Frist.txt


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-09-2014
Ran by user (administrator) on USER-PC on 11-09-2014 17:37:41
Running from C:\Users\user\Desktop\Trojanercheck
Platform: Microsoft Windows 7 Home Premium  (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
() C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files\Samsung\Samsung Update Plus\SUPNotifier.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_12_0_0_70_ActiveX.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7711264 2009-08-19] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1541416 2009-07-15] (Synaptics Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-771618654-3341757510-301361698-1000\...\MountPoints2: {7059c972-c02c-11de-a172-806e6f6e6963} - E:\setup\rsrc\Autorun.exe
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: PDF Architect 2 -> C:\Program Files\PDF Architect 2\np-previewer.dll (pdfforge GmbH)

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-14] (Microsoft Corporation)
R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] ()
S3 PDF Architect 2; C:\Program Files\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [136216 2014-06-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\windows\System32\DRIVERS\avnetflt.sys [35848 2014-07-24] (Avira Operations GmbH & Co. KG)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-09] (Avira GmbH)
S3 cleanhlp; \??\C:\EEK\bin\cleanhlp32.sys [X]
S3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-10 21:03 - 2014-09-10 21:03 - 00000743 _____ () C:\Users\user\Desktop\Start Emsisoft Emergency Kit.lnk
2014-09-10 15:45 - 2014-09-05 03:42 - 00444416 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-09-10 15:45 - 2014-09-05 03:38 - 00303104 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-09-08 17:14 - 2014-09-08 17:14 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-09-07 14:27 - 2014-09-07 14:29 - 00005639 _____ () C:\Users\user\Desktop\Rote Grütze.txt
2014-09-07 12:58 - 2014-09-11 17:37 - 00000000 ____D () C:\FRST
2014-09-06 08:42 - 2014-09-06 08:42 - 00000689 _____ () C:\Users\user\Desktop\updatefix.bat
2014-09-05 13:48 - 2014-09-05 13:50 - 00000000 ____D () C:\windows\SoftwareDistribution.old
2014-09-05 12:55 - 2014-09-05 12:55 - 00000207 _____ () C:\windows\tweaking.com-regbackup-USER-PC-Microsoft-Windows-7-Home-Premium-(32-bit).dat
2014-09-05 12:55 - 2014-09-05 12:55 - 00000000 ____D () C:\RegBackup
2014-09-05 12:20 - 2014-09-05 12:20 - 07489465 _____ () C:\Users\user\Downloads\tweaking.com_windows_repair_aio[1].zip
2014-09-05 09:04 - 2014-09-05 09:05 - 231030439 _____ () C:\Users\user\Downloads\Windows6.1-KB947821-v33-x86 (2).msu
2014-09-04 21:29 - 2014-09-04 21:30 - 00000720 _____ () C:\DelFix.txt
2014-09-04 21:28 - 2014-09-04 21:28 - 00000000 _____ () C:\Users\user\Desktop\Neues Textdokument.txt
2014-09-04 20:55 - 2014-09-04 20:58 - 563934504 _____ (Microsoft Corporation) C:\Users\user\Downloads\windows6.1-KB976932-X86.exe
2014-09-04 20:21 - 2014-09-04 20:23 - 231030439 _____ () C:\Users\user\Downloads\Windows6.1-KB947821-v33-x86 (1).msu
2014-09-04 20:17 - 2014-09-04 20:17 - 00002278 _____ () C:\Users\user\AppData\Local\recently-used.xbel
2014-09-04 19:28 - 2014-09-04 19:28 - 00000000 ____D () C:\windows\system32\EventProviders
2014-09-04 17:57 - 2014-09-04 17:57 - 00000000 ____D () C:\windows\CheckSur
2014-09-04 17:53 - 2014-09-04 17:54 - 231030439 _____ () C:\Users\user\Downloads\Windows6.1-KB947821-v33-x86.msu
2014-09-03 17:12 - 2014-09-03 17:12 - 00000000 ____D () C:\Program Files\ESET
2014-09-03 11:49 - 2014-09-03 11:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-03 11:43 - 2014-09-04 21:29 - 00000000 ____D () C:\windows\ERUNT
2014-09-02 19:27 - 2014-09-11 17:37 - 00000000 ____D () C:\Users\user\Desktop\Trojanercheck
2014-09-02 16:15 - 2014-09-02 16:15 - 00000000 ____D () C:\windows\pss
2014-09-02 13:41 - 2014-09-02 13:41 - 00000000 ____D () C:\windows\PIF
2014-08-26 19:41 - 2014-08-26 19:41 - 00000000 ____D () C:\ProgramData\Arcade Lab
2014-08-15 10:16 - 2014-09-08 17:14 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-14 18:09 - 2014-08-14 18:09 - 00000000 ____D () C:\Users\user\Documents\PDF Architect 2
2014-08-14 18:09 - 2014-08-14 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-08-14 18:09 - 2014-08-14 18:09 - 00000000 ____D () C:\Program Files\PDF Architect 2
2014-08-14 18:08 - 2014-08-14 18:10 - 00000000 ____D () C:\Program Files\PDFCreator
2014-08-14 18:08 - 2014-08-14 18:08 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-08-14 18:08 - 2014-08-14 18:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-08-14 18:08 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\windows\system32\MSCOMCT2.OCX
2014-08-14 18:08 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\windows\system32\MSMAPI32.OCX
2014-08-14 18:08 - 2014-04-25 17:44 - 00095416 _____ (pdfforge GmbH) C:\windows\system32\pdfcmon.dll
2014-08-14 18:08 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\MSMPIDE.DLL
2014-08-14 18:08 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\windows\system32\VB6DE.DLL
2014-08-14 18:08 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\windows\system32\MSCMCDE.DLL
2014-08-14 18:08 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\MSCC2DE.DLL
2014-08-13 17:06 - 2014-08-13 17:06 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Brother

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-11 17:37 - 2014-09-07 12:58 - 00000000 ____D () C:\FRST
2014-09-11 17:37 - 2014-09-02 19:27 - 00000000 ____D () C:\Users\user\Desktop\Trojanercheck
2014-09-11 17:27 - 2009-07-14 06:34 - 00020400 _____ () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-11 17:27 - 2009-07-14 06:34 - 00020400 _____ () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-11 17:14 - 2009-09-22 07:23 - 01319823 _____ () C:\windows\WindowsUpdate.log
2014-09-11 17:14 - 2009-07-26 22:06 - 01759924 _____ () C:\windows\system32\PerfStringBackup.INI
2014-09-11 17:09 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-09-11 17:09 - 2009-07-14 06:39 - 00061967 _____ () C:\windows\setupact.log
2014-09-10 21:03 - 2014-09-10 21:03 - 00000743 _____ () C:\Users\user\Desktop\Start Emsisoft Emergency Kit.lnk
2014-09-10 20:55 - 2014-06-25 20:55 - 00000000 ____D () C:\windows\system32\MRT
2014-09-10 20:52 - 2014-06-25 20:55 - 98758480 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-09-10 17:16 - 2009-09-22 07:48 - 00750666 _____ () C:\windows\PFRO.log
2014-09-10 16:19 - 2014-07-09 19:05 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-09-08 17:14 - 2014-09-08 17:14 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-09-08 17:14 - 2014-08-15 10:16 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-08 17:14 - 2014-01-05 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-08 17:14 - 2014-01-05 15:07 - 00000000 ____D () C:\Program Files\Avira
2014-09-07 14:29 - 2014-09-07 14:27 - 00005639 _____ () C:\Users\user\Desktop\Rote Grütze.txt
2014-09-06 08:42 - 2014-09-06 08:42 - 00000689 _____ () C:\Users\user\Desktop\updatefix.bat
2014-09-05 13:50 - 2014-09-05 13:48 - 00000000 ____D () C:\windows\SoftwareDistribution.old
2014-09-05 13:48 - 2009-12-05 20:11 - 00109280 _____ () C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-05 13:44 - 2009-07-14 06:33 - 00412776 _____ () C:\windows\system32\FNTCACHE.DAT
2014-09-05 12:55 - 2014-09-05 12:55 - 00000207 _____ () C:\windows\tweaking.com-regbackup-USER-PC-Microsoft-Windows-7-Home-Premium-(32-bit).dat
2014-09-05 12:55 - 2014-09-05 12:55 - 00000000 ____D () C:\RegBackup
2014-09-05 12:20 - 2014-09-05 12:20 - 07489465 _____ () C:\Users\user\Downloads\tweaking.com_windows_repair_aio[1].zip
2014-09-05 09:05 - 2014-09-05 09:04 - 231030439 _____ () C:\Users\user\Downloads\Windows6.1-KB947821-v33-x86 (2).msu
2014-09-05 03:42 - 2014-09-10 15:45 - 00444416 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-09-05 03:38 - 2014-09-10 15:45 - 00303104 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-09-04 21:30 - 2014-09-04 21:29 - 00000720 _____ () C:\DelFix.txt
2014-09-04 21:29 - 2014-09-03 11:43 - 00000000 ____D () C:\windows\ERUNT
2014-09-04 21:28 - 2014-09-04 21:28 - 00000000 _____ () C:\Users\user\Desktop\Neues Textdokument.txt
2014-09-04 20:58 - 2014-09-04 20:55 - 563934504 _____ (Microsoft Corporation) C:\Users\user\Downloads\windows6.1-KB976932-X86.exe
2014-09-04 20:23 - 2014-09-04 20:21 - 231030439 _____ () C:\Users\user\Downloads\Windows6.1-KB947821-v33-x86 (1).msu
2014-09-04 20:17 - 2014-09-04 20:17 - 00002278 _____ () C:\Users\user\AppData\Local\recently-used.xbel
2014-09-04 19:28 - 2014-09-04 19:28 - 00000000 ____D () C:\windows\system32\EventProviders
2014-09-04 17:57 - 2014-09-04 17:57 - 00000000 ____D () C:\windows\CheckSur
2014-09-04 17:54 - 2014-09-04 17:53 - 231030439 _____ () C:\Users\user\Downloads\Windows6.1-KB947821-v33-x86.msu
2014-09-03 17:12 - 2014-09-03 17:12 - 00000000 ____D () C:\Program Files\ESET
2014-09-03 12:05 - 2009-07-14 06:52 - 00000000 ____D () C:\windows\twain_32
2014-09-03 11:49 - 2014-09-03 11:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-02 17:16 - 2014-01-14 21:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills
2014-09-02 16:15 - 2014-09-02 16:15 - 00000000 ____D () C:\windows\pss
2014-09-02 13:41 - 2014-09-02 13:41 - 00000000 ____D () C:\windows\PIF
2014-09-01 12:36 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF
2014-08-29 19:46 - 2014-01-14 10:56 - 00000000 ____D () C:\Users\user\Documents\2014
2014-08-26 19:41 - 2014-08-26 19:41 - 00000000 ____D () C:\ProgramData\Arcade Lab
2014-08-23 16:14 - 2014-02-04 21:59 - 00000000 ____D () C:\Users\user\Documents\gothic3
2014-08-15 10:16 - 2014-01-05 15:07 - 00000000 ____D () C:\ProgramData\Avira
2014-08-14 18:10 - 2014-08-14 18:08 - 00000000 ____D () C:\Program Files\PDFCreator
2014-08-14 18:09 - 2014-08-14 18:09 - 00000000 ____D () C:\Users\user\Documents\PDF Architect 2
2014-08-14 18:09 - 2014-08-14 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-08-14 18:09 - 2014-08-14 18:09 - 00000000 ____D () C:\Program Files\PDF Architect 2
2014-08-14 18:08 - 2014-08-14 18:08 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-08-14 18:08 - 2014-08-14 18:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-08-13 17:07 - 2014-01-21 09:23 - 00000432 _____ () C:\windows\BRWMARK.INI
2014-08-13 17:06 - 2014-08-13 17:06 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Brother

Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 09:38

==================== End Of Log ============================
         

--- --- ---


Shortcut.txt

Users shortcut scan result (x86) Version: 07-09-2014
Ran by user at 2014-09-11 17:38:13
Running from C:\Users\user\Desktop\Trojanercheck
Boot Mode: Normal
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)



Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-A91000000001}\SC_Reader.ico ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Call.lnk -> C:\Program Files\Windows Live\Messenger\wlcstart.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Family Safety.lnk -> C:\Windows\Installer\{994223F3-A99B-4DDD-9E1D-0190A17C6860}\fssicon.ico ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Fotogalerie.lnk -> C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Mail.lnk -> C:\Program Files\Windows Live\Mail\wlmail.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Messenger .lnk -> C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Movie Maker.lnk -> C:\Program Files\Windows Live\Photo Gallery\MovieMaker.Exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Writer.lnk -> C:\Program Files\Windows Live\Writer\WindowsLiveWriter.exe (Microsoft Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Game Pack.lnk -> C:\Program Files\Samsung Casual Games\GameConsole\GamePack.exe (Oberon Media)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Go-Go Gourmet\Go-Go Gourmet.lnk -> C:\Program Files\Samsung Casual Games\Go-Go Gourmet\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Go-Go Gourmet\Uninstall.lnk -> C:\Program Files\Samsung Casual Games\Go-Go Gourmet\Uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Farm Frenzy 2\Farm Frenzy 2.lnk -> C:\Program Files\Samsung Casual Games\Farm Frenzy 2\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Farm Frenzy 2\Uninstall.lnk -> C:\Program Files\Samsung Casual Games\Farm Frenzy 2\Uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Elf Bowling Hawaiian Vacation\Elf Bowling Hawaiian Vacation.lnk -> C:\Program Files\Samsung Casual Games\Elf Bowling Hawaiian Vacation\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Elf Bowling Hawaiian Vacation\Uninstall.lnk -> C:\Program Files\Samsung Casual Games\Elf Bowling Hawaiian Vacation\Uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Dairy Dash\Dairy Dash.lnk -> C:\Program Files\Samsung Casual Games\Dairy Dash\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Dairy Dash\Uninstall.lnk -> C:\Program Files\Samsung Casual Games\Dairy Dash\Uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Alice Greenfingers\Alice Greenfingers.lnk -> C:\Program Files\Samsung Casual Games\Alice Greenfingers\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Casual Games\Alice Greenfingers\Uninstall.lnk -> C:\Program Files\Samsung Casual Games\Alice Greenfingers\Uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\User Guide\User Guide.lnk -> C:\Program Files\Samsung\SamsungManual\RunManual.exe (Samsung Electronics)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Samsung Update Plus\Samsung Update Plus Help.lnk -> C:\Program Files\Samsung\Samsung Update Plus\SUPHelp.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Samsung Update Plus\Samsung Update Plus.lnk -> C:\Program Files\Samsung\Samsung Update Plus\SupClientApp.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Samsung Support Center\Samsung Support Center.lnk -> C:\Program Files\Samsung\Samsung Support Center\SSCMain.exe (SAMSUNG Electronics)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Samsung Recovery Solution 4\Samsung Recovery Solution 4.lnk -> C:\Program Files\Samsung\Samsung Recovery Solution 4\Manager1.exe (SEC)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Easy Network Manager\Easy Network Manager Help.lnk -> C:\Program Files\Samsung\Easy Network Manager\HelpLaunch.exe (Samsung Electronics)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Easy Network Manager\Easy Network Manager.lnk -> C:\Program Files\Samsung\Easy Network Manager\ENM.exe (Samsung Electronics Co. Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Easy Display Manager\Easy Display Manager Option.lnk -> C:\Program Files\Samsung\Easy Display Manager\HotKeyOption.exe (Samsung Electronics Co., Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Easy Display Manager\Easy Display Manager.lnk -> C:\Program Files\Samsung\Easy Display Manager\DMLauncher_Vista.exe (SAMSUNG Electronics)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Battery Life Extender\BatteryLifeExtender.lnk -> C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe (Samsung Electronics. Co. Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Historie.lnk -> C:\Program Files\PDFCreator\History.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator Hilfe.lnk -> C:\Program Files\PDFCreator\PDFCreator_german.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator im Internet.lnk -> C:\Program Files\PDFCreator\PDFCreator.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator.lnk -> C:\Program Files\PDFCreator\PDFCreator.exe (pdfforge  GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Translation Tool.lnk -> C:\Program Files\PDFCreator\languages\TransTool.exe (pdfforge  hxxp://www.pdfforge.org/)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Unterstütze PDFCreator.lnk -> C:\Program Files\PDFCreator\Unterstütze PDFCreator.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\AFPL License.lnk -> C:\Program Files\PDFCreator\AFPL License.txt (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\FairPlay License.lnk -> C:\Program Files\PDFCreator\FairPlay License.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\GPL License.lnk -> C:\Program Files\PDFCreator\GNU License.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Images2PDF\Images2PDF.lnk -> C:\Program Files\PDFCreator\Images2PDF\Images2PDF.exe (pdfforge GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2\PDF Architect 2.lnk -> C:\Program Files\PDF Architect 2\PDF Architect 2.exe (pdfforge GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mount&Blade\Mount&Blade.lnk -> D:\Spiele\Mount&Blade\mount&blade.exe ( Taleworlds Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mount&Blade\Uninstall.lnk -> D:\Spiele\Mount&Blade\uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005\Konfigurationstools\Fehler- und Verwendungsberichterstellung von SQL Server.lnk -> C:\Program Files\Microsoft SQL Server\90\Shared\SqlWtsn.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005\Konfigurationstools\SQL Server-Oberflächenkonfiguration.lnk -> C:\Program Files\Microsoft SQL Server\90\Shared\SqlSAC.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office - 60 Day Trial.lnk -> C:\Program Files\Microsoft Office Suite Activation Assistant\OAA.exe (Digital River Inc. )
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Access 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Excel 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Groove 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\GrooveIcon.ico ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office InfoPath 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office OneNote 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Outlook 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office PowerPoint 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Publisher 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Word 2007.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Tools\Digitales Zertifikat für VBA-Projekte.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Clip Organizer.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office 2007 Spracheinstellungen.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Picture Manager.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office-Diagnose.lnk -> C:\Windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GrampsAIO 4.0.3\GrampsAIO 4.0.3-console.lnk -> C:\Program Files\GrampsAIO-4.0.3\bin\gramps.exe (www.gramps-project.org)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GrampsAIO 4.0.3\GrampsAIO 4.0.3-debug.lnk -> C:\Program Files\GrampsAIO-4.0.3\bin\grampsd.exe (www.gramps-project.org)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GrampsAIO 4.0.3\GrampsAIO 4.0.3.lnk -> C:\Program Files\GrampsAIO-4.0.3\bin\grampsw.exe (www.gramps-project.org)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic III\Deep Silver Webseite.lnk -> C:\Program Files\Gothic III\copublisher.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic III\Gothic III deinstallieren.lnk -> C:\Program Files\InstallShield Installation Information\{02B244A2-7F6A-42E8-A36F-8C385D7A1625}\setup.exe (InstallShield Software Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic III\Gothic III liesmich.lnk -> C:\Program Files\Gothic III\Readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic III\Gothic III online registrieren.lnk -> C:\Program Files\Gothic III\register.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic III\Gothic III starten.lnk -> C:\Program Files\Gothic III\Gothic3.exe (Pluto 13 GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic III\Gothic III Webseite.lnk -> C:\Program Files\Gothic III\site.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic III\JoWooD Productions Webseite.lnk -> C:\Program Files\Gothic III\publisher.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\cadvilla professional 4.lnk -> C:\Program Files\cadvilla professional 4\Program\CACAD.exe (Creative Amadeo GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\cadvilla Tutorials.lnk -> C:\Program Files\cadvilla professional 4\tutorial.exe (mirabyte GmbH & Co. KG)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Hilfe\cadvilla professional 4.lnk -> C:\Program Files\cadvilla professional 4\Program\cadvilla.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Handbücher\Handbuch 3D-Konverter.lnk -> C:\Program Files\cadvilla professional 4\Manuals\3DKonverter.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Handbücher\Handbuch cadvilla professional 4.lnk -> C:\Program Files\cadvilla professional 4\Manuals\manual.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Handbücher\Handbuch DXF-Import.lnk -> C:\Program Files\cadvilla professional 4\Manuals\DXFImport.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Handbücher\Handbuch Fensterkonstruktion.lnk -> C:\Program Files\cadvilla professional 4\Manuals\OpeningConstruction.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Handbücher\Handbuch Massenermittlung.lnk -> C:\Program Files\cadvilla professional 4\Manuals\Quantities.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Handbücher\Handbuch Planzusammenstellung.lnk -> C:\Program Files\cadvilla professional 4\Manuals\Planzusammenstellung.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Handbücher\Tastaturbelegung.lnk -> C:\Program Files\cadvilla professional 4\Manuals\ShortCuts.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Avira Free Antivirus Hilfe.lnk -> C:\Program Files\Avira\AntiVir Desktop\avwin.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Avira Free Antivirus starten.lnk -> C:\Program Files\Avira\AntiVir Desktop\avcenter.exe (Avira Operations GmbH & Co. KG)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Avira im Internet.lnk -> C:\Program Files\Avira\AntiVir Desktop\weblink.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyPC Client\AnyPC deinstallieren.lnk -> C:\Program Files\InstallShield Installation Information\{1AFA1FEF-8CF9-4A51-AC46-64FAA7F3D9E2}\Setup.exe (InstallShield Software Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyPC Client\AnyPC.lnk -> C:\Program Files\AnyPC Client\APStart.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyPC Client\Erstellen einer AnyPC-Server-Installationsdatei.lnk -> C:\Program Files\AnyPC Client\SetupMaker.exe (Doctorsoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{DADC8F83-AFB8-4255-8036-052238A18A8A}\PlayTasks\0\Play.lnk -> C:\Program Files\Samsung Casual Games\Alice Greenfingers\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{D58C7682-084C-45CC-A1CF-EA7051A963A0}\PlayTasks\0\Play.lnk -> C:\Program Files\Samsung Casual Games\Go-Go Gourmet\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{72897716-6367-488F-98F0-12B17DBFBDD7}\PlayTasks\1\Call of Duty(R) - World at War(TM) - Mehrspieler.lnk -> C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe (Activision Blizzard, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{72897716-6367-488F-98F0-12B17DBFBDD7}\PlayTasks\0\Call of Duty(R) - World at War(TM) Einzelspieler - Koop.lnk -> C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe (Activision Blizzard, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{6282B6D7-8324-4F43-AF35-8ED766468E9C}\PlayTasks\0\Play.lnk -> C:\Program Files\Samsung Casual Games\Farm Frenzy 2\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{299C23BE-883D-4038-ACB4-4C8FCF07DC5A}\PlayTasks\0\Play.lnk -> C:\Program Files\Samsung Casual Games\Dairy Dash\Launch.exe (Oberon Media Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{07E7878E-762D-46D5-B8B8-7632A8DA579B}\PlayTasks\0\Play.lnk -> C:\Program Files\Samsung Casual Games\Elf Bowling Hawaiian Vacation\Launch.exe (Oberon Media Inc.)
Shortcut: C:\Users\Default\Desktop\CyberLink YouCam.lnk -> C:\Program Files\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\CyberLink YouCam.lnk -> C:\Program Files\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\Readme.lnk -> C:\Program Files\CyberLink\YouCam\Language\YouCamDEU.htm ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\YouCam Hilfe.lnk -> C:\Program Files\CyberLink\YouCam\Language\YouCamDeu.chm ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Adobe Reader 9.lnk -> C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)
Shortcut: C:\Users\Public\Desktop\AnyPC.lnk -> C:\Program Files\AnyPC Client\APStart.exe ()
Shortcut: C:\Users\Public\Desktop\Easy Network Manager.lnk -> C:\Program Files\Samsung\Easy Network Manager\ENM.exe (Samsung Electronics Co. Ltd)
Shortcut: C:\Users\Public\Desktop\Game Pack.lnk -> C:\Program Files\Samsung Casual Games\GameConsole\GamePack.exe (Oberon Media)
Shortcut: C:\Users\Public\Desktop\Gothic III.lnk -> C:\Program Files\Gothic III\Gothic3.exe (Pluto 13 GmbH)
Shortcut: C:\Users\Public\Desktop\Microsoft Office - 60 Day Trial.lnk -> C:\Program Files\Microsoft Office Suite Activation Assistant\OAA.exe (Digital River Inc. )
Shortcut: C:\Users\Public\Desktop\Samsung Recovery Solution 4.lnk -> C:\Program Files\Samsung\Samsung Recovery Solution 4\Manager1.exe (SEC)
Shortcut: C:\Users\Public\Desktop\Samsung Support Center.lnk -> C:\Program Files\Samsung\Samsung Support Center\SSCMain.exe (SAMSUNG Electronics)
Shortcut: C:\Users\Public\Desktop\Samsung Update Plus.lnk -> C:\Program Files\Samsung\Samsung Update Plus\SupClientApp.exe ()
Shortcut: C:\Users\Public\Desktop\User Guide.lnk -> C:\Program Files\Samsung\SamsungManual\RunManual.exe (Samsung Electronics)
Shortcut: C:\Users\UpdatusUser\Desktop\CyberLink YouCam.lnk -> C:\Program Files\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\Users\UpdatusUser\Desktop\Mount&Blade.lnk -> D:\Spiele\Mount&Blade\mount&blade.exe ( Taleworlds Entertainment)
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\CyberLink YouCam.lnk -> C:\Program Files\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\Readme.lnk -> C:\Program Files\CyberLink\YouCam\Language\YouCamDEU.htm ()
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\YouCam Hilfe.lnk -> C:\Program Files\CyberLink\YouCam\Language\YouCamDeu.chm ()
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\user\Links\Desktop.lnk -> C:\Users\user\Desktop ()
Shortcut: C:\Users\user\Links\Downloads.lnk -> C:\Users\user\Downloads ()
Shortcut: C:\Users\user\Desktop\CyberLink YouCam.lnk -> C:\Program Files\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\Users\user\Desktop\Mount&Blade.lnk -> D:\Spiele\Mount&Blade\mount&blade.exe ( Taleworlds Entertainment)
Shortcut: C:\Users\user\Desktop\Start Emsisoft Emergency Kit.lnk -> C:\EEK\bin\a2emergencykit.exe (No File)
Shortcut: C:\Users\user\Desktop\Gramps\GrampsAIO 4.0.3-console.lnk -> C:\Program Files\GrampsAIO-4.0.3\bin\gramps.exe (www.gramps-project.org)
Shortcut: C:\Users\user\Desktop\Gramps\GrampsAIO 4.0.3-debug.lnk -> C:\Program Files\GrampsAIO-4.0.3\bin\grampsd.exe (www.gramps-project.org)
Shortcut: C:\Users\user\Desktop\Gramps\GrampsAIO 4.0.3.lnk -> C:\Program Files\GrampsAIO-4.0.3\bin\grampsw.exe (www.gramps-project.org)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\CyberLink YouCam.lnk -> C:\Program Files\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\Readme.lnk -> C:\Program Files\CyberLink\YouCam\Language\YouCamDEU.htm ()
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\YouCam Hilfe.lnk -> C:\Program Files\CyberLink\YouCam\Language\YouCamDeu.chm ()
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\user\AppData\Local\Microsoft\Windows\GameExplorer\{DADC8F83-AFB8-4255-8036-052238A18A8A}\PlayTasks\0\Play.lnk -> C:\Program Files\Samsung Casual Games\Alice Greenfingers\Launch.exe (Oberon Media Inc.)
Shortcut: C:\Users\user\AppData\Local\Microsoft\Windows\GameExplorer\{72897716-6367-488F-98F0-12B17DBFBDD7}\PlayTasks\1\Call of Duty(R) - World at War(TM) - Mehrspieler.lnk -> C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe (Activision Blizzard, Inc.)
Shortcut: C:\Users\user\AppData\Local\Microsoft\Windows\GameExplorer\{72897716-6367-488F-98F0-12B17DBFBDD7}\PlayTasks\0\Call of Duty(R) - World at War(TM) Einzelspieler - Koop.lnk -> C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe (Activision Blizzard, Inc.)
Shortcut: C:\Users\user\AppData\Local\Microsoft\Windows\GameExplorer\{1CCDAE49-A8C0-4524-AA17-07BCF836569F}\PlayTasks\0\Spielen.lnk -> C:\Program Files\Gothic III\Gothic3.exe (Pluto 13 GmbH)
Shortcut: C:\Users\user\AppData\Local\Microsoft\Windows\GameExplorer\{07E7878E-762D-46D5-B8B8-7632A8DA579B}\PlayTasks\0\Play.lnk -> C:\Program Files\Samsung Casual Games\Elf Bowling Hawaiian Vacation\Launch.exe (Oberon Media Inc.)




ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Images2PDF\Images2PDF Console Application.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files\PDFCreator\Images2PDF\Images2PDFC.exe"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2\Uninstall or Modify PDF Architect 2.lnk -> C:\ProgramData\PDF Architect 2\Installation\PDFArchitect2Installer.exe (© pdfforge GmbH.) -> /uninstall
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005\Konfigurationstools\SQL Server-Konfigurations-Manager.lnk -> C:\Windows\System32\mmc.exe (Microsoft Corporation) -> /32 "C:\windows\system32\SQLServerManager.msc"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\My Avira\Avira.lnk -> C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) -> /showMiniGui
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\Online Registrierung.lnk -> C:\Program Files\CyberLink\YouCam\OLRSubmission\OLRSubmission.exe () -> /LANG:DEU
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\YouCam deinstallieren.lnk -> C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\setup.exe (Macrovision Corporation                                   ) -> -l0x000407 /z-uninstall
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Public\Desktop\Avira.lnk -> C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) -> /showMiniGui
ShortcutWithArgument: C:\Users\Public\Desktop\Browserwahl.lnk -> C:\Windows\System32\browserchoice.exe (Microsoft Corporation) -> /launch
ShortcutWithArgument: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\Online Registrierung.lnk -> C:\Program Files\CyberLink\YouCam\OLRSubmission\OLRSubmission.exe () -> /LANG:DEU
ShortcutWithArgument: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\YouCam deinstallieren.lnk -> C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\setup.exe (Macrovision Corporation                                   ) -> -l0x000407 /z-uninstall
ShortcutWithArgument: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) -> /tsr
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\Online Registrierung.lnk -> C:\Program Files\CyberLink\YouCam\OLRSubmission\OLRSubmission.exe () -> /LANG:DEU
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam\YouCam deinstallieren.lnk -> C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\setup.exe (Macrovision Corporation                                   ) -> -l0x000407 /z-uninstall
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) ->  -extoff
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1


InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Support.url -> hxxp://www.cadvilla.com/support
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cadvilla professional 4\Hilfe\Online-Tutorial.url -> hxxp://www.cadvilla.com/de/tutorial
InternetURL: C:\Users\user\Favorites\Cottage Lake House Plan 5572 - 4 Bedrooms and 3 Baths  The House Designers.url -> hxxp://www.thehousedesigners.com/plan/cottage-lake-5572/
InternetURL: C:\Users\user\Favorites\Galleries of Timber Houses - Timber Home Living.url -> hxxp://www.timberhomeliving.com/category/timber-home-galleries/
InternetURL: C:\Users\user\Favorites\http--www.kotte-zeller.de-5-11-Tactical-Umhaengetasche-Rush-Moab-6-schwarz.htmwebsale8=kotte-zeller-shop&pi=122207&ci=017019.url -> hxxp://www.kotte-zeller.de/5-11-Tactical-Umhaengetasche-Rush-Moab-6-schwarz.htm?websale8=kotte-zeller-shop&pi=122207&ci=017019
InternetURL: C:\Users\user\Favorites\Tipp Kolumbien – Elfenbeinküste WM 2014 Prognose  Fussball Wetten.url -> hxxp://www.fussball-wetten.com/wm-2014-tipps/tipp-kolumbien-elfenbeinkueste-wm-2014-prognose/
InternetURL: C:\Users\user\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742
InternetURL: C:\Users\user\Favorites\Windows Live\Windows Live Ideas.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700
InternetURL: C:\Users\user\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681
InternetURL: C:\Users\user\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682
InternetURL: C:\Users\user\Favorites\Urlaub\Reisen zu Piratenpreisen!.url -> hxxp://www.urlaubspiraten.de/
InternetURL: C:\Users\user\Favorites\Urlaub\Urlaubsguru » Reise Schnäppchen Blog für Urlaub, Flüge und Hotels.url -> hxxp://www.urlaubsguru.de/
InternetURL: C:\Users\user\Favorites\MSN-Websites\MSN Auto.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72680
InternetURL: C:\Users\user\Favorites\MSN-Websites\MSN Fernsehen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72659
InternetURL: C:\Users\user\Favorites\MSN-Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72640
InternetURL: C:\Users\user\Favorites\MSN-Websites\MSN Nachrichten.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72636
InternetURL: C:\Users\user\Favorites\MSN-Websites\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72635
InternetURL: C:\Users\user\Favorites\MSN-Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72630
InternetURL: C:\Users\user\Favorites\Microsoft-Websites\IE-Site auf Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186
InternetURL: C:\Users\user\Favorites\Microsoft-Websites\Microsoft Deutschland GmbH.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520
InternetURL: C:\Users\user\Favorites\Microsoft-Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813
InternetURL: C:\Users\user\Favorites\Microsoft-Websites\Microsoft Windows - Start.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629
InternetURL: C:\Users\user\Favorites\Microsoft-Websites\Microsoft zu Hause.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406
InternetURL: C:\Users\user\Favorites\Microsoft-Websites\Microsoft.com durchsuchen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72893
InternetURL: C:\Users\user\Favorites\Microsoft-Websites\Site für IE Add-Ons.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893
InternetURL: C:\Users\user\Favorites\Links\Vorgeschlagene Sites.url -> https://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\user\Favorites\Links\Web Slice-Katalog.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315

==================== End of log =============================
         

Es ist übrigens seitdem nichts mehr aufgepoppt.

Mal schauen ob wir noch Infos zu diesem einen Fund bekommen:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

file: C:\Users\Public\Desktop\Game Pack.lnk
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Kannst du mir die Datei c:\windows\Logs\CBS\CBS.log von deinem Rechner hochladen ?

Kannst du nochmal den Schritt in http://www.trojaner-board.de/158226-...ml#post1354598 wiederholen und dann nochmal die Updates über Windows Update starten ?

so. ich hoffe das klappt mit dem Anhang. Habe mal einen Screenshot gemacht von dem updatefix.bat

diesmal hat das update aber auch nicht ausgesehen, als wäre es noch nie gestartet.
"herunterladen" des updates ist fehlgeschlagen

Hm, ok die .bat passt jetzt auch nicht mehr 100%ig.

Mach mal ne neue mit diesem Inhalt:

@echo off
net stop cryptsvc
Net stop bits
Net stop wuauserv
del /F /S /Q %windir%\SoftwareDistribution.old
del /F /S /Q %systemroot%\System32\oldcatroot2
ren %windir%\SoftwareDistribution SoftwareDistribution.old
Ren %systemroot%\System32\Catroot2 oldcatroot2
takeown /f C:\Windows\winsxs\pending.xml
del /F /S /Q C:\Windows\winsxs\pending.old
Ren c:\windows\winsxs\pending.xml pending.old

REGSVR32 WUPS2.DLL /S
REGSVR32 WUPS.DLL /S
REGSVR32 WUAUENG.DLL /S
REGSVR32 WUAPI.DLL /S
REGSVR32 WUCLTUX.DLL /S
REGSVR32 WUWEBV.DLL /S
REGSVR32 JSCRIPT.DLL /S
REGSVR32 MSXML3.DLL /S

Ipconfig /flushdns

Net start bits
Net start wuauserv
net start cryptsvc
         

Und dann probier das Update nochmal.

siehe anhang...

update ist immer noch nicht "frisch"

Sorry ich bin heut nicht auf der Höhe

@echo off
net stop cryptsvc
Net stop bits
Net stop wuauserv
del /F /S /Q %windir%\SoftwareDistribution.old
del /F /S /Q %systemroot%\System32\oldcatroot2
rmdir /s /q %systemroot%\System32\oldcatroot2
rmdir /s /q %windir%\SoftwareDistribution.old
ren %windir%\SoftwareDistribution SoftwareDistribution.old
Ren %systemroot%\System32\Catroot2 oldcatroot2
takeown /f C:\Windows\winsxs\pending.xml
del /F /S /Q C:\Windows\winsxs\pending.old
Ren c:\windows\winsxs\pending.xml pending.old

REGSVR32 WUPS2.DLL /S
REGSVR32 WUPS.DLL /S
REGSVR32 WUAUENG.DLL /S
REGSVR32 WUAPI.DLL /S
REGSVR32 WUCLTUX.DLL /S
REGSVR32 WUWEBV.DLL /S
REGSVR32 JSCRIPT.DLL /S
REGSVR32 MSXML3.DLL /S

Ipconfig /flushdns

Net start bits
Net start wuauserv
net start cryptsvc
         

Folge mal der Anleitung: .NET-Framework macht Probleme | Borns IT- und Windows-Blog

Sprich, das .Net 3.5 einmal entfernen und dann neu initialisieren.

Dann nochmal das Update starten.

konnte es nicht beenden. Haken weg und OK ergibt die Fehlermeldung aus dem Bild. Neustart erwartet der Rechner trotzdem. Nach dem Neustart passiert das gleiche wieder. (Hatte gehofft, dass es danach evtl. geht)

.NET Framework Setup Verification Tool ?

Zitat von Keyssie

.NET Framework Setup Verification Tool ?

Ja, das sollte jetzt als nächstes laufen:

http://blogs.msdn.com/cfs-file.ashx/...r_5F00_new.zip

gedownloaded - entpackt und für 3.5.1 gestartet:
Hier das Log

======================================================================
[09/18/14,17:20:43] Beginning of new SetupVerifier activity logging session
[09/18/14,17:20:43] Build created on June 24, 2014
[09/18/14,17:20:43] For more information about repairing the .NET Framework, see hxxp://support.microsoft.com/kb/2698555 and hxxp://go.microsoft.com/fwlink/?LinkID=246062
[09/18/14,17:20:43] Activity log file location: C:\Users\user\AppData\Local\Temp\setupverifier_main_09-18-14_17.20.43.txt
[09/18/14,17:20:43] Error log file location: C:\Users\user\AppData\Local\Temp\setupverifier_errors_09-18-14_17.20.43.txt
[09/18/14,17:20:43] Detected operating system: Windows 7 (x86)
[09/18/14,17:20:43] Windows directory: C:\windows
[09/18/14,17:20:43] System directory: C:\windows\system32
[09/18/14,17:20:43] Program Files directory: C:\Program Files
[09/18/14,17:20:43] Common Files directory: C:\Program Files\Common Files
[09/18/14,17:20:43] Install state for .NET Framework 1.0: not installed.
[09/18/14,17:20:43] Install state for .NET Framework 1.1: not installed.
[09/18/14,17:20:43] Install state for .NET Framework 2.0: installed with service pack 2.
[09/18/14,17:20:43] Install state for .NET Framework 3.0: installed with service pack 2.
[09/18/14,17:20:43] Install state for .NET Framework 3.5: installed with service pack 1.
[09/18/14,17:20:43] Install state for .NET Framework 4 Client: installed with no service packs.
[09/18/14,17:20:43] Install state for .NET Framework 4 Full: installed with no service packs.
[09/18/14,17:20:43] Install state for .NET Framework 4.5: not installed.
[09/18/14,17:20:43] Install state for .NET Framework 4.5.1: not installed.
[09/18/14,17:20:43] Install state for .NET Framework 4.5.2: not installed.
[09/18/14,17:20:43] Not adding product '.NET Framework 1.0' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 1.1' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 1.1 SP1' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 2.0' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 2.0 SP1' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 3.0' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 3.0 SP1' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 3.5' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 4.5' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 4.5.1' because it is not currently installed
[09/18/14,17:20:43] Not adding product '.NET Framework 4.5.2' because it is not currently installed
[09/18/14,17:21:00] Starting verification for product .NET Framework 3.5 SP1
[09/18/14,17:21:00] Section [Files - .NET Framework 2.0 (Common)] - start parsing entries
[09/18/14,17:21:00] File C:\windows\system32\mscoree.dll (version 4.0.31106.0) is installed on the system
[09/18/14,17:21:00] File C:\windows\system32\dfshim.dll (version 4.0.31106.0) is installed on the system
[09/18/14,17:21:00] File C:\windows\system32\mscorier.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:00] File C:\windows\system32\mscories.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:00] File C:\windows\system32\MUI\0409\mscorees.dll (version 4.0.31106.0) is installed on the system
[09/18/14,17:21:00] File C:\windows\Assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:00] File C:\windows\Assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:00] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\big5.nlp (no version info) is installed on the system
[09/18/14,17:21:00] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bopomofo.nlp (no version info) is installed on the system
[09/18/14,17:21:00] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\ksc.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll (version 2.0.50727.4984) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normidna.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfc.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfd.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfkc.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfkd.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\prc.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\prcp.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp (no version info) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll (version 2.0.50727.4971) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:01] File C:\windows\Assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll (version 8.0.50727.4984) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:02] File C:\windows\Assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll (version 2.0.50727.4986) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:03] File C:\windows\Assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll (version 2.0.50727.4986) is installed on the system
[09/18/14,17:21:04] File C:\windows\Assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\NETFXSBS10.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\netfxsbs12.hkf (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\adonetdiag.mof (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet.mof (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet.mof.uninstall (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_perf.h (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_perf.ini (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_perf2.ini (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state_perf.h (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state_perf.ini (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\big5.nlp (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\bopomofo.nlp (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CLR.mof (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CLR.mof.uninstall (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config.comments (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config.default (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web.config (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web.config.comments (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web.config.default (no version info) is installed on the system
[09/18/14,17:21:04] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web_hightrust.config (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web_hightrust.config.default (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web_lowtrust.config (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web_lowtrust.config.default (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web_mediumtrust.config (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web_mediumtrust.config.default (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web_minimaltrust.config (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\web_minimaltrust.config.default (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\csc.rsp (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\dv_aspnetmmc.chm (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\ksc.nlp (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.xsd (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Common.targets (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Common.Tasks (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.CSharp.targets (no version info) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll (version 8.0.50727.4984) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.tlb (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:05] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.targets (no version info) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.tlb (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.tlb (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.rsp (no version info) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild\Microsoft.Build.Commontypes.xsd (no version info) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild\Microsoft.Build.Core.xsd (no version info) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll (version 2.0.50727.4984) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscoree.tlb (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll (version 2.0.50727.4984) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.tlb (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll (version 2.0.50727.4984) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\normidna.nlp (no version info) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\normnfc.nlp (no version info) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\normnfd.nlp (no version info) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\normnfkc.nlp (no version info) is installed on the system
[09/18/14,17:21:06] File C:\windows\Microsoft.NET\Framework\v2.0.50727\normnfkd.nlp (no version info) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\prc.nlp (no version info) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\prcp.nlp (no version info) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\RedistList\FrameworkList.xml (no version info) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.chm (no version info) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\sortkey.nlp (no version info) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\sorttbls.nlp (no version info) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll (version 2.0.50727.4984) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll (version 2.0.50727.4986) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.tlb (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.tlb (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll (version 2.0.50727.4985) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.tlb (version 8.0.50727.4926) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll (version 2.0.50727.4971) is installed on the system
[09/18/14,17:21:07] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.tlb (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll (version 2.0.50727.4986) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.tlb (version 8.0.50727.4926) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\UninstallCommon.sql (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\UninstallMembership.sql (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\UninstallPersistSqlState.sql (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\UninstallPersonalization.sql (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\UnInstallProfile.SQL (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\UninstallSqlState.sql (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\UninstallSqlStateTemplate.sql (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\UninstallWebEventSqlProvider.sql (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.rsp (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\vsavb7.olb (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll (version 8.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll (version 2.0.50727.4927) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\xjis.nlp (no version info) is installed on the system
[09/18/14,17:21:08] File C:\windows\Microsoft.NET\Framework\v2.0.50727\XPThemes.manifest (no version info) is installed on the system
[09/18/14,17:21:08] Section [Files - .NET Framework 2.0 (Common)] - stop parsing entries
[09/18/14,17:21:08] Section [Files - .NET Framework 2.0 (32-bit)] - start parsing entries
[09/18/14,17:21:08] Section [Files - .NET Framework 2.0 (32-bit)] - stop parsing entries
[09/18/14,17:21:08] Not running action 'Files - .NET Framework 2.0 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:08] Section [Files - .NET Framework 3.0 (Common)] - start parsing entries
[09/18/14,17:21:08] File C:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:08] File C:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:08] File C:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:08] File C:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:08] File C:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:08] File C:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll (version 3.0.6920.1109) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMDiagnostics.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:09] File C:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:10] File C:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:10] File C:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:10] File C:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:10] File C:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:10] File C:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll (version 3.0.4203.4926) is installed on the system
[09/18/14,17:21:10] File C:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll (version 3.0.4203.4926) is installed on the system
[09/18/14,17:21:10] File C:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll (version 3.0.4203.4926) is installed on the system
[09/18/14,17:21:10] File C:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.WinFX.targets (no version info) is installed on the system
[09/18/14,17:21:10] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:10] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:10] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.config (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_ServiceModelEndpointPerfCounters.reg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_ServiceModelEndpointPerfCounters.vrg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_ServiceModelOperationPerfCounters.reg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_ServiceModelOperationPerfCounters.vrg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_ServiceModelServicePerfCounters.reg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_ServiceModelServicePerfCounters.vrg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_SMSvcHostPerfCounters.reg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_SMSvcHostPerfCounters.vrg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_TransactionBridgePerfCounters.reg (no version info) is installed on the system
[09/18/14,17:21:11] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\_TransactionBridgePerfCounters.vrg (no version info) is installed on the system
[09/18/14,17:21:12] File C:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:12] File C:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:12] File C:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:12] File C:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets (no version info) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets (no version info) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:12] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll (version 3.0.4506.5007) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll (version 3.0.6920.1109) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll (version 3.0.4203.4926) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll (version 3.0.4203.4926) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll (version 3.0.4203.4926) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:13] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:13] Section [Files - .NET Framework 3.0 (Common)] - stop parsing entries
[09/18/14,17:21:13] Section [Files - .NET Framework 3.0 (32-bit)] - start parsing entries
[09/18/14,17:21:13] File C:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:13] File C:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll (version 3.0.6920.5005) is installed on the system
[09/18/14,17:21:13] File C:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:13] File C:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.cat (no version info) is installed on the system
[09/18/14,17:21:14] File C:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:14] Section [Files - .NET Framework 3.0 (32-bit)] - stop parsing entries
[09/18/14,17:21:14] Not running action 'Files - .NET Framework 3.0 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:14] Section [Files - .NET Framework 3.0 (Vista and higher)] - start parsing entries
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe (version 3.0.6920.4902) is installed on the system
[09/18/14,17:21:14] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMConfigInstaller.exe (version 3.0.4506.4926) is installed on the system
[09/18/14,17:21:14] Section [Files - .NET Framework 3.0 (Vista and higher)] - stop parsing entries
[09/18/14,17:21:14] Section [Files - .NET Framework 3.5 (Common)] - start parsing entries
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll (version 3.5.30729.5005) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:14] File C:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll (version 3.5.594.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll (version 3.5.30729.4958) is installed on the system
[09/18/14,17:21:15] File C:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll (version 3.5.594.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe.config (no version info) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe.config (no version info) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe.config (no version info) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\csc.exe (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\csc.exe.config (no version info) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\csc.rsp (no version info) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\default.win32manifest (no version info) is installed on the system
[09/18/14,17:21:15] File C:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.xsd (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Common.targets (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Common.Tasks (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\Microsoft.CSharp.targets (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualBasic.targets (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll (version 9.0.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\Microsoft.WinFx.targets (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\msbuild.exe.config (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\MSBuild.rsp (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\SqlServer.targets (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\vbc.exe (version 9.0.30729.715) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\vbc.exe.config (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\vbc.rsp (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe (version 3.5.594.4926) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\MSBuild\Microsoft.Build.Commontypes.xsd (no version info) is installed on the system
[09/18/14,17:21:16] File C:\windows\Microsoft.NET\Framework\v3.5\MSBuild\Microsoft.Build.Core.xsd (no version info) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets (no version info) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets (no version info) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll (version 9.0.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll (version 3.5.30729.5005) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll (version 3.5.594.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll (version 3.5.30729.4958) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll (version 3.5.594.4926) is installed on the system
[09/18/14,17:21:16] File C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll (version 3.5.30729.4926) is installed on the system
[09/18/14,17:21:16] Section [Files - .NET Framework 3.5 (Common)] - stop parsing entries
[09/18/14,17:21:16] Section [Files - .NET Framework 3.5 SP1 (32-bit)] - start parsing entries
[09/18/14,17:21:16] Section [Files - .NET Framework 3.5 SP1 (32-bit)] - stop parsing entries
[09/18/14,17:21:16] Not running action 'Files - .NET Framework 3.5 SP1 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:17] Section [Registry - .NET Framework 2.0 (Common)] - start parsing entries
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\.NETFramework\policy\standards\v1.0.0
	Value: v2.0.50727
	Expected Data:	50727
	Actual Data:	50727
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\.NETFramework\policy\standards\Standard CLI 2002
	Value: v2.0.50727
	Expected Data:	4095
	Actual Data:	4095
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\.NETFramework\policy\standards\Standard CLI 2005
	Value: v2.0.50727
	Expected Data:	4095
	Actual Data:	4095
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\.NETFramework\policy\upgrades
	Value: 2.0.50727
	Expected Data:	1.0.0-2.0.50727
	Actual Data:	1.0.0-2.0.50727
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\.NETFramework\policy\v2.0
	Value: 50727
	Expected Data:	50727-50727
	Actual Data:	50727-50727
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v2.0.50727
	Value: SP
	Actual Data:	REGISTRY VALUE FOUND
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v2.0.50727
	Value: Install
	Expected Data:	1
	Actual Data:	1
[09/18/14,17:21:17] Section [Registry - .NET Framework 2.0 (Common)] - stop parsing entries
[09/18/14,17:21:17] Section [Registry - .NET Framework 2.0 (32-bit)] - start parsing entries
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\.NETFramework
	Value: InstallRoot
	Expected Data:	c:\windows\microsoft.net\framework\
	Actual Data:	c:\windows\microsoft.net\framework\
[09/18/14,17:21:17] Section [Registry - .NET Framework 2.0 (32-bit)] - stop parsing entries
[09/18/14,17:21:17] Not running action 'Registry - .NET Framework 2.0 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:17] Not running action 'Registry - .NET Framework 2.0 (Wow6432Node)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:17] Section [Registry GE - .NET Framework 2.0 SP2 (Common)] - start parsing entries
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v2.0.50727
	Value: SP
	Expected Data:	2
	Actual Data:	2
[09/18/14,17:21:17] Section [Registry GE - .NET Framework 2.0 SP2 (Common)] - stop parsing entries
[09/18/14,17:21:17] Section [Registry GE - .NET Framework 2.0 SP2 (32-bit)] - start parsing entries
[09/18/14,17:21:17] Section [Registry GE - .NET Framework 2.0 SP2 (32-bit)] - stop parsing entries
[09/18/14,17:21:17] Not running action 'Registry GE - .NET Framework 2.0 SP2 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:17] Section [Registry - .NET Framework 3.0 (Common)] - start parsing entries
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup
	Value: InstallSuccess
	Expected Data:	1
	Actual Data:	1
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup
	Value: Version
	Actual Data:	REGISTRY VALUE FOUND
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup\Windows Communication Foundation
	Value: InstallSuccess
	Expected Data:	1
	Actual Data:	1
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup\Windows Communication Foundation
	Value: Version
	Actual Data:	REGISTRY VALUE FOUND
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup\Windows Presentation Foundation
	Value: ProductVersion
	Actual Data:	REGISTRY VALUE FOUND
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup\Windows Workflow Foundation
	Value: InstallSuccess
	Expected Data:	1
	Actual Data:	1
[09/18/14,17:21:17] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup\Windows Workflow Foundation
	Value: FileVersion
	Actual Data:	REGISTRY VALUE FOUND
[09/18/14,17:21:17] Section [Registry - .NET Framework 3.0 (Common)] - stop parsing entries
[09/18/14,17:21:18] Section [Registry - .NET Framework 3.0 (32-bit)] - start parsing entries
[09/18/14,17:21:18] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup\Windows Presentation Foundation
	Value: Version
	Actual Data:	REGISTRY VALUE FOUND
[09/18/14,17:21:18] Section [Registry - .NET Framework 3.0 (32-bit)] - stop parsing entries
[09/18/14,17:21:18] Not running action 'Registry - .NET Framework 3.0 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:18] Not running action 'Registry - .NET Framework 3.0 (Wow6432Node)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:18] Section [Registry GE - .NET Framework 3.0 SP2 (Common)] - start parsing entries
[09/18/14,17:21:18] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0
	Value: SP
	Expected Data:	2
	Actual Data:	2
[09/18/14,17:21:18] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0
	Value: Install
	Expected Data:	1
	Actual Data:	1
[09/18/14,17:21:18] Section [Registry GE - .NET Framework 3.0 SP2 (Common)] - stop parsing entries
[09/18/14,17:21:18] Section [Registry GE - .NET Framework 3.0 SP2 (32-bit)] - start parsing entries
[09/18/14,17:21:18] Section [Registry GE - .NET Framework 3.0 SP2 (32-bit)] - stop parsing entries
[09/18/14,17:21:18] Not running action 'Registry GE - .NET Framework 3.0 SP2 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:18] Not running action 'Registry GE - .NET Framework 3.0 SP2 (Wow6432Node)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:18] Section [Registry - .NET Framework 3.5 (Common)] - start parsing entries
[09/18/14,17:21:18] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5
	Value: SP
	Actual Data:	REGISTRY VALUE FOUND
[09/18/14,17:21:18] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5
	Value: Install
	Expected Data:	1
	Actual Data:	1
[09/18/14,17:21:18] Section [Registry - .NET Framework 3.5 (Common)] - stop parsing entries
[09/18/14,17:21:18] Section [Registry - .NET Framework 3.5 (32-bit)] - start parsing entries
[09/18/14,17:21:18] Section [Registry - .NET Framework 3.5 (32-bit)] - stop parsing entries
[09/18/14,17:21:18] Not running action 'Registry - .NET Framework 3.5 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:18] Not running action 'Registry - .NET Framework 3.5 (Wow6432Node)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:19] Section [Registry GE - .NET Framework 3.5 SP1 (Common)] - start parsing entries
[09/18/14,17:21:19] Key: HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5
	Value: SP
	Expected Data:	1
	Actual Data:	1
[09/18/14,17:21:19] Section [Registry GE - .NET Framework 3.5 SP1 (Common)] - stop parsing entries
[09/18/14,17:21:19] Section [Registry GE - .NET Framework 3.5 SP1 (32-bit)] - start parsing entries
[09/18/14,17:21:19] Section [Registry GE - .NET Framework 3.5 SP1 (32-bit)] - stop parsing entries
[09/18/14,17:21:19] Not running action 'Registry GE - .NET Framework 3.5 SP1 (64-bit)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:19] Not running action 'Registry GE - .NET Framework 3.5 SP1 (Wow6432Node)' for product '.NET Framework 3.5 SP1' because the OS condition does not match
[09/18/14,17:21:19] Section [Files - .NET Framework 3.0 SP1AndLater (Common)] - start parsing entries
[09/18/14,17:21:19] Section [Files - .NET Framework 3.0 SP1AndLater (Common)] - stop parsing entries
[09/18/14,17:21:19] Processing custom action 'Custom Action - .NET Framework 2.0 test application'
[09/18/14,17:21:19] ExecutablePath = 'Netfx20TestApplication.exe'
[09/18/14,17:21:19] FriendlyName = '.NET Framework 2.0 test application'
[09/18/14,17:21:19] TimeoutSeconds = '300'
[09/18/14,17:21:19] WaitOnExit = 'true'
[09/18/14,17:21:19] Silent = 'true'
[09/18/14,17:21:19] Launching process 'Netfx20TestApplication.exe' now
[09/18/14,17:21:19] Process successfully launched. Waiting 300 seconds for it to complete.
[09/18/14,17:21:21] Process 'Netfx20TestApplication.exe' exited with return code 0
[09/18/14,17:21:21] Section [Files - .NET Framework netfxperf.dll] - start parsing entries
[09/18/14,17:21:21] File C:\windows\system32\netfxperf.dll (version 4.0.31106.0) is installed on the system
[09/18/14,17:21:21] Section [Files - .NET Framework netfxperf.dll] - stop parsing entries
[09/18/14,17:21:21] Verification succeeded for product .NET Framework 3.5 SP1
         

Das ist nur nen Quarantäne-File.

Mach mal Start->Ausführen->

winver
         

jo. da steht jetzt sp1.... allerdings jetzt auch unter computer-eigenschaften.

wer weiß. gestern abend wurde noch etwas installiert. vielleicht hat da noch etwas gefehlt....

wieso findet Antivir ein Quarantäne-File?
Zum einen dachte ich dass wir das gelöscht/entfernt hatten und zum anderen dachte ich, wenn etwas gefunden und in quarantäne geschickt wurde irgendwann einmal, wird es danach nicht mehr gefunden...