2014-01-15 07:23 - 2013-09-15 13:27 - 00000000 ____D C:\Users\Janet\AppData\Roaming\DivX
2014-01-15 00:23 - 2014-01-15 00:22 - 00000021 _____ C:\Windows\DVDShrink.txt
2014-01-15 00:22 - 2011-10-04 20:34 - 00000000 ____D C:\Users\Janet\AppData\Roaming\AVS4YOU
2014-01-15 00:21 - 2014-01-15 00:21 - 00001157 _____ C:\Users\Public\Desktop\AVS DVD Copy.lnk
2014-01-15 00:21 - 2012-02-04 23:32 - 00000000 ____D C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2014-01-15 00:21 - 2011-10-04 20:32 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2014-01-15 00:20 - 2014-01-15 00:19 - 14837688 _____ (Online Media Technologies Ltd. ) C:\Users\Janet\Downloads\AVSDVDCopy.exe
2014-01-15 00:11 - 2014-01-15 00:11 - 00000000 ____D C:\Users\Janet\AppData\Roaming\7168
2014-01-15 00:10 - 2014-01-15 00:10 - 00000000 ____D C:\Users\Janet\Documents\AnyDVDHD
2014-01-15 00:04 - 2014-01-15 00:04 - 00001105 _____ C:\Users\Public\Desktop\AnyDVD.lnk
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\ProgramData\SlySoft
2014-01-15 00:04 - 2014-01-15 00:04 - 00000000 ____D C:\Program Files (x86)\SlySoft
2014-01-14 23:36 - 2014-01-14 22:40 - 00000000 ____D C:\Users\Janet\Documents\DVDFab9
2014-01-14 22:16 - 2011-09-13 21:38 - 00000000 ____D C:\Users\Janet\AppData\Local\VirtualStore
2014-01-14 22:05 - 2014-01-14 22:03 - 00000000 ____D C:\ProgramData\DVD Shrink
2014-01-14 22:03 - 2014-01-14 22:02 - 00598086 _____ (DVD Shrink) C:\Users\Janet\Downloads\DVDShrink.exe
2014-01-12 09:29 - 2014-01-12 09:29 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2014-01-11 20:02 - 2012-02-16 22:55 - 00000000 ____D C:\Users\Janet\Documents\Rezepte
2014-01-08 16:23 - 2012-03-02 12:05 - 00000000 ____D C:\ProgramData\CanonIJPLM
2014-01-08 16:18 - 2014-01-08 16:18 - 00000724 _____ C:\Users\Janet\Desktop\index.html
2014-01-03 21:29 - 2014-01-03 21:15 - 990570856 _____ C:\Users\Janet\Downloads\Die_Weihnachtsgans_Auguste_2013-12-22_1545_307454.mp4
2013-12-30 21:47 - 2013-12-30 21:47 - 00000132 _____ C:\Users\Janet\Desktop\DVD Fatburner.ashprj
2013-12-27 20:57 - 2012-12-14 15:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-26 21:05 - 2013-12-26 21:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-25 22:31 - 2013-12-25 22:31 - 00000000 ___RD C:\Users\Janet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
Some content of TEMP:
====================
C:\Users\Janet\AppData\Local\Temp\avgnt.exe
C:\Users\Janet\AppData\Local\Temp\Quarantine.exe
C:\Users\Janet\AppData\Local\Temp\setup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-19 14:20
==================== End Of Log ============================
--- --- --- --- --- --- So habe alles erledigt. Es funktioniert eigentlich alles wieder sehr gut. Die einzelnen Programme habe ich jetzt aber noch nicht getestet. Ist jetzt alles sauber? |
|
21.01.2014, 10:58
| #9 |
| /// the machine /// TB-Ausbilder | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Adobe updaten. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.01.2014, 21:17
| #10 |
| | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Beim Abarbeiten der Liste bin ich bei Combofix und bekam ich folgende Meldung: Heutiges Datum ist 2014-01-21.Combofix ist abgelaufen. Klicke 'Ja' um Combofix in REDUZIERTER FUNKTIONIALITÄT auszuführen. Klicke 'Nein' um Combofix zu beenden. Und nun? Hab erst mal gestoppt an dieser Stelle und auf 'Nein' geklickt. Wie verfahre ich jetzt weiter? |
|
22.01.2014, 15:22
| #11 |
| /// the machine /// TB-Ausbilder | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Hast du an das Leerzeichen in dem Befehl gedacht?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.01.2014, 21:07
| #12 |
| | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Wer lesen kann ist klar im Vorteil. ;-) Die Leerstelle fehlte. Hat dann aber alles super funktioniert und System läuft auch stabil. Deine Hinweise habe ich umgesetzt. Vielen lieben Dank für Deine Hilfe. |
|
24.01.2014, 14:21
| #13 |
| /// the machine /// TB-Ausbilder | BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu BKA-Meldung blockierte Browser (IE 11)-jetzt alles wie immer,wurde etwas im Hintergrund installiert? |
| antivirus, auftrag, avira, bingbar, browser, canon, computer, converter, desktop, device driver, dllhost.exe, downloader, dvdvideosoft ltd., entfernen, error, eu-cleaner, fehler, firefox, flash player, free download, hdd0(c:, home, ie 11, launch, malware, mozilla, mp3, pmmupdate.exe, programm, realtek, registry, richtlinie, scan, security, svchost.exe, symantec, system, taskhost.exe, windows |
Linear-Darstellung
