Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 11.08.2014, 19:05   #1
weti
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Frage

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Hallo Leute,

ich habe hier zwar jede Menge gelesen über das Thema, aber nichts trifft eigentlich so richtigh mein Problem.

Es ist folgendes: bei jedem Neustart ist die Einstellung 'Proxyserver für LAN verwenden' aktiviert (s.screenshot). Deshalb bekomme ich mit Chrome und mit dem IE keine Verbindung zum Internet (Firefox und Opera funktionieren tadellos). Da ich aber für bestimmte Addons den Chrome benutze ist es ziemlich nervig jedes Mal manuell den Proxyserver zu deaktivieren.

Es passieren keine ungewollten Internetverbindungen o.ä - zumindest merke ich nichts davon.

Betriebssystem ist Win7/64. Alle updates wurden gemacht. Auch die Softwareupdates.

Hat einer eine Idee, wie ich das beheben könnte.

Vielen Dank und schönen abend noch.
Werner
Angehängte Grafiken
Dateityp: png screen_20140811_195013.png (41,0 KB, 255x aufgerufen)

Alt 11.08.2014, 19:11   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Hallo und

Eine Möglichkeit wäre: Malware. Die macht das schonmal ganz gerne, den Proxy aus den localhost zu setzen, damit dir im Browser schön manipulierte Seiten angezeigt werden oder brisante Daten mitgeschnitten werden können...


Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!




Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 11.08.2014, 19:29   #3
felix1
/// Helfer-Team
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Zitat:
Zitat von weti Beitrag anzeigen
Es ist folgendes: bei jedem Neustart ist die Einstellung 'Proxyserver für LAN verwenden' aktiviert (s.screenshot). Deshalb bekomme ich mit Chrome und mit dem IE keine Verbindung zum Internet (Firefox und Opera funktionieren tadellos). Da ich aber für bestimmte Addons den Chrome benutze ist es ziemlich nervig jedes Mal manuell den Proxyserver zu deaktivieren.
Abgesehen von den Hinweisen von Cosinus, die Du unbedingt befolgen solltest, stellt sich mir hier die Frage: Wer hat in seinem Heimnetzwerk überhaupt einen Proxy am Laufen. Maximal den Router als DHCP- und DNS-Server.
__________________
__________________

Alt 11.08.2014, 19:34   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Er hat bestimmt keinen Proxy, Felix, er will ja auch, dass es dauerhaft deaktiviert bleibt
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 11.08.2014, 19:42   #5
felix1
/// Helfer-Team
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Zitat:
Zitat von cosinus Beitrag anzeigen
Er hat bestimmt keinen Proxy, Felix, er will ja auch, dass es dauerhaft deaktiviert bleibt
Hallo Cosinus, das mit dem Proxy ist Deineseits vollkommen richtig
Aus den Postings geht aber nicht hervor, um welches BS es sich handelt und in welchen Netzwerken der PC schon registriert war/ist

__________________
LG

Der Felix

Keine Hilfe per PN und E-Mail

Alt 11.08.2014, 19:43   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Rotes Gesicht

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Mööööp er hats doch beschrieben welches OS

Zitat:
Zitat von weti Beitrag anzeigen
Betriebssystem ist Win7/64. Alle updates wurden gemacht. Auch die Softwareupdates.
__________________
--> Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen

Alt 12.08.2014, 09:46   #7
weti
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Hallo Cosinus und die anderen,
erstmal vielen Dank für die Antworten. Ich habe einige scans gemacht, die ich anfüge. Vielleicht ist es untergegangen, aber ich habe dadurch keine Beinträchtigungen durch falsche Weiterleitungen beim surfen oder ähnliches. Chrome und IE verweigern nur die Internetverbindung mit dem Hinweis auf den Proxyserver.

Der FRST lässt sich nicht starten (keine Rückmeldung und das Programm muss manuell beendet werden). Vielleicht ist folgendes noch von Bedeutung: Ich konfiguriere meine Agfeo-Anlage über folgenden Link: hxxp://127.0.0.1:5080/. Das ist zumindest die gleiche IP aber mit einem anderen Port. Oder?

Hier die scans (die leider älter als 7 Tage sind, aber ich war in der Zwischenzeit häufig unterwegs, aber alle kurz nach dem Auftreten des Problems). :

Code:
ATTFilter
# AdwCleaner v3.216 - Bericht erstellt am 24/07/2014 um 20:26:35
# Aktualisiert 17/07/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Admin - ADMIN-PC
# Gestartet von : D:\Download\Aktuell\adwcleaner_3.216.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\prefs.js ]


-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [917 octets] - [24/07/2014 14:56:07]
AdwCleaner[R1].txt - [857 octets] - [24/07/2014 20:26:35]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [916 octets] ##########
         
Code:
ATTFilter
C:\Download\aktuell\GCSMSetup_3_5_20.exe	Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Download\aktuell\Unlocker1.9.1-x64.exe	Variante von Win32/Toolbar.Babylon evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Download\aktuell\vlc-2.0.5-win64.exe	Win32/StartPage.OPH Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
D:\Download\Grafik\DesignPro\SoftonicDownloader_fuer_avery-designpro.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
D:\Download\Musik\vlc-1.1.7-win32.exe	Win32/StartPage.OIE Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_internet_accelerator_3_3.20_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_uninstaller_4_4.22_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_winoptimizer_8_e8.13_sm.exe	Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
D:\GKT-Service\Medien\Gassner\Engel für Opa.exe	Variante von Win32/Adware.ToolPlugin.A Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_internet_accelerator_3_3.20_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_uninstaller_4_4.22_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_winoptimizer_8_e8.13_sm.exe	Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\DVD_Shrink_TSV31S5I.exe	Variante von Win32/Toolbar.Conduit.AE evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\GCSMSetup_3_5_20.exe	Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\SoftonicDownloader_fuer_avery-designpro.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\Unlocker1.9.1-x64.exe	Variante von Win32/Toolbar.Babylon evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.0.5-win64.exe	Win32/StartPage.OPH Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.0-win64.exe	NSIS/StartPage.CC Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.1-win64.exe	NSIS/StartPage.CC Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.3-win64.exe	NSIS/StartPage.CC Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Grafik\DesignPro\SoftonicDownloader_fuer_avery-designpro.exe	Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Musik\vlc-1.1.7-win32.exe	Win32/StartPage.OIE Trojaner	Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_internet_accelerator_3_3.20_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_uninstaller_4_4.22_sm.exe	Win32/Toolbar.Conduit evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_winoptimizer_8_e8.13_sm.exe	Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
E:\GKT-Service\Medien\Gassner\Engel für Opa.exe	Variante von Win32/Adware.ToolPlugin.A Anwendung	gelöscht - in Quarantäne kopiert
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Admin on 24.07.2014 at 20:42:13,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Successfully deleted the following from C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\tefcdjqq.default\prefs.js

user_pref("extensions.lastpass.searchforsiteswithinaddressbar", true);
Emptied folder: C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\tefcdjqq.default\minidumps [65 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.07.2014 at 20:48:55,68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Alt 12.08.2014, 10:06   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Zitat:
Der FRST lässt sich nicht starten (keine Rückmeldung und das Programm muss manuell beendet werden). Vielleicht ist folgendes noch von Bedeutung: Ich konfiguriere meine Agfeo-Anlage über folgenden Link: hxxp://127.0.0.1:5080/. Das ist zumindest die gleiche IP aber mit einem anderen Port. Oder?
FRST via Rechtsklick als Admin gestartet?

Mit deiner Agfeo hat dein Problem so nichts zu tun denke ich, deine Anlage ist "zufällig" auch über den localhost erreichbar, mach aber keinen Proxy. localhost ( = 127.0.0.1 ) ist immer der lokale Rechner, vor man gerade hockt
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 12.08.2014, 10:08   #9
weti
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Ja, habe ich auch als Admin probiert - gleiches Ergenis. Das Programm steht still (keine Rückmeldung in der Kopfzeile).
Agfeo: Das ist aber die gleiche IP, die als >Adresse im Proxy angegeben wird (s. screenshot vom ersten Posting). Ich bin jetzt erstmal weg. Komme in ca 1 Stunde wieder. Und - danke nochmal. Ich bin richtig froh, dass es euch gibt. :-)

Geändert von weti (12.08.2014 um 10:14 Uhr)

Alt 12.08.2014, 10:51   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Ja schon klar
Es gibt aber noch zig andere Anwendungsbereiche für den localhost (127.0.0.1) siehe localhost ? Wikipedia

Das FRST nicht geht, würde ich mal CF vorschlagen:


Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 12.08.2014, 13:38   #11
weti
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Hier der CombiFix-Log:

Code:
ATTFilter
ComboFix 14-08-12.01 - Admin 12.08.2014  14:29:43.2.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8169.6258 [GMT 2:00]
ausgeführt von:: c:\users\Admin\Desktop\ComboFix.exe
AV: BullGuard Antivirus *Disabled/Outdated* {C3CCAC61-52F7-A056-1860-6406566E2578}
FW: BullGuard Firewall *Disabled* {FBF72D44-1898-A10E-333F-CD33A8BD6203}
SP: BullGuard Antispyware *Disabled/Outdated* {78AD4D85-74CD-AFD8-22D0-5F742DE96FC5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
 ADS - Windows: deleted 192 bytes in 1 streams. 
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Admin\AppData\Local\assembly\tmp
c:\users\Admin\AppData\Local\assembly\tmp\00176MEY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\00176MEY\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\02P0M1FY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\02P0M1FY\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0DJKRJBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0DJKRJBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0DPEQADT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0DPEQADT\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0EIBWHKF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0EIBWHKF\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0LOFJ1O8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0LOFJ1O8\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0LXRKBXS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0LXRKBXS\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0WH7QEF0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0WH7QEF0\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\15LTBU6S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\15LTBU6S\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1C1WIVCG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1C1WIVCG\HtmlAgilityPack.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1JGQGLZU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1JGQGLZU\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1N0WUGSC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1N0WUGSC\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1ODANJKJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1ODANJKJ\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1PQ5GDN2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1PQ5GDN2\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1SQLZKDO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1SQLZKDO\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\22RXY89H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\22RXY89H\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\24CF2QW8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\24CF2QW8\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\24ZE7LTG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\24ZE7LTG\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\25MEH41H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\25MEH41H\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\27FCWMQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\27FCWMQF\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\27MVULCT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\27MVULCT\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\29NZXJCV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\29NZXJCV\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2BUHA8QU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2BUHA8QU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2CWTVAYO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2CWTVAYO\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2D0GTWDI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2D0GTWDI\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2FDSP8D0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2FDSP8D0\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2IGK9WM4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2IGK9WM4\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2Q97RSBL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2Q97RSBL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2RBGVGR1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2RBGVGR1\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2RUXCAQE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2RUXCAQE\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2ZFP77SH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2ZFP77SH\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\30387T1R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\30387T1R\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\35PL3TAM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\35PL3TAM\DevExpress.XtraBars.v12.2.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3732Z2Z1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3732Z2Z1\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3A64AH9J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3A64AH9J\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3Y6M888V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3Y6M888V\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\42YZ4C0R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\42YZ4C0R\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\44RJOMKY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\44RJOMKY\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\44T7J65D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\44T7J65D\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\450DHXK6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\450DHXK6\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\461I5MWY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\461I5MWY\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4888VCY6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4888VCY6\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4EM2ZUHM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4EM2ZUHM\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4HFG5GL3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4HFG5GL3\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4IQ9GQTD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4IQ9GQTD\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4JDNS8WW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4JDNS8WW\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4YWQ5P34\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4YWQ5P34\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\569X1N6D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\569X1N6D\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\57EESQU6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\57EESQU6\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5A4DHLZ3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5A4DHLZ3\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5A7Q1MGK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5A7Q1MGK\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5E9JWOOQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5E9JWOOQ\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5GGYW3PS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5GGYW3PS\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5J0Q9GWA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5J0Q9GWA\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5K8UIUHJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5K8UIUHJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5KXFFIWA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5KXFFIWA\Microsoft.SharePoint.Client.Runtime.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5L38UN5F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5L38UN5F\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5LW26AFE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5LW26AFE\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5PNQG3LM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5PNQG3LM\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5Q0AFU2Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5Q0AFU2Y\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5T6MXJ1J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5T6MXJ1J\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5VB4D8VH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5VB4D8VH\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5X3H4DKW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5X3H4DKW\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\60COTC1J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\60COTC1J\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\60N6LHS4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\60N6LHS4\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\68MTXXXP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\68MTXXXP\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\69UVAD2H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\69UVAD2H\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6BHF1UER\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6BHF1UER\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6D01O46F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6D01O46F\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6DBVQ1MZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6DBVQ1MZ\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6V0P5B4J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6V0P5B4J\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\70XXPII2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\70XXPII2\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\77MHLYTQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\77MHLYTQ\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\78KCU6BN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\78KCU6BN\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\78QDQ33V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\78QDQ33V\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\79XUCTWV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\79XUCTWV\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7CHZ2QG7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7CHZ2QG7\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7CPYE88B\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7CPYE88B\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7DVCCYGD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7DVCCYGD\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7GBTF7SF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7GBTF7SF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7LIP180C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7LIP180C\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7N2A06BU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7N2A06BU\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7NN9QIY0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7NN9QIY0\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7UT53HKN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7UT53HKN\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7VHTXXSM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7VHTXXSM\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7WR5960X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7WR5960X\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7YWIR8C5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7YWIR8C5\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\817OUN0Z\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\817OUN0Z\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\81JLTVFH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\81JLTVFH\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\83T1EZCZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\83T1EZCZ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\850YQX35\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8B7M90DH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8B7M90DH\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8F2KG91Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8F2KG91Q\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8NZ1EW9W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8NZ1EW9W\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8R930GNY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8R930GNY\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8TFP21VE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8TFP21VE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8U16ZJAX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8U16ZJAX\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8XLR9U28\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8XLR9U28\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\90QKRAEU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\90QKRAEU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\91HP1FC4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\91HP1FC4\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9CQFBUBU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9CQFBUBU\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9J2LVF2Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9J2LVF2Y\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9VDT7S5Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9VDT7S5Y\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9VQPXOMD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9VQPXOMD\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9XGL7WLH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9XGL7WLH\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9XHWUMK1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9XHWUMK1\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\A07AYL66\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\A07AYL66\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AF9SHG1Z\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AF9SHG1Z\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AJVPY44W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AJVPY44W\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AUGWQGV3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AUGWQGV3\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B1VO73V5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B1VO73V5\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B2KYY3NK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B2KYY3NK\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B7PYGCF7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B7PYGCF7\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B7TPGJ3K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B7TPGJ3K\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BB6ZWGUA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BB6ZWGUA\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BGSGD8J0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BGSGD8J0\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BMDJG8GY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BMDJG8GY\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BRMQOLQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BRMQOLQF\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BSOB3HLA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BSOB3HLA\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BXJ7A9T3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BXJ7A9T3\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BZ2DUKU2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BZ2DUKU2\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BZJU4MF5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BZJU4MF5\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C1RRDH7R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C1RRDH7R\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C5LC7M4H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C5LC7M4H\Chili.Opf3.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C8827MYH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C8827MYH\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C9YR03LC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C9YR03LC\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CF37C9M5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CF37C9M5\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CIZTBNVC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CIZTBNVC\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CJBN9PU7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CJBN9PU7\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CNKNU3KF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CNKNU3KF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CTWKMR58\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CTWKMR58\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D02AWTQL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D02AWTQL\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D5BRBHQ8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D5BRBHQ8\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D8RCOFFM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D8RCOFFM\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DM35IUDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DM35IUDU\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DO11LIV4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DO11LIV4\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DRVN20YM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DRVN20YM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DU7LF8WA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DU7LF8WA\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DU7ZVBYX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DU7ZVBYX\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DVHXT2DU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DVHXT2DU\Microsoft.SharePoint.Client.Runtime.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DY247WSZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DY247WSZ\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E1BR60VV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E1BR60VV\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E1TUOJQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E1TUOJQF\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E3P0V7X3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E3P0V7X3\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E4JZS6B5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E4JZS6B5\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E6OGGWVW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E6OGGWVW\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E8ZAUOT5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E8ZAUOT5\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E9IMZCIN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E9IMZCIN\ICSharpCode.SharpZipLib.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EBJAYLN8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EBJAYLN8\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ECB4QF5B\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ECB4QF5B\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EFWMK5WY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EFWMK5WY\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EKUYTGE9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EKUYTGE9\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EMUDB9E0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EMUDB9E0\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EN4WTXM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EN4WTXM1\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EQL8MPXS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EQL8MPXS\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EU6VVMBH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EU6VVMBH\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EW734FBR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EW734FBR\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EYMNE77X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EYMNE77X\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F0DMY1OF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F0DMY1OF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F3311M7W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F3311M7W\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F3KCXNMS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F3KCXNMS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FBDGKUMJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FBDGKUMJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FBUGBZRI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FBUGBZRI\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FCS9I47X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FCS9I47X\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FENXY2EW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FENXY2EW\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FFHTCDUS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FFHTCDUS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FKBBSQAI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FKBBSQAI\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FKIR5FLU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FKIR5FLU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FO0FW5IF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FO0FW5IF\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FV1YH2OL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FV1YH2OL\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FX4RWU13\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FX4RWU13\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FXPEBQ8R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FXPEBQ8R\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FYTSDNFS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FYTSDNFS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G66L1KPZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G66L1KPZ\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G77UAO3R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G77UAO3R\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G9CC0GQT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G9CC0GQT\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G9XQ6O2W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G9XQ6O2W\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GLYH2P4D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GLYH2P4D\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GMGB2WEK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GMGB2WEK\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GOWAN7RE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GOWAN7RE\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GRUBPH5I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GRUBPH5I\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GU1VDGVT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GU1VDGVT\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GUWVIMXN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GUWVIMXN\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GV4HU1R6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GV4HU1R6\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GYIJXWF8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GYIJXWF8\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H1W0ZLXG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H1W0ZLXG\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H44KERT8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H44KERT8\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H4LK4E0G\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H4LK4E0G\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H9UORZ0I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H9UORZ0I\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HAXIXM0N\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HAXIXM0N\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HI5PAYT3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HI5PAYT3\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HLKS089Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HLKS089Y\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HOXSTFIJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HOXSTFIJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HP0X8V2F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HP0X8V2F\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HUFXCWG1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HUFXCWG1\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HXGFPIVZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HXGFPIVZ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HZNQ4TMP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HZNQ4TMP\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HZXNZXO4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HZXNZXO4\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I43799JK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I43799JK\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I5GS9C1U\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I5GS9C1U\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I7DUJQNE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I7DUJQNE\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I9RRAMZQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I9RRAMZQ\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IDW2IAL3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IDW2IAL3\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IEJ927JP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IEJ927JP\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IL57ONAN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IL57ONAN\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IM8LJHED\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IM8LJHED\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IVDIYEF4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IVDIYEF4\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IW29T75T\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IW29T75T\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IWMPFSDX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IWMPFSDX\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IXIXKMAJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IXIXKMAJ\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\J0YRHZ97\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\J0YRHZ97\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\J8FRB0LO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\J8FRB0LO\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JDGNK879\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JDGNK879\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JMB22V1S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JMB22V1S\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JNIZO3JC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JNIZO3JC\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JU28PCLN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JU28PCLN\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JV3QS9GX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JV3QS9GX\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JYQ48KKE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JYQ48KKE\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\K3KGENYO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\K3KGENYO\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KGJYPEFP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KGJYPEFP\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KJT7RGWO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KJT7RGWO\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KKHQ6PG6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KKHQ6PG6\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KMGFS46J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KMGFS46J\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KQ5R6GR9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KQ5R6GR9\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KRRBT66X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KRRBT66X\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KS1TWMM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KS1TWMM1\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KUXW273K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KUXW273K\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KV8HTA0Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KV8HTA0Y\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KXG3HS3P\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KXG3HS3P\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KXS6HLHJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KXS6HLHJ\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KYKOBQ8K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KYKOBQ8K\DevExpress.Printing.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L1800O0E\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L1800O0E\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L2PMJRDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L2PMJRDU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L4BZ4ERQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L4BZ4ERQ\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L61BE4AL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L61BE4AL\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L6AJRSQ7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L6AJRSQ7\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L6X7K5X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L6X7K5X9\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LCGSGN68\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LCGSGN68\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LCWRRVI5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LCWRRVI5\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LJ9N4LPC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LJ9N4LPC\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LKA4Y66K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LKA4Y66K\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LOZXYQRC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LOZXYQRC\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LXWXV336\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LXWXV336\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LZNO1UBS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LZNO1UBS\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LZYCV9LC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LZYCV9LC\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M36UKHPO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M36UKHPO\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M5CI1KUM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M5CI1KUM\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M7HWGKYV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M7HWGKYV\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M9Q2CG5Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M9Q2CG5Y\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MB5ZFG90\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MB5ZFG90\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MCEJI3X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MCEJI3X9\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MEYS7LLL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MEYS7LLL\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MHQAMRBS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MHQAMRBS\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MKOTN4OK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MKOTN4OK\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MMSZGEG8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MMSZGEG8\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MN9C5L70\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MN9C5L70\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MXJYPMVL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MXJYPMVL\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MZ8QHHN8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MZ8QHHN8\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N335013C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N335013C\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N3XIRRNP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N3XIRRNP\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N46117BO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N46117BO\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N6POGPWZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N6POGPWZ\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N799WWDC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N799WWDC\HtmlAgilityPack.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N8DL9EHR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N8DL9EHR\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NEHQOGLV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NEHQOGLV\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NEJ89626\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NEJ89626\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NITH4G4O\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NITH4G4O\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NLIPBKO3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NLIPBKO3\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NN4US37H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NN4US37H\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NNLSGP0M\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NNLSGP0M\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NRJZX8FY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NRJZX8FY\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NSM1DZZS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NSM1DZZS\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\O42FQKO6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\O42FQKO6\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\O650S1WB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\O650S1WB\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OAYE6J1V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OAYE6J1V\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ODGIIQJ2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ODGIIQJ2\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OFUIKS7S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OHFF4AR0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OHFF4AR0\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OOVLMASJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OOVLMASJ\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OP0T6XNY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OP0T6XNY\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OP44XWU4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OP44XWU4\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OX850J3R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OX850J3R\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OZ6DCAV6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OZ6DCAV6\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\P1LUS3X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\P1LUS3X9\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\P7K1T36U\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\P7K1T36U\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PK1UJOJX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PK1UJOJX\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PL97WPXE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PL97WPXE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PNR9K3RF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PNR9K3RF\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\POCFFBM9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\POCFFBM9\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\POWDKR17\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\POWDKR17\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PPK6CFMK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PPK6CFMK\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PPQKH495\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PPQKH495\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PTZG0D0C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PTZG0D0C\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PVICPKCA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PVICPKCA\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PWGJOZ0A\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PWGJOZ0A\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q3ZXPVO9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q3ZXPVO9\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q47NG3GB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q47NG3GB\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q7Z993WE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q7Z993WE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QA1CM2Z7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QA1CM2Z7\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QB6GMQDA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QB6GMQDA\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBHWCLK1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBHWCLK1\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBSSLIZU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBSSLIZU\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBTO24LU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBTO24LU\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QD07SYWS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QD07SYWS\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QG1H3LOR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QG1H3LOR\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QIDHPK3C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QIDHPK3C\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QM3Y64Y4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QM3Y64Y4\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QTXLMVL0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QTXLMVL0\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QZSQGD9F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QZSQGD9F\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\R1O7PNGC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\R1O7PNGC\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RDYIOEKT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RDYIOEKT\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RI81GHDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RI81GHDU\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RKIFF7VN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RKIFF7VN\ICSharpCode.SharpZipLib.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RMRY77BH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RMRY77BH\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RMYTW89Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RMYTW89Q\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQ8SQRI3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQ8SQRI3\DevExpress.Office.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQO39BMH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQO39BMH\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQQ9N2S6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQQ9N2S6\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RS85W7MU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RS85W7MU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RX712BE8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RX712BE8\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S16STBFU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S16STBFU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S1GHY36T\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S1GHY36T\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S3G0QMEL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S3G0QMEL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S4TD3ID4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S4TD3ID4\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S7UAI9TT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S7UAI9TT\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SD2ADHZ4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SD2ADHZ4\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SKI2NW6V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SKI2NW6V\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SNCQ2NC3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SNCQ2NC3\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SSIF93NA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SSIF93NA\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SZ7AYZ0G\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SZ7AYZ0G\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\T4A1QM0R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\T4A1QM0R\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\T9AG0L4N\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\T9AG0L4N\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TA3YBOTW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TA3YBOTW\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TIXIPYLC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TIXIPYLC\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TK14HDBJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TK14HDBJ\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TKSDHL0X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TKSDHL0X\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TQVHE83C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TQVHE83C\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TQWXWVGR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TQWXWVGR\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TRZN2E77\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TRZN2E77\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TV2J4M72\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TV2J4M72\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TZJDEOZH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TZJDEOZH\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\U0S2J4AE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\U0S2J4AE\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\U8QU2JPJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\U8QU2JPJ\DevExpress.Printing.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UDQ9J3GN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UDQ9J3GN\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UGTUC5UP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UGTUC5UP\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UHDURG79\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UHDURG79\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UHGEZTIL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UHGEZTIL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UJNA38F9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UJNA38F9\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UODTD17L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UODTD17L\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UP86O7VT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UP86O7VT\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UWCCQT7Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UWCCQT7Q\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UWTHQMGS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UWTHQMGS\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UZK7WEI1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UZK7WEI1\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V01IOHRT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V01IOHRT\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V32FEWT0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V32FEWT0\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V95FYU6V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V95FYU6V\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VFG8L427\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VFG8L427\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VHEQYW1I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VHEQYW1I\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VJ3CSPAM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VJ3CSPAM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VN899DI5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VN899DI5\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VUI212B6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VUI212B6\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\W8BG7BDG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\W8BG7BDG\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WA2BSSM0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WA2BSSM0\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WJCT1O5K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WJCT1O5K\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WSBGNXER\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WSBGNXER\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WZC015ED\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WZC015ED\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X3GMCLIT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X3GMCLIT\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X69OIH8Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X69OIH8Q\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X99QDUM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X99QDUM1\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X9VQ356S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X9VQ356S\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XAP8NSFS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XAP8NSFS\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XCMM330L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XCMM330L\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XCRS2UII\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XCRS2UII\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XKD79N6W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XKD79N6W\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XKPIXYUO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XKPIXYUO\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XLO3FYVJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XLO3FYVJ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XTSIGP9E\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XTSIGP9E\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XUDVMF7C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XUDVMF7C\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XXZTK8Z6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XXZTK8Z6\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XYBG0BKM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XYBG0BKM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Y8D6Z7PE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Y8D6Z7PE\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YA6WAOLG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YA6WAOLG\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YAI1STYP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YAI1STYP\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YFEBZ84S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YFEBZ84S\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YGT0VEFA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YGT0VEFA\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YHBLGMFC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YHBLGMFC\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YITUTSBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YITUTSBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YNE3Q3DH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YNE3Q3DH\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z0CQCRZ7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z0CQCRZ7\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z14F7AIC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z14F7AIC\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z2NHX6GK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z2NHX6GK\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z7NLY5QN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z7NLY5QN\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z8QR5U97\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z8QR5U97\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z8QVFVWU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z8QVFVWU\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZI8XAH68\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZI8XAH68\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZJATRXQG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZJATRXQG\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZJF76JA3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZJF76JA3\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZL3XBGGL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZL3XBGGL\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZMWJKPU9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZMWJKPU9\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZP023IW4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZP023IW4\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZQ1OKU5L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZQ1OKU5L\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZRCM5QDB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZRCM5QDB\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZT73CFE6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZT73CFE6\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZV6P0CVK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZV6P0CVK\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZXKPH2F7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZXKPH2F7\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZXR1LZNJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZXR1LZNJ\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZYCMUHBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZYCMUHBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\0545F7B45A7B4420A820F73747615E31@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\068D6D3A935D4E28989E038B86DF9F65@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\29AB98FE146F44F299E231AE5CF8F5B0@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\339B38CA77414F5199E2135697588B85@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\C3515C3602AB4A41A1A7353E5DE7F1E3@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9C2F.7B7BA350
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9D0E.9CB95B90
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9D19.D98DB600
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CFB23E.0226AFC0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CFB23E.439553D0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.png@01CFB320.D2D47CA0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image002.jpg@01CFAFE5.041D89D0
c:\users\Admin\AppData\Roaming\457
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-07-12 bis 2014-08-12  ))))))))))))))))))))))))))))))
.
.
2014-08-12 12:33 . 2014-08-12 12:33	--------	d-----w-	c:\users\Public\AppData\Local\temp
2014-08-12 12:33 . 2014-08-12 12:33	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-08-12 08:12 . 2014-07-14 02:12	10924376	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{CF394883-27E3-4444-8D50-C5551DFC75CF}\mpengine.dll
2014-08-07 06:34 . 2014-08-07 06:34	153712	----a-w-	c:\windows\system32\BgGamingMonitor.dll
2014-08-07 06:34 . 2014-08-07 06:34	140280	----a-w-	c:\windows\SysWow64\BgGamingMonitor.dll
2014-07-31 10:55 . 2014-07-31 10:55	64336	----a-w-	c:\windows\SysWow64\BGLsp.dll
2014-07-31 10:55 . 2014-07-31 10:55	76624	----a-w-	c:\windows\system32\BGLsp.dll
2014-07-28 18:54 . 2014-07-28 18:54	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-28 18:54 . 2014-07-28 18:54	--------	d-----w-	c:\program files (x86)\Java
2014-07-25 15:40 . 2014-07-25 15:40	--------	d-----w-	c:\users\Admin\AppData\Roaming\23753
2014-07-25 15:34 . 2014-07-25 15:34	--------	d-----w-	c:\users\Admin\AppData\Roaming\22590
2014-07-25 14:00 . 2014-07-25 14:00	--------	d-----w-	c:\users\Admin\AppData\Local\PackageAware
2014-07-24 18:42 . 2014-07-24 18:42	--------	d-----w-	c:\windows\ERUNT
2014-07-24 18:37 . 2014-07-24 18:37	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-07-24 16:48 . 2014-01-09 02:22	5694464	----a-w-	c:\windows\SysWow64\mstscax.dll
2014-07-24 16:48 . 2014-01-03 22:44	6574592	----a-w-	c:\windows\system32\mstscax.dll
2014-07-24 14:27 . 2014-05-08 09:32	3178496	----a-w-	c:\windows\system32\rdpcorets.dll
2014-07-24 14:27 . 2014-05-08 09:32	16384	----a-w-	c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-24 14:17 . 2012-08-23 14:10	19456	----a-w-	c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-24 14:17 . 2012-08-23 14:13	243200	----a-w-	c:\windows\system32\rdpudd.dll
2014-07-24 14:17 . 2012-08-23 11:12	192000	----a-w-	c:\windows\SysWow64\rdpendp_winip.dll
2014-07-24 14:17 . 2012-08-23 10:51	228864	----a-w-	c:\windows\system32\rdpendp_winip.dll
2014-07-24 13:15 . 2013-09-25 02:23	1030144	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-07-24 13:15 . 2013-09-25 01:57	792576	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
2014-07-24 12:54 . 2013-07-14 15:32	4009167	----a-w-	C:\ServicesRepair.exe
2014-07-24 12:54 . 2014-07-24 12:35	1354223	----a-w-	C:\AdwCleaner(17).exe
2014-07-24 12:38 . 2014-07-24 12:38	--------	d-s---w-	c:\windows\SysWow64\Microsoft
2014-07-21 18:44 . 2014-07-21 18:44	--------	d-----w-	c:\users\Admin\AppData\Roaming\ASP
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-09 10:29 . 2012-08-08 07:58	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-09 10:29 . 2012-08-08 07:58	699056	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-09 09:08 . 2012-08-07 15:59	96441528	----a-w-	c:\windows\system32\MRT.exe
2014-06-30 02:09 . 2014-07-09 06:02	519168	----a-w-	c:\windows\system32\aepdu.dll
2014-06-30 02:04 . 2014-07-09 06:02	424448	----a-w-	c:\windows\system32\aeinv.dll
2014-06-20 20:14 . 2014-07-09 06:02	266424	----a-w-	c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 06:02	23464448	----a-w-	c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 06:02	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 06:02	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 06:02	2768384	----a-w-	c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 06:02	548352	----a-w-	c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 06:02	66048	----a-w-	c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 06:02	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 06:02	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 06:02	51200	----a-w-	c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 06:02	33792	----a-w-	c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 06:02	598016	----a-w-	c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 06:02	139264	----a-w-	c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 06:02	111616	----a-w-	c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 06:02	752640	----a-w-	c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 06:02	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 06:02	452608	----a-w-	c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 06:02	38400	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 06:02	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 06:02	195584	----a-w-	c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 06:02	5721088	----a-w-	c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 06:02	85504	----a-w-	c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 06:02	292864	----a-w-	c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 06:02	608768	----a-w-	c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 06:02	455168	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 06:02	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 06:02	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 06:02	62464	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 06:02	631808	----a-w-	c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 06:02	1249280	----a-w-	c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 06:02	2040832	----a-w-	c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 06:02	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 06:02	592896	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 06:02	32256	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 06:02	2266112	----a-w-	c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 06:02	4254720	----a-w-	c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 06:02	13527040	----a-w-	c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 06:02	1068032	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 06:02	1964544	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 06:02	1393664	----a-w-	c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 06:02	846336	----a-w-	c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 06:02	1791488	----a-w-	c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 06:02	692736	----a-w-	c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 06:02	646144	----a-w-	c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 06:02	3157504	----a-w-	c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 06:02	624128	----a-w-	c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 06:02	509440	----a-w-	c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 06:01	1460736	----a-w-	c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 06:01	22016	----a-w-	c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 06:01	96768	----a-w-	c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 06:02	210944	----a-w-	c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 06:02	86528	----a-w-	c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 06:02	340992	----a-w-	c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 06:02	314880	----a-w-	c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 06:02	307200	----a-w-	c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 06:02	728064	----a-w-	c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 06:02	22016	----a-w-	c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 06:02	172032	----a-w-	c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 06:02	65536	----a-w-	c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 06:02	247808	----a-w-	c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 06:02	220160	----a-w-	c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 06:02	259584	----a-w-	c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 06:02	550912	----a-w-	c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 06:02	17408	----a-w-	c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 06:02	497152	----a-w-	c:\windows\system32\drivers\afd.sys
2014-05-28 14:07 . 2014-05-19 12:16	117184	----a-w-	c:\windows\system32\drivers\BdAgent.sys
2014-05-19 12:16 . 2013-03-18 13:25	67680	----a-w-	c:\windows\system32\drivers\BdSpy.sys
2014-05-19 12:16 . 2012-11-20 13:11	42760	----a-r-	c:\windows\system32\drivers\afw.sys
2014-05-19 12:16 . 2012-10-04 07:38	34896	----a-w-	c:\windows\system32\drivers\BdNet.sys
2014-05-19 12:16 . 2012-06-26 09:48	27544	----a-w-	c:\windows\system32\drivers\NSNetmon.sys
2014-05-19 12:16 . 2012-06-26 09:48	296368	----a-w-	c:\windows\system32\drivers\NSKernel.sys
2014-05-19 12:16 . 2012-11-20 13:11	469256	----a-r-	c:\windows\system32\drivers\afwcore.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"CAHeadless"="c:\program files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe" [2014-05-09 1401040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"sysTPL"="c:\program files (x86)\sysTPL\sysTPL.exe" [2014-02-07 1244440]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-02-21 152392]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
.
c:\users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Evoluent Mouse Manager.lnk - c:\windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe [2012-8-8 4286]
PhraseExpress.lnk - c:\program files (x86)\PhraseExpress\phraseexpress.exe [2012-8-9 22427944]
ProCall One.lnk - c:\program files (x86)\ESTOS\ProCall One\ECtiClientOne.exe [2013-12-16 19845120]
TK-Suite Client.lnk - c:\program files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe [2013-8-20 7351928]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Das Telefonbuch Browserlösung.lnk - c:\program files (x86)\TVG\DasTelefonbuch Deutschland\http_tfd.exe [2014-4-8 20992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]
R2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]
R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vidsflt67;Acronis Disk Storage Filter (67);c:\windows\system32\DRIVERS\vsflt67.sys;c:\windows\SYSNATIVE\DRIVERS\vsflt67.sys [x]
S1 AFW;Agnitum Firewall Driver;c:\windows\system32\DRIVERS\afw.sys;c:\windows\SYSNATIVE\DRIVERS\afw.sys [x]
S1 BdAgent;BullGuard Security Agent;c:\windows\system32\DRIVERS\BdAgent.sys;c:\windows\SYSNATIVE\DRIVERS\BdAgent.sys [x]
S1 BdSpy;BdSpy;c:\windows\system32\drivers\BdSpy.sys;c:\windows\SYSNATIVE\drivers\BdSpy.sys [x]
S1 NovaShieldFilterDriver;NovaShieldFilterDriver;c:\windows\system32\DRIVERS\NSKernel.sys;c:\windows\SYSNATIVE\DRIVERS\NSKernel.sys [x]
S1 NovaShieldTDIDriver;NovaShieldTDIDriver;c:\windows\system32\DRIVERS\NSNetmon.sys;c:\windows\SYSNATIVE\DRIVERS\NSNetmon.sys [x]
S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BsBackup;BullGuard backup service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsBhvScan;BullGuard Behavioural Detection;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe [x]
S2 BsCache;BullGuard CODS service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFileScan;BullGuard on-access service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFire;BullGuard firewall service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMailProxy;BullGuard e-mail monitoring service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMain;BullGuard main service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsScanner;BullGuard scanning service;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe [x]
S2 BsUpdate;BullGuard update service;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe [x]
S2 cjpcsc;cyberJack PC/SC COM Service ;c:\windows\SysWOW64\cjpcsc.exe;c:\windows\SysWOW64\cjpcsc.exe [x]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe;c:\windows\SysWOW64\nlssrv32.exe [x]
S2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 tksock;TK-Suite Server;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe [x]
S2 TVGOnlineUpdateSvc;TVG OnlineUpdate-Service;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe [x]
S3 afwcore;afwcore;c:\windows\system32\DRIVERS\afwcore.sys;c:\windows\SYSNATIVE\DRIVERS\afwcore.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Driver;c:\windows\system32\DRIVERS\AVMCOWAN.sys;c:\windows\SYSNATIVE\DRIVERS\AVMCOWAN.sys [x]
S3 BdNet;BdNet;c:\windows\system32\drivers\BdNet.sys;c:\windows\SYSNATIVE\drivers\BdNet.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 cjusb;REINER SCT cyberJack USB Driver;c:\windows\system32\DRIVERS\cjusb.sys;c:\windows\SYSNATIVE\DRIVERS\cjusb.sys [x]
S3 EvoMouseDriverFilterHidUsb;Evoluent Mouse Driver Filter;c:\windows\system32\DRIVERS\EvoMouseDriverFilterHidUsb.sys;c:\windows\SYSNATIVE\DRIVERS\EvoMouseDriverFilterHidUsb.sys [x]
S3 EvoMouseDriverMini;EvoMouseDriverMini;c:\windows\system32\drivers\EvoMouseDriverMini.sys;c:\windows\SYSNATIVE\drivers\EvoMouseDriverMini.sys [x]
S3 FPCIBASE;AVM FRITZ!Card PCI;c:\windows\system32\DRIVERS\fpcibase.sys;c:\windows\SYSNATIVE\DRIVERS\fpcibase.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-07-18 07:47	1104200	----a-w-	c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-08-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-08 10:29]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2014-05-05 08:19]
.
2014-08-08 c:\windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job
- c:\users\Admin\AppData\Local\yourTime\yourMail\components\schedule\yourMail Free Edition Updates.lnk [2013-05-20 18:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayErr]
@="{8749448C-D907-45BF-A842-4D3898894AC8}"
[HKEY_CLASSES_ROOT\CLSID\{8749448C-D907-45BF-A842-4D3898894AC8}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayInProgress]
@="{3FFBF330-7839-476B-BE14-2C8597CE11B6}"
[HKEY_CLASSES_ROOT\CLSID\{3FFBF330-7839-476B-BE14-2C8597CE11B6}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlaySynced]
@="{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}"
[HKEY_CLASSES_ROOT\CLSID\{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BullGuardUpdate2"="c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe" [2014-08-06 2933584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2014-08-07 1319248]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-10-27 613536]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-10-27 379040]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-06-03 472984]
"BgDelayStartup"="c:\program files\bullguard ltd\bullguard\BgDelayStartup.exe" [2014-07-31 86352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\BgAgent.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyServer = http=127.0.0.1:8877
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: An SchnapperPlus senden - c:\program files (x86)\SchnapperPlus\SchnapperPlusMenu.js
IE: LastPass - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-TWAIN - c:\windows\IsUn0407.exe
AddRemove-MyFreeCodec - c:\program files (x86)\MyFree Codec\1.0b beta\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-08-12  14:34:38
ComboFix-quarantined-files.txt  2014-08-12 12:34
ComboFix2.txt  2013-07-27 18:05
.
Vor Suchlauf: 16 Verzeichnis(se), 51.002.245.120 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 50.607.427.584 Bytes frei
.
- - End Of File - - 1BE2C461AD3E6F6C6BC7685784E2F5B1
4D3FFB2728D7BB129968845914D24193
         

Alt 12.08.2014, 15:14   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Combofix-Skript
WARNUNG für die MITLESER:
Folgendes ComboFix Skript ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

  • Lösche die vorhandene Combofix.exe von deinem Desktop und lade das Programm von folgenden Download-Spiegel neu herunter: Link
  • Speichere es erneut auf dem Desktop (nicht woanders hin, das ist wichtig)!
  • Drücke die Windows + R Taste --> notepad (hinein schreiben) --> OK
  • Kopiere nun den Text aus der folgenden Codebox komplett in das leere Textdokument.
    Code:
    ATTFilter
    Folder::
    c:\users\Admin\AppData\Roaming\23753
    c:\users\Admin\AppData\Roaming\22590
             
  • Speichere dies als CFScript.txt auf deinem Desktop.
  • Wichtig: Stelle deine Anti Viren Software temporär ab. Dies kann ComboFix nämlich bei der Arbeit behindern.
    Danach wieder anstellen nicht vergessen!
  • Schließe alle laufenden Programme damit ComboFix ungehindert arbeiten kann.
  • Ziehe CFScript.txt in die ComboFix.exe wie in diesem Bild:
  • Mache nichts am Computer, bewege nicht die Maus über das ComboFix-Fenster oder klicke in dieses hinein. Dies kann dazu führen, dass ComboFix sich aufhängt.
  • Wenn ComboFix fertig ist wird es ein Log erstellen: C:\ComboFix.txt
    Bitte füge es hier als Antwort (in CODE-Tags mit dem #-Button des Editors) ein.

Hinweis:
Suspect:: und Collect::
Falls im Skript diese Anweisungen enthalten sind, sollen Dateien zur Analyse eingeschickt werden. Es erscheint eine Message-Box, nachdem Combofix fertig ist. Klicke OK und folge den Aufforderungen/Anweisungen, um die Dateien hochzuladen. Teile mir unbedingt mit, ob der Upload geklappt hat!

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Geändert von cosinus (12.08.2014 um 15:27 Uhr)

Alt 12.08.2014, 15:27   #13
weti
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Sorry Cosinus - aber FRST funzt ja nicht. Soll ich das dann mit Combofix machen?

Alt 12.08.2014, 15:27   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Ups sry, bin auf den falschen Button gekommen

Ist korrigiert
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 12.08.2014, 17:01   #15
weti
 
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Standard

Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen



Kein Ssupect oder Collect enhalten, keine Datei hochgeladen. Hier der Logtext:
Code:
ATTFilter
ComboFix 14-08-12.01 - Admin 12.08.2014  16:35:42.3.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8169.5400 [GMT 2:00]
ausgeführt von:: c:\users\Admin\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\Admin\Desktop\CFScript.txt
AV: BullGuard Antivirus *Disabled/Outdated* {C3CCAC61-52F7-A056-1860-6406566E2578}
FW: BullGuard Firewall *Disabled* {FBF72D44-1898-A10E-333F-CD33A8BD6203}
SP: BullGuard Antispyware *Disabled/Outdated* {78AD4D85-74CD-AFD8-22D0-5F742DE96FC5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Admin\AppData\Local\assembly\tmp
c:\users\Admin\AppData\Roaming\22590
c:\users\Admin\AppData\Roaming\23753
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-07-12 bis 2014-08-12  ))))))))))))))))))))))))))))))
.
.
2014-08-12 14:38 . 2014-08-12 14:38	--------	d-----w-	c:\users\Public\AppData\Local\temp
2014-08-12 14:38 . 2014-08-12 14:38	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-08-12 08:12 . 2014-07-14 02:12	10924376	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{CF394883-27E3-4444-8D50-C5551DFC75CF}\mpengine.dll
2014-08-07 06:34 . 2014-08-07 06:34	153712	----a-w-	c:\windows\system32\BgGamingMonitor.dll
2014-08-07 06:34 . 2014-08-07 06:34	140280	----a-w-	c:\windows\SysWow64\BgGamingMonitor.dll
2014-07-31 10:55 . 2014-07-31 10:55	64336	----a-w-	c:\windows\SysWow64\BGLsp.dll
2014-07-31 10:55 . 2014-07-31 10:55	76624	----a-w-	c:\windows\system32\BGLsp.dll
2014-07-28 18:54 . 2014-07-28 18:54	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-28 18:54 . 2014-07-28 18:54	--------	d-----w-	c:\program files (x86)\Java
2014-07-25 14:00 . 2014-07-25 14:00	--------	d-----w-	c:\users\Admin\AppData\Local\PackageAware
2014-07-24 18:42 . 2014-07-24 18:42	--------	d-----w-	c:\windows\ERUNT
2014-07-24 18:37 . 2014-07-24 18:37	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-07-24 16:48 . 2014-01-09 02:22	5694464	----a-w-	c:\windows\SysWow64\mstscax.dll
2014-07-24 16:48 . 2014-01-03 22:44	6574592	----a-w-	c:\windows\system32\mstscax.dll
2014-07-24 14:27 . 2014-05-08 09:32	3178496	----a-w-	c:\windows\system32\rdpcorets.dll
2014-07-24 14:27 . 2014-05-08 09:32	16384	----a-w-	c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-24 14:17 . 2012-08-23 14:10	19456	----a-w-	c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-24 14:17 . 2012-08-23 14:13	243200	----a-w-	c:\windows\system32\rdpudd.dll
2014-07-24 14:17 . 2012-08-23 11:12	192000	----a-w-	c:\windows\SysWow64\rdpendp_winip.dll
2014-07-24 14:17 . 2012-08-23 10:51	228864	----a-w-	c:\windows\system32\rdpendp_winip.dll
2014-07-24 13:15 . 2013-09-25 02:23	1030144	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-07-24 13:15 . 2013-09-25 01:57	792576	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
2014-07-24 12:54 . 2013-07-14 15:32	4009167	----a-w-	C:\ServicesRepair.exe
2014-07-24 12:54 . 2014-07-24 12:35	1354223	----a-w-	C:\AdwCleaner(17).exe
2014-07-24 12:38 . 2014-07-24 12:38	--------	d-s---w-	c:\windows\SysWow64\Microsoft
2014-07-21 18:44 . 2014-07-21 18:44	--------	d-----w-	c:\users\Admin\AppData\Roaming\ASP
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-09 10:29 . 2012-08-08 07:58	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-09 10:29 . 2012-08-08 07:58	699056	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-09 09:08 . 2012-08-07 15:59	96441528	----a-w-	c:\windows\system32\MRT.exe
2014-06-30 02:09 . 2014-07-09 06:02	519168	----a-w-	c:\windows\system32\aepdu.dll
2014-06-30 02:04 . 2014-07-09 06:02	424448	----a-w-	c:\windows\system32\aeinv.dll
2014-06-20 20:14 . 2014-07-09 06:02	266424	----a-w-	c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 06:02	23464448	----a-w-	c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 06:02	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 06:02	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 06:02	2768384	----a-w-	c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 06:02	548352	----a-w-	c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 06:02	66048	----a-w-	c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 06:02	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 06:02	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 06:02	51200	----a-w-	c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 06:02	33792	----a-w-	c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 06:02	598016	----a-w-	c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 06:02	139264	----a-w-	c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 06:02	111616	----a-w-	c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 06:02	752640	----a-w-	c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 06:02	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 06:02	452608	----a-w-	c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 06:02	38400	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 06:02	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 06:02	195584	----a-w-	c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 06:02	5721088	----a-w-	c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 06:02	85504	----a-w-	c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 06:02	292864	----a-w-	c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 06:02	608768	----a-w-	c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 06:02	455168	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 06:02	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 06:02	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 06:02	62464	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 06:02	631808	----a-w-	c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 06:02	1249280	----a-w-	c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 06:02	2040832	----a-w-	c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 06:02	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 06:02	592896	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 06:02	32256	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 06:02	2266112	----a-w-	c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 06:02	4254720	----a-w-	c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 06:02	13527040	----a-w-	c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 06:02	1068032	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 06:02	1964544	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 06:02	1393664	----a-w-	c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 06:02	846336	----a-w-	c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 06:02	1791488	----a-w-	c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 06:02	692736	----a-w-	c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 06:02	646144	----a-w-	c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 06:02	3157504	----a-w-	c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 06:02	624128	----a-w-	c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 06:02	509440	----a-w-	c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 06:01	1460736	----a-w-	c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 06:01	22016	----a-w-	c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 06:01	96768	----a-w-	c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 06:02	210944	----a-w-	c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 06:02	86528	----a-w-	c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 06:02	340992	----a-w-	c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 06:02	314880	----a-w-	c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 06:02	307200	----a-w-	c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 06:02	728064	----a-w-	c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 06:02	22016	----a-w-	c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 06:02	172032	----a-w-	c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 06:02	65536	----a-w-	c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 06:02	247808	----a-w-	c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 06:02	220160	----a-w-	c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 06:02	259584	----a-w-	c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 06:02	550912	----a-w-	c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 06:02	17408	----a-w-	c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 06:02	497152	----a-w-	c:\windows\system32\drivers\afd.sys
2014-05-28 14:07 . 2014-05-19 12:16	117184	----a-w-	c:\windows\system32\drivers\BdAgent.sys
2014-05-19 12:16 . 2013-03-18 13:25	67680	----a-w-	c:\windows\system32\drivers\BdSpy.sys
2014-05-19 12:16 . 2012-11-20 13:11	42760	----a-r-	c:\windows\system32\drivers\afw.sys
2014-05-19 12:16 . 2012-10-04 07:38	34896	----a-w-	c:\windows\system32\drivers\BdNet.sys
2014-05-19 12:16 . 2012-06-26 09:48	27544	----a-w-	c:\windows\system32\drivers\NSNetmon.sys
2014-05-19 12:16 . 2012-06-26 09:48	296368	----a-w-	c:\windows\system32\drivers\NSKernel.sys
2014-05-19 12:16 . 2012-11-20 13:11	469256	----a-r-	c:\windows\system32\drivers\afwcore.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"CAHeadless"="c:\program files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe" [2014-05-09 1401040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"sysTPL"="c:\program files (x86)\sysTPL\sysTPL.exe" [2014-02-07 1244440]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-02-21 152392]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
.
c:\users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Evoluent Mouse Manager.lnk - c:\windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe [2012-8-8 4286]
PhraseExpress.lnk - c:\program files (x86)\PhraseExpress\phraseexpress.exe [2012-8-9 22427944]
ProCall One.lnk - c:\program files (x86)\ESTOS\ProCall One\ECtiClientOne.exe [2013-12-16 19845120]
TK-Suite Client.lnk - c:\program files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe [2013-8-20 7351928]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Das Telefonbuch Browserlösung.lnk - c:\program files (x86)\TVG\DasTelefonbuch Deutschland\http_tfd.exe [2014-4-8 20992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]
R2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]
R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vidsflt67;Acronis Disk Storage Filter (67);c:\windows\system32\DRIVERS\vsflt67.sys;c:\windows\SYSNATIVE\DRIVERS\vsflt67.sys [x]
S1 AFW;Agnitum Firewall Driver;c:\windows\system32\DRIVERS\afw.sys;c:\windows\SYSNATIVE\DRIVERS\afw.sys [x]
S1 BdAgent;BullGuard Security Agent;c:\windows\system32\DRIVERS\BdAgent.sys;c:\windows\SYSNATIVE\DRIVERS\BdAgent.sys [x]
S1 BdSpy;BdSpy;c:\windows\system32\drivers\BdSpy.sys;c:\windows\SYSNATIVE\drivers\BdSpy.sys [x]
S1 NovaShieldFilterDriver;NovaShieldFilterDriver;c:\windows\system32\DRIVERS\NSKernel.sys;c:\windows\SYSNATIVE\DRIVERS\NSKernel.sys [x]
S1 NovaShieldTDIDriver;NovaShieldTDIDriver;c:\windows\system32\DRIVERS\NSNetmon.sys;c:\windows\SYSNATIVE\DRIVERS\NSNetmon.sys [x]
S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BsBackup;BullGuard backup service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsBhvScan;BullGuard Behavioural Detection;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe [x]
S2 BsCache;BullGuard CODS service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFileScan;BullGuard on-access service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFire;BullGuard firewall service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMailProxy;BullGuard e-mail monitoring service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMain;BullGuard main service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsScanner;BullGuard scanning service;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe [x]
S2 BsUpdate;BullGuard update service;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe [x]
S2 cjpcsc;cyberJack PC/SC COM Service ;c:\windows\SysWOW64\cjpcsc.exe;c:\windows\SysWOW64\cjpcsc.exe [x]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe;c:\windows\SysWOW64\nlssrv32.exe [x]
S2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 tksock;TK-Suite Server;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe [x]
S2 TVGOnlineUpdateSvc;TVG OnlineUpdate-Service;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe [x]
S3 afwcore;afwcore;c:\windows\system32\DRIVERS\afwcore.sys;c:\windows\SYSNATIVE\DRIVERS\afwcore.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Driver;c:\windows\system32\DRIVERS\AVMCOWAN.sys;c:\windows\SYSNATIVE\DRIVERS\AVMCOWAN.sys [x]
S3 BdNet;BdNet;c:\windows\system32\drivers\BdNet.sys;c:\windows\SYSNATIVE\drivers\BdNet.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 cjusb;REINER SCT cyberJack USB Driver;c:\windows\system32\DRIVERS\cjusb.sys;c:\windows\SYSNATIVE\DRIVERS\cjusb.sys [x]
S3 EvoMouseDriverFilterHidUsb;Evoluent Mouse Driver Filter;c:\windows\system32\DRIVERS\EvoMouseDriverFilterHidUsb.sys;c:\windows\SYSNATIVE\DRIVERS\EvoMouseDriverFilterHidUsb.sys [x]
S3 EvoMouseDriverMini;EvoMouseDriverMini;c:\windows\system32\drivers\EvoMouseDriverMini.sys;c:\windows\SYSNATIVE\drivers\EvoMouseDriverMini.sys [x]
S3 FPCIBASE;AVM FRITZ!Card PCI;c:\windows\system32\DRIVERS\fpcibase.sys;c:\windows\SYSNATIVE\DRIVERS\fpcibase.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-07-18 07:47	1104200	----a-w-	c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-08-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-08 10:29]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2014-05-05 08:19]
.
2014-08-08 c:\windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job
- c:\users\Admin\AppData\Local\yourTime\yourMail\components\schedule\yourMail Free Edition Updates.lnk [2013-05-20 18:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayErr]
@="{8749448C-D907-45BF-A842-4D3898894AC8}"
[HKEY_CLASSES_ROOT\CLSID\{8749448C-D907-45BF-A842-4D3898894AC8}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayInProgress]
@="{3FFBF330-7839-476B-BE14-2C8597CE11B6}"
[HKEY_CLASSES_ROOT\CLSID\{3FFBF330-7839-476B-BE14-2C8597CE11B6}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlaySynced]
@="{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}"
[HKEY_CLASSES_ROOT\CLSID\{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}]
2014-07-31 10:55	315728	----a-w-	c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BullGuardUpdate2"="c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe" [2014-08-06 2933584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2014-08-07 1319248]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-10-27 613536]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-10-27 379040]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-06-03 472984]
"BgDelayStartup"="c:\program files\bullguard ltd\bullguard\BgDelayStartup.exe" [2014-07-31 86352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\BgAgent.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyServer = http=127.0.0.1:8877
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: An SchnapperPlus senden - c:\program files (x86)\SchnapperPlus\SchnapperPlusMenu.js
IE: LastPass - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-TWAIN - c:\windows\IsUn0407.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-08-12  16:39:50
ComboFix-quarantined-files.txt  2014-08-12 14:39
ComboFix2.txt  2014-08-12 12:34
ComboFix3.txt  2013-07-27 18:05
.
Vor Suchlauf: 17 Verzeichnis(se), 50.630.295.552 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 50.571.354.112 Bytes frei
.
- - End Of File - - 53DCB6EA6A2FE7AD67C09B188CCE7601
4D3FFB2728D7BB129968845914D24193
         
Hallo Cosinus,

ich habe FRST nochmal runtergeladen und jetzt funzte es. Soll ich dir diese Logdateien auch noch schicken?

Antwort

Themen zu Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen
aktivieren, einstellungen, folgendes, funktionieren, interne, keine verbindung, lan, nsis/startpage.cc, nsis/startpge.cc, ungewollte, verbindung, verbindungen, win32/adware.toolplugin.a, win32/installshare.a, win32/softonicdownloader.e, win32/startpage.oie, win32/startpage.oph, win32/systweak.d, win32/toolbar.babylon, win32/toolbar.conduit, win32/toolbar.conduit.ae, win32/toolbar.conduit.ai



Ähnliche Themen: Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen


  1. Proxy-Server verweigert die Verbindung; Interneteinstellungen werden automatisch wieder geändert
    Log-Analyse und Auswertung - 15.01.2015 (27)
  2. Extrem langsamer Laptop, gelegentliches ungewolltes Öffnen des Browsers
    Plagegeister aller Art und deren Bekämpfung - 08.01.2015 (17)
  3. Problem mit Interneteinstellungen - ProxyServer: http=127.0.0.1:9880
    Log-Analyse und Auswertung - 28.10.2014 (9)
  4. Interneteinstellungen nach Wajam-Adware nicht mehr korrekt
    Plagegeister aller Art und deren Bekämpfung - 25.10.2014 (3)
  5. Interneteinstellungen gehen immer wieder auf Proxy
    Plagegeister aller Art und deren Bekämpfung - 03.10.2014 (23)
  6. Proxyserverproblem - Haken Interneteinstellungen kehrt immer wieder zurück - Virus?
    Plagegeister aller Art und deren Bekämpfung - 02.10.2014 (5)
  7. Ungewolltes Öffnen von http://wisersearch.com/?channel=de_nt und dazu noch erscheinen von ungewollter Werbung im Browser (Pop-Ups)
    Plagegeister aller Art und deren Bekämpfung - 20.12.2013 (11)
  8. Tastatur spinnt - Darstellung falscher Zeichen oder ungewolltes Ausführen von Befehlen
    Log-Analyse und Auswertung - 12.09.2012 (3)
  9. Ungewolltes automatisches Herunterfahren in Windows 7
    Plagegeister aller Art und deren Bekämpfung - 24.09.2010 (32)
  10. Ungewolltes Programm "Security Tool"
    Log-Analyse und Auswertung - 25.01.2010 (1)
  11. ungewolltes öffnen von Webseiten
    Log-Analyse und Auswertung - 11.11.2009 (82)
  12. Probleme mit Hochfahren, ungewolltes Fensteröffnen im Internetexplorer und mehr...
    Log-Analyse und Auswertung - 10.01.2009 (0)
  13. Interneteinstellungen speichern...
    Mülltonne - 01.09.2008 (0)
  14. Ungewolltes PayPal Password
    Log-Analyse und Auswertung - 05.08.2008 (1)
  15. Sicherheitscenter aktivieren
    Alles rund um Windows - 19.07.2007 (10)
  16. Ungewolltes Downloaden
    Log-Analyse und Auswertung - 07.05.2007 (3)
  17. Bildschirmanzeigen Aktivieren?
    Alles rund um Windows - 25.04.2007 (1)

Zum Thema Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen - Hallo Leute, ich habe hier zwar jede Menge gelesen über das Thema, aber nichts trifft eigentlich so richtigh mein Problem. Es ist folgendes: bei jedem Neustart ist die Einstellung 'Proxyserver - Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen...
Archiv
Du betrachtest: Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.