Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen

weti · 11.08.2014, 19:05

Hallo Leute,

ich habe hier zwar jede Menge gelesen über das Thema, aber nichts trifft eigentlich so richtigh mein Problem.

Es ist folgendes: bei jedem Neustart ist die Einstellung 'Proxyserver für LAN verwenden' aktiviert (s.screenshot). Deshalb bekomme ich mit Chrome und mit dem IE keine Verbindung zum Internet (Firefox und Opera funktionieren tadellos). Da ich aber für bestimmte Addons den Chrome benutze ist es ziemlich nervig jedes Mal manuell den Proxyserver zu deaktivieren.

Es passieren keine ungewollten Internetverbindungen o.ä - zumindest merke ich nichts davon.

Betriebssystem ist Win7/64. Alle updates wurden gemacht. Auch die Softwareupdates.

Hat einer eine Idee, wie ich das beheben könnte.

Vielen Dank und schönen abend noch.
Werner

cosinus · 11.08.2014, 19:11

Hallo und

Eine Möglichkeit wäre: Malware. Die macht das schonmal ganz gerne, den Proxy aus den localhost zu setzen, damit dir im Browser schön manipulierte Seiten angezeigt werden oder brisante Daten mitgeschnitten werden können...

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

felix1 · 11.08.2014, 19:29

Zitat:

Zitat von weti

Es ist folgendes: bei jedem Neustart ist die Einstellung 'Proxyserver für LAN verwenden' aktiviert (s.screenshot). Deshalb bekomme ich mit Chrome und mit dem IE keine Verbindung zum Internet (Firefox und Opera funktionieren tadellos). Da ich aber für bestimmte Addons den Chrome benutze ist es ziemlich nervig jedes Mal manuell den Proxyserver zu deaktivieren.

Abgesehen von den Hinweisen von Cosinus, die Du unbedingt befolgen solltest, stellt sich mir hier die Frage: Wer hat in seinem Heimnetzwerk überhaupt einen Proxy am Laufen. Maximal den Router als DHCP- und DNS-Server.

cosinus · 11.08.2014, 19:34

Er hat bestimmt keinen Proxy, Felix, er will ja auch, dass es dauerhaft deaktiviert bleibt

felix1 · 11.08.2014, 19:42

Zitat:

Zitat von cosinus

Er hat bestimmt keinen Proxy, Felix, er will ja auch, dass es dauerhaft deaktiviert bleibt

Hallo Cosinus, das mit dem Proxy ist Deineseits vollkommen richtig

Aus den Postings geht aber nicht hervor, um welches BS es sich handelt und in welchen Netzwerken der PC schon registriert war/ist

cosinus · 11.08.2014, 19:43

Mööööp

er hats doch beschrieben welches OS

Zitat:

Zitat von weti

Betriebssystem ist Win7/64. Alle updates wurden gemacht. Auch die Softwareupdates.

weti · 12.08.2014, 09:46

Hallo Cosinus und die anderen,
erstmal vielen Dank für die Antworten. Ich habe einige scans gemacht, die ich anfüge. Vielleicht ist es untergegangen, aber ich habe dadurch keine Beinträchtigungen durch falsche Weiterleitungen beim surfen oder ähnliches. Chrome und IE verweigern nur die Internetverbindung mit dem Hinweis auf den Proxyserver.

Der FRST lässt sich nicht starten (keine Rückmeldung und das Programm muss manuell beendet werden). Vielleicht ist folgendes noch von Bedeutung: Ich konfiguriere meine Agfeo-Anlage über folgenden Link: hxxp://127.0.0.1:5080/. Das ist zumindest die gleiche IP aber mit einem anderen Port. Oder?

Hier die scans (die leider älter als 7 Tage sind, aber ich war in der Zwischenzeit häufig unterwegs, aber alle kurz nach dem Auftreten des Problems). :

Code:

ATTFilter

# AdwCleaner v3.216 - Bericht erstellt am 24/07/2014 um 20:26:35
# Aktualisiert 17/07/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Admin - ADMIN-PC
# Gestartet von : D:\Download\Aktuell\adwcleaner_3.216.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\prefs.js ]


-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [917 octets] - [24/07/2014 14:56:07]
AdwCleaner[R1].txt - [857 octets] - [24/07/2014 20:26:35]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [916 octets] ##########

Code:

ATTFilter

C:\Download\aktuell\GCSMSetup_3_5_20.exe	Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Download\aktuell\Unlocker1.9.1-x64.exe	Variante von Win32/Toolbar.Babylon evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Download\aktuell\vlc-2.0.5-win64.exe	Win32/StartPage.OPH Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
D:\Download\Grafik\DesignPro\SoftonicDownloader_fuer_avery-designpro.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
D:\Download\Musik\vlc-1.1.7-win32.exe	Win32/StartPage.OIE Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_internet_accelerator_3_3.20_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_uninstaller_4_4.22_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_winoptimizer_8_e8.13_sm.exe	Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
D:\GKT-Service\Medien\Gassner\Engel für Opa.exe	Variante von Win32/Adware.ToolPlugin.A Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_internet_accelerator_3_3.20_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_uninstaller_4_4.22_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_winoptimizer_8_e8.13_sm.exe	Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\DVD_Shrink_TSV31S5I.exe	Variante von Win32/Toolbar.Conduit.AE evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\GCSMSetup_3_5_20.exe	Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\SoftonicDownloader_fuer_avery-designpro.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\Unlocker1.9.1-x64.exe	Variante von Win32/Toolbar.Babylon evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.0.5-win64.exe	Win32/StartPage.OPH Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.0-win64.exe	NSIS/StartPage.CC Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.1-win64.exe	NSIS/StartPage.CC Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.3-win64.exe	NSIS/StartPage.CC Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Grafik\DesignPro\SoftonicDownloader_fuer_avery-designpro.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Musik\vlc-1.1.7-win32.exe	Win32/StartPage.OIE Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_internet_accelerator_3_3.20_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_uninstaller_4_4.22_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_winoptimizer_8_e8.13_sm.exe	Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\GKT-Service\Medien\Gassner\Engel für Opa.exe	Variante von Win32/Adware.ToolPlugin.A Anwendung	gelöscht - in Quarantäne kopiert

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Admin on 24.07.2014 at 20:42:13,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Successfully deleted the following from C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\tefcdjqq.default\prefs.js

user_pref("extensions.lastpass.searchforsiteswithinaddressbar", true);
Emptied folder: C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\tefcdjqq.default\minidumps [65 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.07.2014 at 20:48:55,68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus · 12.08.2014, 10:06

Zitat:

Der FRST lässt sich nicht starten (keine Rückmeldung und das Programm muss manuell beendet werden). Vielleicht ist folgendes noch von Bedeutung: Ich konfiguriere meine Agfeo-Anlage über folgenden Link: hxxp://127.0.0.1:5080/. Das ist zumindest die gleiche IP aber mit einem anderen Port. Oder?

FRST via Rechtsklick als Admin gestartet?

Mit deiner Agfeo hat dein Problem so nichts zu tun denke ich, deine Anlage ist "zufällig" auch über den localhost erreichbar, mach aber keinen Proxy. localhost ( = 127.0.0.1 ) ist immer der lokale Rechner, vor man gerade hockt

weti · 12.08.2014, 10:08

Ja, habe ich auch als Admin probiert - gleiches Ergenis. Das Programm steht still (keine Rückmeldung in der Kopfzeile).
Agfeo: Das ist aber die gleiche IP, die als >Adresse im Proxy angegeben wird (s. screenshot vom ersten Posting). Ich bin jetzt erstmal weg. Komme in ca 1 Stunde wieder. Und - danke nochmal. Ich bin richtig froh, dass es euch gibt. :-)

cosinus · 12.08.2014, 10:51

Ja schon klar

Es gibt aber noch zig andere Anwendungsbereiche für den localhost (127.0.0.1) siehe localhost ? Wikipedia

Das FRST nicht geht, würde ich mal CF vorschlagen:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

weti · 12.08.2014, 13:38

Hier der CombiFix-Log:

Code:

ATTFilter

ComboFix 14-08-12.01 - Admin 12.08.2014  14:29:43.2.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8169.6258 [GMT 2:00]
ausgeführt von:: c:\users\Admin\Desktop\ComboFix.exe
AV: BullGuard Antivirus *Disabled/Outdated* {C3CCAC61-52F7-A056-1860-6406566E2578}
FW: BullGuard Firewall *Disabled* {FBF72D44-1898-A10E-333F-CD33A8BD6203}
SP: BullGuard Antispyware *Disabled/Outdated* {78AD4D85-74CD-AFD8-22D0-5F742DE96FC5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
 ADS - Windows: deleted 192 bytes in 1 streams. 
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Admin\AppData\Local\assembly\tmp
c:\users\Admin\AppData\Local\assembly\tmp\00176MEY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\00176MEY\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\02P0M1FY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\02P0M1FY\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0DJKRJBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0DJKRJBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0DPEQADT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0DPEQADT\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0EIBWHKF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0EIBWHKF\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0LOFJ1O8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0LOFJ1O8\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0LXRKBXS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0LXRKBXS\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0WH7QEF0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0WH7QEF0\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\15LTBU6S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\15LTBU6S\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1C1WIVCG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1C1WIVCG\HtmlAgilityPack.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1JGQGLZU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1JGQGLZU\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1N0WUGSC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1N0WUGSC\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1ODANJKJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1ODANJKJ\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1PQ5GDN2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1PQ5GDN2\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1SQLZKDO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1SQLZKDO\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\22RXY89H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\22RXY89H\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\24CF2QW8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\24CF2QW8\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\24ZE7LTG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\24ZE7LTG\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\25MEH41H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\25MEH41H\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\27FCWMQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\27FCWMQF\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\27MVULCT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\27MVULCT\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\29NZXJCV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\29NZXJCV\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2BUHA8QU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2BUHA8QU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2CWTVAYO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2CWTVAYO\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2D0GTWDI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2D0GTWDI\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2FDSP8D0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2FDSP8D0\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2IGK9WM4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2IGK9WM4\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2Q97RSBL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2Q97RSBL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2RBGVGR1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2RBGVGR1\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2RUXCAQE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2RUXCAQE\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2ZFP77SH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2ZFP77SH\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\30387T1R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\30387T1R\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\35PL3TAM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\35PL3TAM\DevExpress.XtraBars.v12.2.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3732Z2Z1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3732Z2Z1\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3A64AH9J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3A64AH9J\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3Y6M888V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3Y6M888V\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\42YZ4C0R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\42YZ4C0R\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\44RJOMKY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\44RJOMKY\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\44T7J65D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\44T7J65D\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\450DHXK6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\450DHXK6\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\461I5MWY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\461I5MWY\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4888VCY6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4888VCY6\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4EM2ZUHM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4EM2ZUHM\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4HFG5GL3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4HFG5GL3\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4IQ9GQTD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4IQ9GQTD\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4JDNS8WW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4JDNS8WW\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4YWQ5P34\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4YWQ5P34\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\569X1N6D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\569X1N6D\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\57EESQU6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\57EESQU6\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5A4DHLZ3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5A4DHLZ3\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5A7Q1MGK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5A7Q1MGK\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5E9JWOOQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5E9JWOOQ\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5GGYW3PS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5GGYW3PS\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5J0Q9GWA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5J0Q9GWA\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5K8UIUHJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5K8UIUHJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5KXFFIWA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5KXFFIWA\Microsoft.SharePoint.Client.Runtime.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5L38UN5F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5L38UN5F\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5LW26AFE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5LW26AFE\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5PNQG3LM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5PNQG3LM\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5Q0AFU2Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5Q0AFU2Y\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5T6MXJ1J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5T6MXJ1J\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5VB4D8VH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5VB4D8VH\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5X3H4DKW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5X3H4DKW\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\60COTC1J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\60COTC1J\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\60N6LHS4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\60N6LHS4\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\68MTXXXP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\68MTXXXP\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\69UVAD2H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\69UVAD2H\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6BHF1UER\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6BHF1UER\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6D01O46F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6D01O46F\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6DBVQ1MZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6DBVQ1MZ\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6V0P5B4J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6V0P5B4J\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\70XXPII2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\70XXPII2\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\77MHLYTQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\77MHLYTQ\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\78KCU6BN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\78KCU6BN\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\78QDQ33V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\78QDQ33V\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\79XUCTWV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\79XUCTWV\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7CHZ2QG7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7CHZ2QG7\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7CPYE88B\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7CPYE88B\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7DVCCYGD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7DVCCYGD\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7GBTF7SF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7GBTF7SF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7LIP180C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7LIP180C\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7N2A06BU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7N2A06BU\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7NN9QIY0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7NN9QIY0\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7UT53HKN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7UT53HKN\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7VHTXXSM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7VHTXXSM\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7WR5960X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7WR5960X\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7YWIR8C5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7YWIR8C5\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\817OUN0Z\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\817OUN0Z\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\81JLTVFH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\81JLTVFH\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\83T1EZCZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\83T1EZCZ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\850YQX35\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8B7M90DH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8B7M90DH\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8F2KG91Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8F2KG91Q\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8NZ1EW9W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8NZ1EW9W\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8R930GNY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8R930GNY\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8TFP21VE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8TFP21VE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8U16ZJAX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8U16ZJAX\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8XLR9U28\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8XLR9U28\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\90QKRAEU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\90QKRAEU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\91HP1FC4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\91HP1FC4\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9CQFBUBU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9CQFBUBU\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9J2LVF2Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9J2LVF2Y\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9VDT7S5Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9VDT7S5Y\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9VQPXOMD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9VQPXOMD\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9XGL7WLH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9XGL7WLH\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9XHWUMK1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9XHWUMK1\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\A07AYL66\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\A07AYL66\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AF9SHG1Z\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AF9SHG1Z\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AJVPY44W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AJVPY44W\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AUGWQGV3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AUGWQGV3\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B1VO73V5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B1VO73V5\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B2KYY3NK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B2KYY3NK\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B7PYGCF7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B7PYGCF7\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B7TPGJ3K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B7TPGJ3K\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BB6ZWGUA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BB6ZWGUA\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BGSGD8J0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BGSGD8J0\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BMDJG8GY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BMDJG8GY\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BRMQOLQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BRMQOLQF\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BSOB3HLA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BSOB3HLA\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BXJ7A9T3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BXJ7A9T3\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BZ2DUKU2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BZ2DUKU2\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BZJU4MF5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BZJU4MF5\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C1RRDH7R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C1RRDH7R\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C5LC7M4H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C5LC7M4H\Chili.Opf3.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C8827MYH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C8827MYH\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C9YR03LC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C9YR03LC\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CF37C9M5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CF37C9M5\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CIZTBNVC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CIZTBNVC\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CJBN9PU7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CJBN9PU7\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CNKNU3KF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CNKNU3KF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CTWKMR58\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CTWKMR58\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D02AWTQL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D02AWTQL\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D5BRBHQ8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D5BRBHQ8\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D8RCOFFM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D8RCOFFM\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DM35IUDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DM35IUDU\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DO11LIV4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DO11LIV4\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DRVN20YM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DRVN20YM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DU7LF8WA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DU7LF8WA\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DU7ZVBYX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DU7ZVBYX\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DVHXT2DU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DVHXT2DU\Microsoft.SharePoint.Client.Runtime.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DY247WSZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DY247WSZ\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E1BR60VV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E1BR60VV\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E1TUOJQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E1TUOJQF\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E3P0V7X3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E3P0V7X3\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E4JZS6B5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E4JZS6B5\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E6OGGWVW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E6OGGWVW\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E8ZAUOT5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E8ZAUOT5\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E9IMZCIN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E9IMZCIN\ICSharpCode.SharpZipLib.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EBJAYLN8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EBJAYLN8\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ECB4QF5B\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ECB4QF5B\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EFWMK5WY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EFWMK5WY\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EKUYTGE9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EKUYTGE9\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EMUDB9E0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EMUDB9E0\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EN4WTXM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EN4WTXM1\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EQL8MPXS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EQL8MPXS\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EU6VVMBH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EU6VVMBH\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EW734FBR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EW734FBR\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EYMNE77X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EYMNE77X\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F0DMY1OF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F0DMY1OF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F3311M7W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F3311M7W\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F3KCXNMS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F3KCXNMS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FBDGKUMJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FBDGKUMJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FBUGBZRI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FBUGBZRI\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FCS9I47X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FCS9I47X\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FENXY2EW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FENXY2EW\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FFHTCDUS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FFHTCDUS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FKBBSQAI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FKBBSQAI\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FKIR5FLU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FKIR5FLU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FO0FW5IF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FO0FW5IF\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FV1YH2OL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FV1YH2OL\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FX4RWU13\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FX4RWU13\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FXPEBQ8R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FXPEBQ8R\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FYTSDNFS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FYTSDNFS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G66L1KPZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G66L1KPZ\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G77UAO3R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G77UAO3R\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G9CC0GQT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G9CC0GQT\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G9XQ6O2W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G9XQ6O2W\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GLYH2P4D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GLYH2P4D\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GMGB2WEK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GMGB2WEK\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GOWAN7RE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GOWAN7RE\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GRUBPH5I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GRUBPH5I\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GU1VDGVT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GU1VDGVT\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GUWVIMXN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GUWVIMXN\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GV4HU1R6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GV4HU1R6\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GYIJXWF8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GYIJXWF8\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H1W0ZLXG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H1W0ZLXG\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H44KERT8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H44KERT8\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H4LK4E0G\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H4LK4E0G\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H9UORZ0I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H9UORZ0I\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HAXIXM0N\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HAXIXM0N\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HI5PAYT3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HI5PAYT3\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HLKS089Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HLKS089Y\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HOXSTFIJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HOXSTFIJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HP0X8V2F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HP0X8V2F\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HUFXCWG1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HUFXCWG1\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HXGFPIVZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HXGFPIVZ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HZNQ4TMP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HZNQ4TMP\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HZXNZXO4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HZXNZXO4\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I43799JK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I43799JK\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I5GS9C1U\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I5GS9C1U\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I7DUJQNE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I7DUJQNE\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I9RRAMZQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I9RRAMZQ\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IDW2IAL3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IDW2IAL3\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IEJ927JP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IEJ927JP\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IL57ONAN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IL57ONAN\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IM8LJHED\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IM8LJHED\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IVDIYEF4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IVDIYEF4\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IW29T75T\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IW29T75T\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IWMPFSDX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IWMPFSDX\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IXIXKMAJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IXIXKMAJ\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\J0YRHZ97\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\J0YRHZ97\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\J8FRB0LO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\J8FRB0LO\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JDGNK879\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JDGNK879\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JMB22V1S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JMB22V1S\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JNIZO3JC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JNIZO3JC\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JU28PCLN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JU28PCLN\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JV3QS9GX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JV3QS9GX\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JYQ48KKE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JYQ48KKE\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\K3KGENYO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\K3KGENYO\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KGJYPEFP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KGJYPEFP\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KJT7RGWO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KJT7RGWO\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KKHQ6PG6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KKHQ6PG6\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KMGFS46J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KMGFS46J\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KQ5R6GR9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KQ5R6GR9\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KRRBT66X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KRRBT66X\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KS1TWMM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KS1TWMM1\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KUXW273K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KUXW273K\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KV8HTA0Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KV8HTA0Y\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KXG3HS3P\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KXG3HS3P\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KXS6HLHJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KXS6HLHJ\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KYKOBQ8K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KYKOBQ8K\DevExpress.Printing.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L1800O0E\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L1800O0E\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L2PMJRDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L2PMJRDU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L4BZ4ERQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L4BZ4ERQ\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L61BE4AL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L61BE4AL\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L6AJRSQ7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L6AJRSQ7\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L6X7K5X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L6X7K5X9\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LCGSGN68\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LCGSGN68\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LCWRRVI5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LCWRRVI5\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LJ9N4LPC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LJ9N4LPC\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LKA4Y66K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LKA4Y66K\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LOZXYQRC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LOZXYQRC\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LXWXV336\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LXWXV336\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LZNO1UBS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LZNO1UBS\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LZYCV9LC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LZYCV9LC\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M36UKHPO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M36UKHPO\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M5CI1KUM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M5CI1KUM\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M7HWGKYV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M7HWGKYV\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M9Q2CG5Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M9Q2CG5Y\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MB5ZFG90\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MB5ZFG90\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MCEJI3X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MCEJI3X9\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MEYS7LLL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MEYS7LLL\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MHQAMRBS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MHQAMRBS\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MKOTN4OK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MKOTN4OK\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MMSZGEG8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MMSZGEG8\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MN9C5L70\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MN9C5L70\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MXJYPMVL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MXJYPMVL\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MZ8QHHN8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MZ8QHHN8\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N335013C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N335013C\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N3XIRRNP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N3XIRRNP\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N46117BO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N46117BO\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N6POGPWZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N6POGPWZ\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N799WWDC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N799WWDC\HtmlAgilityPack.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N8DL9EHR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N8DL9EHR\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NEHQOGLV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NEHQOGLV\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NEJ89626\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NEJ89626\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NITH4G4O\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NITH4G4O\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NLIPBKO3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NLIPBKO3\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NN4US37H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NN4US37H\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NNLSGP0M\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NNLSGP0M\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NRJZX8FY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NRJZX8FY\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NSM1DZZS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NSM1DZZS\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\O42FQKO6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\O42FQKO6\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\O650S1WB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\O650S1WB\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OAYE6J1V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OAYE6J1V\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ODGIIQJ2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ODGIIQJ2\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OFUIKS7S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OHFF4AR0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OHFF4AR0\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OOVLMASJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OOVLMASJ\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OP0T6XNY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OP0T6XNY\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OP44XWU4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OP44XWU4\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OX850J3R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OX850J3R\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OZ6DCAV6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OZ6DCAV6\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\P1LUS3X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\P1LUS3X9\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\P7K1T36U\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\P7K1T36U\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PK1UJOJX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PK1UJOJX\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PL97WPXE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PL97WPXE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PNR9K3RF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PNR9K3RF\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\POCFFBM9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\POCFFBM9\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\POWDKR17\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\POWDKR17\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PPK6CFMK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PPK6CFMK\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PPQKH495\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PPQKH495\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PTZG0D0C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PTZG0D0C\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PVICPKCA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PVICPKCA\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PWGJOZ0A\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PWGJOZ0A\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q3ZXPVO9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q3ZXPVO9\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q47NG3GB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q47NG3GB\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q7Z993WE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q7Z993WE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QA1CM2Z7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QA1CM2Z7\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QB6GMQDA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QB6GMQDA\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBHWCLK1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBHWCLK1\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBSSLIZU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBSSLIZU\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBTO24LU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBTO24LU\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QD07SYWS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QD07SYWS\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QG1H3LOR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QG1H3LOR\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QIDHPK3C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QIDHPK3C\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QM3Y64Y4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QM3Y64Y4\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QTXLMVL0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QTXLMVL0\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QZSQGD9F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QZSQGD9F\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\R1O7PNGC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\R1O7PNGC\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RDYIOEKT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RDYIOEKT\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RI81GHDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RI81GHDU\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RKIFF7VN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RKIFF7VN\ICSharpCode.SharpZipLib.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RMRY77BH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RMRY77BH\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RMYTW89Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RMYTW89Q\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQ8SQRI3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQ8SQRI3\DevExpress.Office.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQO39BMH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQO39BMH\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQQ9N2S6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQQ9N2S6\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RS85W7MU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RS85W7MU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RX712BE8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RX712BE8\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S16STBFU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S16STBFU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S1GHY36T\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S1GHY36T\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S3G0QMEL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S3G0QMEL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S4TD3ID4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S4TD3ID4\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S7UAI9TT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S7UAI9TT\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SD2ADHZ4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SD2ADHZ4\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SKI2NW6V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SKI2NW6V\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SNCQ2NC3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SNCQ2NC3\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SSIF93NA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SSIF93NA\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SZ7AYZ0G\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SZ7AYZ0G\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\T4A1QM0R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\T4A1QM0R\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\T9AG0L4N\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\T9AG0L4N\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TA3YBOTW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TA3YBOTW\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TIXIPYLC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TIXIPYLC\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TK14HDBJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TK14HDBJ\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TKSDHL0X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TKSDHL0X\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TQVHE83C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TQVHE83C\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TQWXWVGR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TQWXWVGR\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TRZN2E77\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TRZN2E77\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TV2J4M72\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TV2J4M72\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TZJDEOZH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TZJDEOZH\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\U0S2J4AE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\U0S2J4AE\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\U8QU2JPJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\U8QU2JPJ\DevExpress.Printing.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UDQ9J3GN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UDQ9J3GN\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UGTUC5UP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UGTUC5UP\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UHDURG79\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UHDURG79\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UHGEZTIL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UHGEZTIL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UJNA38F9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UJNA38F9\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UODTD17L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UODTD17L\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UP86O7VT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UP86O7VT\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UWCCQT7Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UWCCQT7Q\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UWTHQMGS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UWTHQMGS\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UZK7WEI1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UZK7WEI1\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V01IOHRT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V01IOHRT\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V32FEWT0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V32FEWT0\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V95FYU6V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V95FYU6V\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VFG8L427\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VFG8L427\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VHEQYW1I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VHEQYW1I\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VJ3CSPAM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VJ3CSPAM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VN899DI5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VN899DI5\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VUI212B6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VUI212B6\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\W8BG7BDG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\W8BG7BDG\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WA2BSSM0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WA2BSSM0\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WJCT1O5K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WJCT1O5K\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WSBGNXER\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WSBGNXER\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WZC015ED\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WZC015ED\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X3GMCLIT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X3GMCLIT\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X69OIH8Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X69OIH8Q\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X99QDUM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X99QDUM1\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X9VQ356S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X9VQ356S\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XAP8NSFS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XAP8NSFS\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XCMM330L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XCMM330L\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XCRS2UII\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XCRS2UII\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XKD79N6W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XKD79N6W\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XKPIXYUO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XKPIXYUO\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XLO3FYVJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XLO3FYVJ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XTSIGP9E\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XTSIGP9E\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XUDVMF7C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XUDVMF7C\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XXZTK8Z6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XXZTK8Z6\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XYBG0BKM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XYBG0BKM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Y8D6Z7PE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Y8D6Z7PE\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YA6WAOLG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YA6WAOLG\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YAI1STYP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YAI1STYP\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YFEBZ84S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YFEBZ84S\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YGT0VEFA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YGT0VEFA\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YHBLGMFC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YHBLGMFC\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YITUTSBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YITUTSBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YNE3Q3DH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YNE3Q3DH\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z0CQCRZ7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z0CQCRZ7\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z14F7AIC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z14F7AIC\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z2NHX6GK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z2NHX6GK\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z7NLY5QN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z7NLY5QN\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z8QR5U97\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z8QR5U97\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z8QVFVWU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z8QVFVWU\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZI8XAH68\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZI8XAH68\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZJATRXQG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZJATRXQG\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZJF76JA3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZJF76JA3\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZL3XBGGL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZL3XBGGL\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZMWJKPU9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZMWJKPU9\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZP023IW4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZP023IW4\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZQ1OKU5L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZQ1OKU5L\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZRCM5QDB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZRCM5QDB\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZT73CFE6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZT73CFE6\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZV6P0CVK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZV6P0CVK\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZXKPH2F7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZXKPH2F7\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZXR1LZNJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZXR1LZNJ\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZYCMUHBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZYCMUHBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\0545F7B45A7B4420A820F73747615E31@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\068D6D3A935D4E28989E038B86DF9F65@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\29AB98FE146F44F299E231AE5CF8F5B0@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\339B38CA77414F5199E2135697588B85@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\C3515C3602AB4A41A1A7353E5DE7F1E3@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9C2F.7B7BA350
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9D0E.9CB95B90
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9D19.D98DB600
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CFB23E.0226AFC0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CFB23E.439553D0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.png@01CFB320.D2D47CA0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image002.jpg@01CFAFE5.041D89D0
c:\users\Admin\AppData\Roaming\457
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-07-12 bis 2014-08-12  ))))))))))))))))))))))))))))))
.
.
2014-08-12 12:33 . 2014-08-12 12:33	--------	d-----w-	c:\users\Public\AppData\Local\temp
2014-08-12 12:33 . 2014-08-12 12:33	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-08-12 08:12 . 2014-07-14 02:12	10924376	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{CF394883-27E3-4444-8D50-C5551DFC75CF}\mpengine.dll
2014-08-07 06:34 . 2014-08-07 06:34	153712	----a-w-	c:\windows\system32\BgGamingMonitor.dll
2014-08-07 06:34 . 2014-08-07 06:34	140280	----a-w-	c:\windows\SysWow64\BgGamingMonitor.dll
2014-07-31 10:55 . 2014-07-31 10:55	64336	----a-w-	c:\windows\SysWow64\BGLsp.dll
2014-07-31 10:55 . 2014-07-31 10:55	76624	----a-w-	c:\windows\system32\BGLsp.dll
2014-07-28 18:54 . 2014-07-28 18:54	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-28 18:54 . 2014-07-28 18:54	--------	d-----w-	c:\program files (x86)\Java
2014-07-25 15:40 . 2014-07-25 15:40	--------	d-----w-	c:\users\Admin\AppData\Roaming\23753
2014-07-25 15:34 . 2014-07-25 15:34	--------	d-----w-	c:\users\Admin\AppData\Roaming\22590
2014-07-25 14:00 . 2014-07-25 14:00	--------	d-----w-	c:\users\Admin\AppData\Local\PackageAware
2014-07-24 18:42 . 2014-07-24 18:42	--------	d-----w-	c:\windows\ERUNT
2014-07-24 18:37 . 2014-07-24 18:37	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-07-24 16:48 . 2014-01-09 02:22	5694464	----a-w-	c:\windows\SysWow64\mstscax.dll
2014-07-24 16:48 . 2014-01-03 22:44	6574592	----a-w-	c:\windows\system32\mstscax.dll
2014-07-24 14:27 . 2014-05-08 09:32	3178496	----a-w-	c:\windows\system32\rdpcorets.dll
2014-07-24 14:27 . 2014-05-08 09:32	16384	----a-w-	c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-24 14:17 . 2012-08-23 14:10	19456	----a-w-	c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-24 14:17 . 2012-08-23 14:13	243200	----a-w-	c:\windows\system32\rdpudd.dll
2014-07-24 14:17 . 2012-08-23 11:12	192000	----a-w-	c:\windows\SysWow64\rdpendp_winip.dll
2014-07-24 14:17 . 2012-08-23 10:51	228864	----a-w-	c:\windows\system32\rdpendp_winip.dll
2014-07-24 13:15 . 2013-09-25 02:23	1030144	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-07-24 13:15 . 2013-09-25 01:57	792576	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
2014-07-24 12:54 . 2013-07-14 15:32	4009167	----a-w-	C:\ServicesRepair.exe
2014-07-24 12:54 . 2014-07-24 12:35	1354223	----a-w-	C:\AdwCleaner(17).exe
2014-07-24 12:38 . 2014-07-24 12:38	--------	d-s---w-	c:\windows\SysWow64\Microsoft
2014-07-21 18:44 . 2014-07-21 18:44	--------	d-----w-	c:\users\Admin\AppData\Roaming\ASP
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-09 10:29 . 2012-08-08 07:58	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-09 10:29 . 2012-08-08 07:58	699056	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-09 09:08 . 2012-08-07 15:59	96441528	----a-w-	c:\windows\system32\MRT.exe
2014-06-30 02:09 . 2014-07-09 06:02	519168	----a-w-	c:\windows\system32\aepdu.dll
2014-06-30 02:04 . 2014-07-09 06:02	424448	----a-w-	c:\windows\system32\aeinv.dll
2014-06-20 20:14 . 2014-07-09 06:02	266424	----a-w-	c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 06:02	23464448	----a-w-	c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 06:02	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 06:02	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 06:02	2768384	----a-w-	c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 06:02	548352	----a-w-	c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 06:02	66048	----a-w-	c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 06:02	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 06:02	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 06:02	51200	----a-w-	c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 06:02	33792	----a-w-	c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 06:02	598016	----a-w-	c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 06:02	139264	----a-w-	c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 06:02	111616	----a-w-	c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 06:02	752640	----a-w-	c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 06:02	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 06:02	452608	----a-w-	c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 06:02	38400	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 06:02	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 06:02	195584	----a-w-	c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 06:02	5721088	----a-w-	c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 06:02	85504	----a-w-	c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 06:02	292864	----a-w-	c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 06:02	608768	----a-w-	c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 06:02	455168	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 06:02	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 06:02	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 06:02	62464	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 06:02	631808	----a-w-	c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 06:02	1249280	----a-w-	c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 06:02	2040832	----a-w-	c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 06:02	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 06:02	592896	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 06:02	32256	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 06:02	2266112	----a-w-	c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 06:02	4254720	----a-w-	c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 06:02	13527040	----a-w-	c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 06:02	1068032	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 06:02	1964544	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 06:02	1393664	----a-w-	c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 06:02	846336	----a-w-	c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 06:02	1791488	----a-w-	c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 06:02	692736	----a-w-	c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 06:02	646144	----a-w-	c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 06:02	3157504	----a-w-	c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 06:02	624128	----a-w-	c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 06:02	509440	----a-w-	c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 06:01	1460736	----a-w-	c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 06:01	22016	----a-w-	c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 06:01	96768	----a-w-	c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 06:02	210944	----a-w-	c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 06:02	86528	----a-w-	c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 06:02	340992	----a-w-	c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 06:02	314880	----a-w-	c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 06:02	307200	----a-w-	c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 06:02	728064	----a-w-	c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 06:02	22016	----a-w-	c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 06:02	172032	----a-w-	c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 06:02	65536	----a-w-	c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 06:02	247808	----a-w-	c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 06:02	220160	----a-w-	c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 06:02	259584	----a-w-	c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 06:02	550912	----a-w-	c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 06:02	17408	----a-w-	c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 06:02	497152	----a-w-	c:\windows\system32\drivers\afd.sys
2014-05-28 14:07 . 2014-05-19 12:16	117184	----a-w-	c:\windows\system32\drivers\BdAgent.sys
2014-05-19 12:16 . 2013-03-18 13:25	67680	----a-w-	c:\windows\system32\drivers\BdSpy.sys
2014-05-19 12:16 . 2012-11-20 13:11	42760	----a-r-	c:\windows\system32\drivers\afw.sys
2014-05-19 12:16 . 2012-10-04 07:38	34896	----a-w-	c:\windows\system32\drivers\BdNet.sys
2014-05-19 12:16 . 2012-06-26 09:48	27544	----a-w-	c:\windows\system32\drivers\NSNetmon.sys
2014-05-19 12:16 . 2012-06-26 09:48	296368	----a-w-	c:\windows\system32\drivers\NSKernel.sys
2014-05-19 12:16 . 2012-11-20 13:11	469256	----a-r-	c:\windows\system32\drivers\afwcore.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"CAHeadless"="c:\program files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe" [2014-05-09 1401040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"sysTPL"="c:\program files (x86)\sysTPL\sysTPL.exe" [2014-02-07 1244440]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-02-21 152392]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
.
c:\users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Evoluent Mouse Manager.lnk - c:\windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe [2012-8-8 4286]
PhraseExpress.lnk - c:\program files (x86)\PhraseExpress\phraseexpress.exe [2012-8-9 22427944]
ProCall One.lnk - c:\program files (x86)\ESTOS\ProCall One\ECtiClientOne.exe [2013-12-16 19845120]
TK-Suite Client.lnk - c:\program files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe [2013-8-20 7351928]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Das Telefonbuch Browserlösung.lnk - c:\program files (x86)\TVG\DasTelefonbuch Deutschland\http_tfd.exe [2014-4-8 20992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]
R2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]
R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vidsflt67;Acronis Disk Storage Filter (67);c:\windows\system32\DRIVERS\vsflt67.sys;c:\windows\SYSNATIVE\DRIVERS\vsflt67.sys [x]
S1 AFW;Agnitum Firewall Driver;c:\windows\system32\DRIVERS\afw.sys;c:\windows\SYSNATIVE\DRIVERS\afw.sys [x]
S1 BdAgent;BullGuard Security Agent;c:\windows\system32\DRIVERS\BdAgent.sys;c:\windows\SYSNATIVE\DRIVERS\BdAgent.sys [x]
S1 BdSpy;BdSpy;c:\windows\system32\drivers\BdSpy.sys;c:\windows\SYSNATIVE\drivers\BdSpy.sys [x]
S1 NovaShieldFilterDriver;NovaShieldFilterDriver;c:\windows\system32\DRIVERS\NSKernel.sys;c:\windows\SYSNATIVE\DRIVERS\NSKernel.sys [x]
S1 NovaShieldTDIDriver;NovaShieldTDIDriver;c:\windows\system32\DRIVERS\NSNetmon.sys;c:\windows\SYSNATIVE\DRIVERS\NSNetmon.sys [x]
S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BsBackup;BullGuard backup service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsBhvScan;BullGuard Behavioural Detection;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe [x]
S2 BsCache;BullGuard CODS service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFileScan;BullGuard on-access service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFire;BullGuard firewall service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMailProxy;BullGuard e-mail monitoring service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMain;BullGuard main service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsScanner;BullGuard scanning service;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe [x]
S2 BsUpdate;BullGuard update service;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe [x]
S2 cjpcsc;cyberJack PC/SC COM Service ;c:\windows\SysWOW64\cjpcsc.exe;c:\windows\SysWOW64\cjpcsc.exe [x]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe;c:\windows\SysWOW64\nlssrv32.exe [x]
S2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 tksock;TK-Suite Server;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe [x]
S2 TVGOnlineUpdateSvc;TVG OnlineUpdate-Service;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe [x]
S3 afwcore;afwcore;c:\windows\system32\DRIVERS\afwcore.sys;c:\windows\SYSNATIVE\DRIVERS\afwcore.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Driver;c:\windows\system32\DRIVERS\AVMCOWAN.sys;c:\windows\SYSNATIVE\DRIVERS\AVMCOWAN.sys [x]
S3 BdNet;BdNet;c:\windows\system32\drivers\BdNet.sys;c:\windows\SYSNATIVE\drivers\BdNet.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 cjusb;REINER SCT cyberJack USB Driver;c:\windows\system32\DRIVERS\cjusb.sys;c:\windows\SYSNATIVE\DRIVERS\cjusb.sys [x]
S3 EvoMouseDriverFilterHidUsb;Evoluent Mouse Driver Filter;c:\windows\system32\DRIVERS\EvoMouseDriverFilterHidUsb.sys;c:\windows\SYSNATIVE\DRIVERS\EvoMouseDriverFilterHidUsb.sys [x]
S3 EvoMouseDriverMini;EvoMouseDriverMini;c:\windows\system32\drivers\EvoMouseDriverMini.sys;c:\windows\SYSNATIVE\drivers\EvoMouseDriverMini.sys [x]
S3 FPCIBASE;AVM FRITZ!Card PCI;c:\windows\system32\DRIVERS\fpcibase.sys;c:\windows\SYSNATIVE\DRIVERS\fpcibase.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-07-18 07:47	1104200	----a-w-	c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-08-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-08 10:29]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2014-05-05 08:19]
.
2014-08-08 c:\windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job
- c:\users\Admin\AppData\Local\yourTime\yourMail\components\schedule\yourMail Free Edition Updates.lnk [2013-05-20 18:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayErr]
@="{8749448C-D907-45BF-A842-4D3898894AC8}"
[HKEY_CLASSES_ROOT\CLSID\{8749448C-D907-45BF-A842-4D3898894AC8}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayInProgress]
@="{3FFBF330-7839-476B-BE14-2C8597CE11B6}"
[HKEY_CLASSES_ROOT\CLSID\{3FFBF330-7839-476B-BE14-2C8597CE11B6}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlaySynced]
@="{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}"
[HKEY_CLASSES_ROOT\CLSID\{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BullGuardUpdate2"="c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe" [2014-08-06 2933584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2014-08-07 1319248]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-10-27 613536]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-10-27 379040]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-06-03 472984]
"BgDelayStartup"="c:\program files\bullguard ltd\bullguard\BgDelayStartup.exe" [2014-07-31 86352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\BgAgent.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyServer = http=127.0.0.1:8877
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: An SchnapperPlus senden - c:\program files (x86)\SchnapperPlus\SchnapperPlusMenu.js
IE: LastPass - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-TWAIN - c:\windows\IsUn0407.exe
AddRemove-MyFreeCodec - c:\program files (x86)\MyFree Codec\1.0b beta\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-08-12  14:34:38
ComboFix-quarantined-files.txt  2014-08-12 12:34
ComboFix2.txt  2013-07-27 18:05
.
Vor Suchlauf: 16 Verzeichnis(se), 51.002.245.120 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 50.607.427.584 Bytes frei
.
- - End Of File - - 1BE2C461AD3E6F6C6BC7685784E2F5B1
4D3FFB2728D7BB129968845914D24193

cosinus · 12.08.2014, 15:14

Combofix-Skript

WARNUNG für die MITLESER:
Folgendes ComboFix Skript ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
Lösche die vorhandene Combofix.exe von deinem Desktop und lade das Programm von folgenden Download-Spiegel neu herunter: Link

Speichere es erneut auf dem Desktop (nicht woanders hin, das ist wichtig)!

Drücke die Windows + R Taste --> notepad (hinein schreiben) --> OK
Kopiere nun den Text aus der folgenden Codebox komplett in das leere Textdokument.
Code:
ATTFilter
Folder::
c:\users\Admin\AppData\Roaming\23753
c:\users\Admin\AppData\Roaming\22590
         
Speichere dies als CFScript.txt auf deinem Desktop.

Wichtig: Stelle deine Anti Viren Software temporär ab. Dies kann ComboFix nämlich bei der Arbeit behindern.
Danach wieder anstellen nicht vergessen!

Schließe alle laufenden Programme damit ComboFix ungehindert arbeiten kann.

Ziehe CFScript.txt in die ComboFix.exe wie in diesem Bild:

Mache nichts am Computer, bewege nicht die Maus über das ComboFix-Fenster oder klicke in dieses hinein. Dies kann dazu führen, dass ComboFix sich aufhängt.

Wenn ComboFix fertig ist wird es ein Log erstellen: C:\ComboFix.txt
Bitte füge es hier als Antwort (in CODE-Tags mit dem #-Button des Editors) ein.
Hinweis:
Suspect:: und Collect::
Falls im Skript diese Anweisungen enthalten sind, sollen Dateien zur Analyse eingeschickt werden. Es erscheint eine Message-Box, nachdem Combofix fertig ist. Klicke OK und folge den Aufforderungen/Anweisungen, um die Dateien hochzuladen. Teile mir unbedingt mit, ob der Upload geklappt hat!

weti · 12.08.2014, 15:27

Sorry Cosinus - aber FRST funzt ja nicht. Soll ich das dann mit Combofix machen?

cosinus · 12.08.2014, 15:27

Ups sry, bin auf den falschen Button gekommen

Ist korrigiert

weti · 12.08.2014, 17:01

Kein Ssupect oder Collect enhalten, keine Datei hochgeladen. Hier der Logtext:

Code:

ATTFilter

ComboFix 14-08-12.01 - Admin 12.08.2014  16:35:42.3.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8169.5400 [GMT 2:00]
ausgeführt von:: c:\users\Admin\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\Admin\Desktop\CFScript.txt
AV: BullGuard Antivirus *Disabled/Outdated* {C3CCAC61-52F7-A056-1860-6406566E2578}
FW: BullGuard Firewall *Disabled* {FBF72D44-1898-A10E-333F-CD33A8BD6203}
SP: BullGuard Antispyware *Disabled/Outdated* {78AD4D85-74CD-AFD8-22D0-5F742DE96FC5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Admin\AppData\Local\assembly\tmp
c:\users\Admin\AppData\Roaming\22590
c:\users\Admin\AppData\Roaming\23753
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-07-12 bis 2014-08-12  ))))))))))))))))))))))))))))))
.
.
2014-08-12 14:38 . 2014-08-12 14:38	--------	d-----w-	c:\users\Public\AppData\Local\temp
2014-08-12 14:38 . 2014-08-12 14:38	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-08-12 08:12 . 2014-07-14 02:12	10924376	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{CF394883-27E3-4444-8D50-C5551DFC75CF}\mpengine.dll
2014-08-07 06:34 . 2014-08-07 06:34	153712	----a-w-	c:\windows\system32\BgGamingMonitor.dll
2014-08-07 06:34 . 2014-08-07 06:34	140280	----a-w-	c:\windows\SysWow64\BgGamingMonitor.dll
2014-07-31 10:55 . 2014-07-31 10:55	64336	----a-w-	c:\windows\SysWow64\BGLsp.dll
2014-07-31 10:55 . 2014-07-31 10:55	76624	----a-w-	c:\windows\system32\BGLsp.dll
2014-07-28 18:54 . 2014-07-28 18:54	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-28 18:54 . 2014-07-28 18:54	--------	d-----w-	c:\program files (x86)\Java
2014-07-25 14:00 . 2014-07-25 14:00	--------	d-----w-	c:\users\Admin\AppData\Local\PackageAware
2014-07-24 18:42 . 2014-07-24 18:42	--------	d-----w-	c:\windows\ERUNT
2014-07-24 18:37 . 2014-07-24 18:37	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-07-24 16:48 . 2014-01-09 02:22	5694464	----a-w-	c:\windows\SysWow64\mstscax.dll
2014-07-24 16:48 . 2014-01-03 22:44	6574592	----a-w-	c:\windows\system32\mstscax.dll
2014-07-24 14:27 . 2014-05-08 09:32	3178496	----a-w-	c:\windows\system32\rdpcorets.dll
2014-07-24 14:27 . 2014-05-08 09:32	16384	----a-w-	c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-24 14:17 . 2012-08-23 14:10	19456	----a-w-	c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-24 14:17 . 2012-08-23 14:13	243200	----a-w-	c:\windows\system32\rdpudd.dll
2014-07-24 14:17 . 2012-08-23 11:12	192000	----a-w-	c:\windows\SysWow64\rdpendp_winip.dll
2014-07-24 14:17 . 2012-08-23 10:51	228864	----a-w-	c:\windows\system32\rdpendp_winip.dll
2014-07-24 13:15 . 2013-09-25 02:23	1030144	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-07-24 13:15 . 2013-09-25 01:57	792576	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
2014-07-24 12:54 . 2013-07-14 15:32	4009167	----a-w-	C:\ServicesRepair.exe
2014-07-24 12:54 . 2014-07-24 12:35	1354223	----a-w-	C:\AdwCleaner(17).exe
2014-07-24 12:38 . 2014-07-24 12:38	--------	d-s---w-	c:\windows\SysWow64\Microsoft
2014-07-21 18:44 . 2014-07-21 18:44	--------	d-----w-	c:\users\Admin\AppData\Roaming\ASP
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-09 10:29 . 2012-08-08 07:58	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-09 10:29 . 2012-08-08 07:58	699056	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-09 09:08 . 2012-08-07 15:59	96441528	----a-w-	c:\windows\system32\MRT.exe
2014-06-30 02:09 . 2014-07-09 06:02	519168	----a-w-	c:\windows\system32\aepdu.dll
2014-06-30 02:04 . 2014-07-09 06:02	424448	----a-w-	c:\windows\system32\aeinv.dll
2014-06-20 20:14 . 2014-07-09 06:02	266424	----a-w-	c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 06:02	23464448	----a-w-	c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 06:02	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 06:02	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 06:02	2768384	----a-w-	c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 06:02	548352	----a-w-	c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 06:02	66048	----a-w-	c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 06:02	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 06:02	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 06:02	51200	----a-w-	c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 06:02	33792	----a-w-	c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 06:02	598016	----a-w-	c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 06:02	139264	----a-w-	c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 06:02	111616	----a-w-	c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 06:02	752640	----a-w-	c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 06:02	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 06:02	452608	----a-w-	c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 06:02	38400	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 06:02	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 06:02	195584	----a-w-	c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 06:02	5721088	----a-w-	c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 06:02	85504	----a-w-	c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 06:02	292864	----a-w-	c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 06:02	608768	----a-w-	c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 06:02	455168	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 06:02	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 06:02	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 06:02	62464	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 06:02	631808	----a-w-	c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 06:02	1249280	----a-w-	c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 06:02	2040832	----a-w-	c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 06:02	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 06:02	592896	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 06:02	32256	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 06:02	2266112	----a-w-	c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 06:02	4254720	----a-w-	c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 06:02	13527040	----a-w-	c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 06:02	1068032	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 06:02	1964544	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 06:02	1393664	----a-w-	c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 06:02	846336	----a-w-	c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 06:02	1791488	----a-w-	c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 06:02	692736	----a-w-	c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 06:02	646144	----a-w-	c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 06:02	3157504	----a-w-	c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 06:02	624128	----a-w-	c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 06:02	509440	----a-w-	c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 06:01	1460736	----a-w-	c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 06:01	22016	----a-w-	c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 06:01	96768	----a-w-	c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 06:02	210944	----a-w-	c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 06:02	86528	----a-w-	c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 06:02	340992	----a-w-	c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 06:02	314880	----a-w-	c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 06:02	307200	----a-w-	c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 06:02	728064	----a-w-	c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 06:02	22016	----a-w-	c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 06:02	172032	----a-w-	c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 06:02	65536	----a-w-	c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 06:02	247808	----a-w-	c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 06:02	220160	----a-w-	c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 06:02	259584	----a-w-	c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 06:02	550912	----a-w-	c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 06:02	17408	----a-w-	c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 06:02	497152	----a-w-	c:\windows\system32\drivers\afd.sys
2014-05-28 14:07 . 2014-05-19 12:16	117184	----a-w-	c:\windows\system32\drivers\BdAgent.sys
2014-05-19 12:16 . 2013-03-18 13:25	67680	----a-w-	c:\windows\system32\drivers\BdSpy.sys
2014-05-19 12:16 . 2012-11-20 13:11	42760	----a-r-	c:\windows\system32\drivers\afw.sys
2014-05-19 12:16 . 2012-10-04 07:38	34896	----a-w-	c:\windows\system32\drivers\BdNet.sys
2014-05-19 12:16 . 2012-06-26 09:48	27544	----a-w-	c:\windows\system32\drivers\NSNetmon.sys
2014-05-19 12:16 . 2012-06-26 09:48	296368	----a-w-	c:\windows\system32\drivers\NSKernel.sys
2014-05-19 12:16 . 2012-11-20 13:11	469256	----a-r-	c:\windows\system32\drivers\afwcore.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"CAHeadless"="c:\program files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe" [2014-05-09 1401040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"sysTPL"="c:\program files (x86)\sysTPL\sysTPL.exe" [2014-02-07 1244440]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-02-21 152392]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
.
c:\users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Evoluent Mouse Manager.lnk - c:\windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe [2012-8-8 4286]
PhraseExpress.lnk - c:\program files (x86)\PhraseExpress\phraseexpress.exe [2012-8-9 22427944]
ProCall One.lnk - c:\program files (x86)\ESTOS\ProCall One\ECtiClientOne.exe [2013-12-16 19845120]
TK-Suite Client.lnk - c:\program files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe [2013-8-20 7351928]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Das Telefonbuch Browserlösung.lnk - c:\program files (x86)\TVG\DasTelefonbuch Deutschland\http_tfd.exe [2014-4-8 20992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]
R2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]
R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vidsflt67;Acronis Disk Storage Filter (67);c:\windows\system32\DRIVERS\vsflt67.sys;c:\windows\SYSNATIVE\DRIVERS\vsflt67.sys [x]
S1 AFW;Agnitum Firewall Driver;c:\windows\system32\DRIVERS\afw.sys;c:\windows\SYSNATIVE\DRIVERS\afw.sys [x]
S1 BdAgent;BullGuard Security Agent;c:\windows\system32\DRIVERS\BdAgent.sys;c:\windows\SYSNATIVE\DRIVERS\BdAgent.sys [x]
S1 BdSpy;BdSpy;c:\windows\system32\drivers\BdSpy.sys;c:\windows\SYSNATIVE\drivers\BdSpy.sys [x]
S1 NovaShieldFilterDriver;NovaShieldFilterDriver;c:\windows\system32\DRIVERS\NSKernel.sys;c:\windows\SYSNATIVE\DRIVERS\NSKernel.sys [x]
S1 NovaShieldTDIDriver;NovaShieldTDIDriver;c:\windows\system32\DRIVERS\NSNetmon.sys;c:\windows\SYSNATIVE\DRIVERS\NSNetmon.sys [x]
S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BsBackup;BullGuard backup service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsBhvScan;BullGuard Behavioural Detection;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe [x]
S2 BsCache;BullGuard CODS service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFileScan;BullGuard on-access service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFire;BullGuard firewall service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMailProxy;BullGuard e-mail monitoring service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMain;BullGuard main service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsScanner;BullGuard scanning service;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe [x]
S2 BsUpdate;BullGuard update service;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe [x]
S2 cjpcsc;cyberJack PC/SC COM Service ;c:\windows\SysWOW64\cjpcsc.exe;c:\windows\SysWOW64\cjpcsc.exe [x]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe;c:\windows\SysWOW64\nlssrv32.exe [x]
S2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 tksock;TK-Suite Server;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe [x]
S2 TVGOnlineUpdateSvc;TVG OnlineUpdate-Service;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe [x]
S3 afwcore;afwcore;c:\windows\system32\DRIVERS\afwcore.sys;c:\windows\SYSNATIVE\DRIVERS\afwcore.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Driver;c:\windows\system32\DRIVERS\AVMCOWAN.sys;c:\windows\SYSNATIVE\DRIVERS\AVMCOWAN.sys [x]
S3 BdNet;BdNet;c:\windows\system32\drivers\BdNet.sys;c:\windows\SYSNATIVE\drivers\BdNet.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 cjusb;REINER SCT cyberJack USB Driver;c:\windows\system32\DRIVERS\cjusb.sys;c:\windows\SYSNATIVE\DRIVERS\cjusb.sys [x]
S3 EvoMouseDriverFilterHidUsb;Evoluent Mouse Driver Filter;c:\windows\system32\DRIVERS\EvoMouseDriverFilterHidUsb.sys;c:\windows\SYSNATIVE\DRIVERS\EvoMouseDriverFilterHidUsb.sys [x]
S3 EvoMouseDriverMini;EvoMouseDriverMini;c:\windows\system32\drivers\EvoMouseDriverMini.sys;c:\windows\SYSNATIVE\drivers\EvoMouseDriverMini.sys [x]
S3 FPCIBASE;AVM FRITZ!Card PCI;c:\windows\system32\DRIVERS\fpcibase.sys;c:\windows\SYSNATIVE\DRIVERS\fpcibase.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-07-18 07:47	1104200	----a-w-	c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-08-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-08 10:29]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2014-05-05 08:19]
.
2014-08-08 c:\windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job
- c:\users\Admin\AppData\Local\yourTime\yourMail\components\schedule\yourMail Free Edition Updates.lnk [2013-05-20 18:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayErr]
@="{8749448C-D907-45BF-A842-4D3898894AC8}"
[HKEY_CLASSES_ROOT\CLSID\{8749448C-D907-45BF-A842-4D3898894AC8}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayInProgress]
@="{3FFBF330-7839-476B-BE14-2C8597CE11B6}"
[HKEY_CLASSES_ROOT\CLSID\{3FFBF330-7839-476B-BE14-2C8597CE11B6}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlaySynced]
@="{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}"
[HKEY_CLASSES_ROOT\CLSID\{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BullGuardUpdate2"="c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe" [2014-08-06 2933584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2014-08-07 1319248]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-10-27 613536]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-10-27 379040]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-06-03 472984]
"BgDelayStartup"="c:\program files\bullguard ltd\bullguard\BgDelayStartup.exe" [2014-07-31 86352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\BgAgent.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyServer = http=127.0.0.1:8877
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: An SchnapperPlus senden - c:\program files (x86)\SchnapperPlus\SchnapperPlusMenu.js
IE: LastPass - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-TWAIN - c:\windows\IsUn0407.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-08-12  16:39:50
ComboFix-quarantined-files.txt  2014-08-12 14:39
ComboFix2.txt  2014-08-12 12:34
ComboFix3.txt  2013-07-27 18:05
.
Vor Suchlauf: 17 Verzeichnis(se), 50.630.295.552 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 50.571.354.112 Bytes frei
.
- - End Of File - - 53DCB6EA6A2FE7AD67C09B188CCE7601
4D3FFB2728D7BB129968845914D24193

Hallo Cosinus,

ich habe FRST nochmal runtergeladen und jetzt funzte es. Soll ich dir diese Logdateien auch noch schicken?

11.08.2014, 19:34	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Er hat bestimmt keinen Proxy, Felix, er will ja auch, dass es dauerhaft deaktiviert bleibt __________________ Logfiles bitte immer in CODE-Tags posten

12.08.2014, 15:27	#14
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Ups sry, bin auf den falschen Button gekommen Ist korrigiert __________________ Logfiles bitte immer in CODE-Tags posten

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen

Plagegeister aller Art und deren Bekämpfung: Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen