|
Log-Analyse und Auswertung: Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurdeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
04.09.2014, 14:13 | #1 |
| Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Hallo, zu Beginn die Warnung, ich habe nur sehr beschränkt Ahnung von Computern und/oder Netzwerken und allem drum herum. Bitte zeigt Nachsicht. ich habe schon vor einigen Wochen von Avira die Nachricht bekommen, dass Malware entdeckt worden sei. Ich habe diese brav aus der Quarantäne gelöscht, aber seitdem taucht die im Titel genannte Fehlermeldung beim Systemstart auf. Ich habe Schritte 1-3 der Checkliste "Informationen zusammenstellen" durchgeführt und dementsprechend den Defogger installiert und "Disable" geklickt, die Logs mit FRST erstellt und den Scan mit GMER gemacht. An Schritt 4, dem Export der Avira-Logfiles, bin ich aber bisher gescheitert: Zum einen muss ich gestehen, dass ich die Meldung anscheinend schon mehr als 30 Tage ertrage und dementsprechend die damals gefundene Malware gar nicht mehr als Ereignis auftaucht, zum anderen geschieht schlicht und einfach nichts, wenn ich "Ereignis exportieren" klicke. AUßERDEM, und das erschwert die Sache zusätzlich, meldet mein Laptop seit dem Scan durch GMER ein mögliches Problem mit dem Treiber für den Adapter Drahtlosnetzwerkverbindung und kann sich nicht mehr mit unserem WLAN verbinden (Ich erstelle dieses Thema von einem anderen Computer aus). Ich weiß nicht, ob hier ein Zusammenhang besteht, aber ich würde ungern ohne weitere Beratung den Treiber reparieren, wenn mit dem Defogger aktuell etwas auf meinem PC arbeitet, in dass ich so gar keinen Einblick habe. In der Hoffnung auf Hilfe, leicht verzweifelt Nina Geändert von NiFu (04.09.2014 um 14:37 Uhr) |
04.09.2014, 14:18 | #2 |
/// the machine /// TB-Ausbilder | Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
04.09.2014, 14:40 | #3 |
| Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde FRST:
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02 Ran by Nina (administrator) on LITTLEONE on 04-09-2014 10:07:59 Running from C:\Users\Nina\Downloads Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe (Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Blue Coat Systems, Inc.) C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (DeviceVM, Inc.) C:\Program Files (x86)\InstantView\config\DVMExportService.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (ClientConnect Ltd.) C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe (Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (WiseCleaner.COM) C:\Program Files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (DeviceVM, Inc.) C:\Program Files (x86)\InstantView\tools\aoiosnap.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (O3SIS AG) C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe () C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (Microsoft Corporation) C:\Windows\System32\regsvr32.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (phase-6) C:\Program Files (x86)\phase-6\phase-6\reminder\reminder.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe (WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Dropbox, Inc.) C:\Users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Microsoft Corporation) C:\Windows\splwow64.exe () C:\Users\Nina\Downloads\Defogger.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-04-23] (Conexant Systems, Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2029352 2010-01-29] (Synaptics Incorporated) HKLM\...\Run: [InstantView Agent] => C:\Program Files (x86)\InstantView\tools\aoiosnap.exe [1093312 2010-05-04] (DeviceVM, Inc.) HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-04-23] (Acer Incorporated) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-24] (Intel Corporation) HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [960080 2010-05-25] (Dritek System Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-24] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-24] (Egis Technology Inc.) HKLM-x32\...\Run: [VitaKeyTSR] => C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe [186224 2010-06-02] (Egis Technology Inc. ) HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2013-05-05] () HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [DataSync Outlook] => C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe [720896 2009-12-07] (O3SIS AG) HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] () HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [pfcuxj] => regsvr32.exe " HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AfquWazes] => regsvr32.exe "C:\ProgramData\AfquWazes\AfquWazes.dat" HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\MountPoints2: {bd6a1d80-1049-11e0-b29a-001e3327cdfa} - D:\LaunchU3.exe -a HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\MountPoints2: {dff29601-cf0a-11df-951a-001e3327cdfa} - "D:\WD SmartWare.exe" autoplay=true Lsa: [Notification Packages] EgisPwdFilter EgisDSPwdFilter Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk ShortcutTarget: phase-6 Reminder.lnk -> C:\Program Files (x86)\phase-6\phase-6\reminder\reminder.exe (phase-6) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase6_17_erinnerung.lnk ShortcutTarget: phase6_17_erinnerung.lnk -> C:\Program Files (x86)\phase6\phase6_17\WinStart\WinStart.exe (phase6) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital) Startup: C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir= HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir= URLSearchHook: HKLM-x32 - MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll (ClientConnect Ltd.) URLSearchHook: HKCU - MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll (ClientConnect Ltd.) StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029 SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir= SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir= SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE396 SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029 BHO: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\x64\EgisPBIE.dll (Egis Technology Inc.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO-x32: Conduit Engine -> {30F9B915-B755-4826-820B-08FBA6BD249D} -> C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO-x32: SwissAcademic.Citavi.IEPicker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\EgisPBIE.dll (Egis Technology Inc.) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: MyAshampoo Toolbar -> {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} -> C:\Users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll (ClientConnect Ltd.) BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) Toolbar: HKLM-x32 - MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll (ClientConnect Ltd.) Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - No File DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default FF Homepage: hxxp://www.ecosia.org/ FF NetworkProxy: "ftp", "proxy.uni-bonn.de" FF NetworkProxy: "ftp_port", 8080 FF NetworkProxy: "http", "proxy.uni-bonn.de" FF NetworkProxy: "http_port", 8080 FF NetworkProxy: "no_proxies_on", "uni-bonn.de" FF NetworkProxy: "socks_version", 4 FF NetworkProxy: "ssl", "proxy.uni-bonn.de" FF NetworkProxy: "ssl_port", 8080 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.4 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.) FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF user.js: detected! => C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\ecosia.xml FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\Mysearchdial.xml FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\yahoo-msd.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira Browser Safety - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\abs@avira.com [2014-08-28] FF Extension: Suche App - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-20] FF Extension: LeechBlock - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2013-10-12] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20] FF Extension: MySearchDial - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi [2014-05-03] FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-09-28] FF Extension: Adblock Plus - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-12] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-23] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-07-23] FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files (x86)\Acer Bio Protection\FFExt FF Extension: SimplePass Online Accounts Extension - C:\Program Files (x86)\Acer Bio Protection\FFExt [2010-06-26] FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2010-11-26] FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2013-01-20] FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-05-21] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG) R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [2037248 2010-04-26] (AuthenTec, Inc.) [File not signed] R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG) R2 bckwfs; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2647256 2014-01-24] (Blue Coat Systems, Inc.) R2 DvmMDES; C:\Program Files (x86)\InstantView\config\DVMExportService.exe [420088 2010-06-02] (DeviceVM, Inc.) R2 EgisTec Service; C:\Program Files (x86)\Acer Bio Protection\EgisService.exe [310128 2010-06-02] (Egis Technology Inc. ) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-09] (NewTech Infosystems, Inc.) [File not signed] S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [31744 2010-12-15] () [File not signed] R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) R2 TBSrv; C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe [350496 2014-03-26] (ClientConnect Ltd.) R2 WDDMService.exe; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [116224 2009-08-17] (WDC) [File not signed] R2 WDSmartWareBackgroundService; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG) R2 bckd; C:\Windows\System32\drivers\bckd.sys [126168 2014-01-24] (Blue Coat Systems, Inc.) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () R1 DVMIO; C:\Program Files (x86)\InstantView\tools\dvmio_x64.sys [19560 2010-04-20] (DeviceVM, Inc.) S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-04 10:07 - 2014-09-04 10:09 - 00031790 _____ () C:\Users\Nina\Downloads\FRST.txt 2014-09-04 10:07 - 2014-09-04 10:08 - 00000000 ____D () C:\FRST 2014-09-04 10:06 - 2014-09-04 10:07 - 02104832 _____ (Farbar) C:\Users\Nina\Downloads\FRST64.exe 2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log 2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable 2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe 2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe 2014-09-03 23:42 - 2014-09-03 23:42 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-09-03 23:35 - 2014-09-03 23:36 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe 2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-03 22:35 - 2014-09-04 10:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-03 22:35 - 2014-09-03 22:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-03 22:35 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-03 22:35 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-02 22:25 - 2014-09-02 22:25 - 00000000 ____D () C:\ProgramData\AfquWazes 2014-09-02 00:56 - 2014-09-04 09:18 - 00000450 _____ () C:\Windows\Tasks\Wise Auto Shutdown Task.job 2014-09-02 00:56 - 2014-09-02 00:56 - 00002874 _____ () C:\Windows\System32\Tasks\Wise Auto Shutdown Task 2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel 2014-08-29 10:38 - 2014-09-03 22:35 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe 2014-08-19 12:52 - 2014-08-22 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown 2014-08-19 12:52 - 2014-08-19 23:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown 2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise 2014-08-19 11:09 - 2014-08-19 14:37 - 00000000 ____D () C:\Users\Nina\Desktop\Collage 2014-08-16 11:51 - 2014-08-16 11:29 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll 2014-08-16 11:51 - 2014-08-16 11:29 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle 2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-14 12:44 - 2014-08-14 13:46 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente 2014-08-13 23:42 - 2014-08-07 03:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-13 23:42 - 2014-08-07 03:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL 2014-08-12 00:21 - 2014-08-12 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX 2014-08-05 12:00 - 2014-08-05 12:00 - 00000000 ____D () C:\Users\Nina\AppData\Local\{998615A4-19B8-4757-BE09-D3B71380782F} 2014-08-05 11:42 - 2014-08-21 14:23 - 00000000 ____D () C:\ProgramData\Package Cache ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-04 10:09 - 2014-09-04 10:07 - 00031790 _____ () C:\Users\Nina\Downloads\FRST.txt 2014-09-04 10:08 - 2014-09-04 10:07 - 00000000 ____D () C:\FRST 2014-09-04 10:08 - 2010-06-26 05:36 - 00000177 ____H () C:\dvmexp.idx 2014-09-04 10:07 - 2014-09-04 10:06 - 02104832 _____ (Farbar) C:\Users\Nina\Downloads\FRST64.exe 2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log 2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable 2014-09-04 10:04 - 2010-09-08 16:08 - 00000000 ____D () C:\Users\Nina 2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe 2014-09-04 10:01 - 2014-09-03 22:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-04 09:27 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-04 09:27 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-04 09:25 - 2010-06-26 05:21 - 01287823 _____ () C:\Windows\WindowsUpdate.log 2014-09-04 09:19 - 2013-09-03 11:00 - 00000000 ___RD () C:\Users\Nina\Dropbox 2014-09-04 09:19 - 2013-09-03 10:40 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Dropbox 2014-09-04 09:18 - 2014-09-02 00:56 - 00000450 _____ () C:\Windows\Tasks\Wise Auto Shutdown Task.job 2014-09-04 09:18 - 2010-11-03 15:00 - 00000000 ____D () C:\Users\Public\Documents\phase6_17_Daten 2014-09-04 09:16 - 2010-06-26 05:17 - 00176846 _____ () C:\Windows\PFRO.log 2014-09-04 09:16 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-04 09:16 - 2009-07-14 06:51 - 00534767 _____ () C:\Windows\setupact.log 2014-09-04 00:25 - 2010-06-26 08:24 - 00000268 _____ () C:\dvmaccounts.ini 2014-09-04 00:08 - 2010-09-08 18:05 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Skype 2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe 2014-09-03 23:42 - 2014-09-03 23:42 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-09-03 23:42 - 2010-09-08 16:54 - 00000000 ____D () C:\Users\Nina\AppData\Local\Google 2014-09-03 23:42 - 2010-06-09 21:57 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-09-03 23:36 - 2014-09-03 23:35 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe 2014-09-03 23:04 - 2011-09-05 15:15 - 00000000 ___RD () C:\Users\Nina\Desktop\Internet 2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-03 23:03 - 2014-07-23 20:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-03 23:03 - 2012-05-03 02:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-03 22:35 - 2014-09-03 22:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-03 22:35 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-03 22:35 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-03 22:35 - 2014-08-29 10:38 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe 2014-09-03 21:27 - 2011-02-04 11:14 - 00000000 ____D () C:\Users\Nina\Documents\Outlook-Dateien 2014-09-03 20:12 - 2010-09-08 16:23 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Adobe 2014-09-03 20:12 - 2010-09-08 16:10 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Macromedia 2014-09-03 14:20 - 2013-03-26 22:37 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\vlc 2014-09-03 13:25 - 2011-09-09 13:18 - 00000000 ____D () C:\Users\Nina\Desktop\Temporary 2014-09-03 12:56 - 2010-10-13 12:39 - 00000000 ____D () C:\Users\Nina\.gimp-2.6 2014-09-03 12:38 - 2010-06-26 15:11 - 00756680 _____ () C:\Windows\system32\perfh007.dat 2014-09-03 12:38 - 2010-06-26 15:11 - 00173344 _____ () C:\Windows\system32\perfc007.dat 2014-09-03 12:38 - 2009-07-14 07:13 - 01768244 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-02 22:25 - 2014-09-02 22:25 - 00000000 ____D () C:\ProgramData\AfquWazes 2014-09-02 13:12 - 2013-12-29 19:19 - 00000000 ____D () C:\Users\Nina\Desktop\BA 2014-09-02 00:56 - 2014-09-02 00:56 - 00002874 _____ () C:\Windows\System32\Tasks\Wise Auto Shutdown Task 2014-09-01 23:06 - 2010-09-29 00:20 - 00000000 ____D () C:\Users\Nina\Gesendete 2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel 2014-09-01 17:09 - 2010-10-20 10:50 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\gtk-2.0 2014-08-30 16:27 - 2010-09-09 19:00 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Liteon 2014-08-29 12:34 - 2012-01-08 22:25 - 00000000 ____D () C:\Users\Nina\Documents\Essen&Trinken 2014-08-29 12:33 - 2011-09-05 15:10 - 00000000 ___RD () C:\Users\Nina\Desktop\Miscellaneous 2014-08-29 12:03 - 2011-11-24 03:19 - 00000000 ____D () C:\Users\Nina\Desktop\Celtic Films 2014-08-22 12:00 - 2011-09-05 15:16 - 00000000 ___RD () C:\Users\Nina\Desktop\Regulars 2014-08-22 11:02 - 2014-08-19 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown 2014-08-21 19:41 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-08-21 14:23 - 2014-08-05 11:42 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-21 14:23 - 2013-02-26 02:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-08-21 14:23 - 2013-02-26 02:42 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-08-19 23:49 - 2014-08-19 12:52 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown 2014-08-19 14:37 - 2014-08-19 11:09 - 00000000 ____D () C:\Users\Nina\Desktop\Collage 2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise 2014-08-16 11:51 - 2012-07-07 10:46 - 00000000 ____D () C:\Program Files (x86)\Java 2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle 2014-08-16 11:30 - 2013-10-21 19:09 - 00000000 ____D () C:\ProgramData\Oracle 2014-08-16 11:29 - 2014-08-16 11:51 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll 2014-08-16 11:29 - 2014-08-16 11:51 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-08-14 13:46 - 2014-08-14 12:44 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente 2014-08-14 11:40 - 2013-09-03 11:00 - 00001019 _____ () C:\Users\Nina\Desktop\Dropbox.lnk 2014-08-14 11:40 - 2013-09-03 10:57 - 00001388 _____ () C:\Windows\wininit.ini 2014-08-14 11:40 - 2013-09-03 10:56 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-08-14 02:38 - 2013-07-13 15:40 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-14 02:38 - 2010-06-09 21:45 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-14 02:31 - 2010-11-09 19:12 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-14 02:30 - 2014-07-16 08:21 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL 2014-08-12 00:22 - 2014-08-12 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX 2014-08-12 00:22 - 2010-12-21 20:32 - 00000000 ____D () C:\Program Files (x86)\DivX 2014-08-12 00:22 - 2010-12-21 20:28 - 00000000 ____D () C:\ProgramData\DivX 2014-08-12 00:21 - 2010-12-21 20:34 - 00000000 ____D () C:\Program Files\DivX 2014-08-09 17:24 - 2010-09-08 18:04 - 00000000 ____D () C:\ProgramData\Skype 2014-08-07 03:52 - 2014-08-13 23:42 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-07 03:46 - 2014-08-13 23:42 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-05 12:07 - 2011-02-04 01:14 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI 2014-08-05 12:00 - 2014-08-05 12:00 - 00000000 ____D () C:\Users\Nina\AppData\Local\{998615A4-19B8-4757-BE09-D3B71380782F} 2014-08-05 11:42 - 2013-02-26 02:42 - 00000000 ____D () C:\ProgramData\Avira 2014-08-05 09:20 - 2010-09-27 12:30 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe Files to move or delete: ==================== C:\Users\Nina\Firefox Setup 3.6.9.exe Some content of TEMP: ==================== C:\Users\Nina\AppData\Local\Temp\1E2B.exe C:\Users\Nina\AppData\Local\Temp\avgnt.exe C:\Users\Nina\AppData\Local\Temp\drm_dyndata.dll C:\Users\Nina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwazsjh.dll C:\Users\Nina\AppData\Local\Temp\DWPUpgradeInstaller.exe C:\Users\Nina\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Nina\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\Nina\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\Nina\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe C:\Users\Nina\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe C:\Users\Nina\AppData\Local\Temp\k9-webprotection-4.4.276.exe C:\Users\Nina\AppData\Local\Temp\Shockwave_Installer_FF-1.exe C:\Users\Nina\AppData\Local\Temp\Shockwave_Installer_FF.exe C:\Users\Nina\AppData\Local\Temp\SkypeSetup.exe C:\Users\Nina\AppData\Local\Temp\vlc-2.0.7-win64.exe C:\Users\Nina\AppData\Local\Temp\vlc-2.0.8-win64.exe C:\Users\Nina\AppData\Local\Temp\vlc-2.1.1-win64.exe C:\Users\Nina\AppData\Local\Temp\vlc-2.1.2-win64.exe C:\Users\Nina\AppData\Local\Temp\vlc-2.1.3-win64.exe C:\Users\Nina\AppData\Local\Temp\Wise_SETUP.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-29 14:27 ==================== End Of Log ============================ --- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2014 02 Ran by Nina at 2014-09-04 10:10:50 Running from C:\Users\Nina\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acer Backup Manager (HKLM-x32\...\InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.1.60 - NewTech Infosystems) Acer Bio Protection (HKLM-x32\...\InstallShield_{FD588AD4-9150-4A41-83E8-61596E0954E4}) (Version: 7.0.32.0 - Egis Technology Inc.) Acer Crystal Eye webcam (HKLM-x32\...\{51F026FA-5146-4232-A8BA-1364740BD053}) (Version: 1.0.3.0 - Liteon) Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3004 - Acer Incorporated) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3011 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0413.2010 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated) Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3002 - Acer Incorporated) Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated) Adobe Reader X (10.1.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.) Amazon MP3-Downloader 1.0.15 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.15 - Amazon Services LLC) Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC) Ashampoo Burning Studio 6 FREE v.6.81 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.1 - Ashampoo GmbH & Co. KG) Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) AuthenTec Fingerprint Software (HKLM-x32\...\{0D0BB4B2-BD4F-4935-AB20-036866433B8A}) (Version: 9.0.8.23 - AuthenTec, Inc.) Avira (HKLM-x32\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira) Backup Manager Advance (x32 Version: 2.0.1.60 - NewTech Infosystems) Hidden Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-5 - Wacom Technology Corp.) Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden Bamboo Dock 3.3 (HKLM-x32\...\Bamboo Dock) (Version: 3.3 - Wacom Co., Ltd.) BioExcess (Version: 7.0.32.0 - Egis Technology Inc.) Hidden Blue Coat K9 Web Protection (HKLM\...\Blue Coat K9 Web Protection) (Version: 4.4.276 - Blue Coat Systems, Inc.) Broadcom Gigabit Integrated Controller (HKLM\...\{F26DE123-C491-4D8C-BC86-FDF604F00226}) (Version: 14.0.2.2 - Broadcom Corporation) Business Contact Manager für Outlook 2007 SP2 (HKLM-x32\...\Business Contact Manager) (Version: 3.0.8619.1 - Microsoft Corporation) Business Contact Manager für Outlook 2007 SP2 (x32 Version: 3.0.8619.1 - Microsoft Corporation) Hidden Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.) Citavi (HKLM-x32\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.0.0.9 - Swiss Academic Software) Conduit Engine (HKLM-x32\...\conduitEngine) (Version: - Conduit Ltd.) <==== ATTENTION Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.121.0.50 - Conexant) CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3814.50 - CyberLink Corp.) CyberLink PowerDVD 9 (x32 Version: 9.0.3814.50 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DataSync Outlook (HKLM-x32\...\InstallShield_{1C9171AC-5519-4DF4-B44D-B28F678DEB4C}) (Version: 7.00.2906 - O3SIS IT AG) DataSync Outlook (x32 Version: 7.00.2906 - O3SIS IT AG) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{132D27B8-C656-44BD-8C16-73C54EA8A85F}) (Version: - Microsoft) DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC) Dropbox (HKCU\...\Dropbox) (Version: 2.10.27 - Dropbox, Inc.) eBay Worldwide (HKLM-x32\...\{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}) (Version: 2.1.0901 - OEM) Fingerprint Solution (x32 Version: 7.0.32.0 - Egis Technology Inc.) Hidden Free YouTube Download version 3.2.34.430 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.34.430 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.12.39.604 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.39.604 - DVDVideoSoft Ltd.) GIMP 2.6.10 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.10 - The GIMP Team) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated) InstantView (HKLM-x32\...\InstallShield_{5C4F9F4E-11AB-42CA-A034-5F519B073E80}) (Version: 2.1.2.0 - DeviceVM, Inc.) InstantView (x32 Version: 2.1.2.0 - DeviceVM, Inc.) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2104 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.6.1001 - Intel Corporation) Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle) Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden K-Lite Codec Pack 6.0.4 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.0.4 - ) Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.10 - Acer Inc.) Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2003 Web Components (HKLM-x32\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8003.0 - Microsoft Corporation) Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Small Business Connectivity Components (HKLM-x32\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation) Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden Microsoft SQL Server Native Client (HKLM\...\{7C39E0D1-E138-42B1-B083-213EC2CF7692}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{1FBEA8BA-D40B-48BC-85BC-EE2D5575F27C}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft) Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyAshampoo Toolbar (HKLM-x32\...\MyAshampoo Toolbar) (Version: 6.2.6.0 - MyAshampoo) <==== ATTENTION Mysearchdial (HKLM-x32\...\mysearchdial) (Version: - Mysearchdial) <==== ATTENTION Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec) OpenVPN 2.1.3 (HKLM-x32\...\OpenVPN) (Version: 2.1.3 - ) Pauls Schreibtischübungen Bildschirmschoner (HKLM-x32\...\Pauls Schreibtischübungen) (Version: - ) PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.0 - pdfforge) phase-6 2.3.4 (HKLM-x32\...\phase-6) (Version: 2.3.4 - phase-6) phase6_17 (HKLM-x32\...\{EFFE151C-F863-4B1E-9E22-3C1369B4C690}) (Version: 1.70.0000 - phase6) Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30121 - Realtek Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.) Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.6.0 - Synaptics Incorporated) Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM-x32\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.5000.00 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation) VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN) WD SmartWare (HKLM\...\{9BAC619B-B811-4318-8C27-B11DDF3F1719}) (Version: 1.1.0.2 - Western Digital) WebTablet FB Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.) WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.) WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.) Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.01.3002 - Acer Incorporated) WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.4700 - Broadcom Corporation) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) Wise Auto Shutdown 1.41 (HKLM-x32\...\Wise Auto Shutdown_is1) (Version: 1.41 - WiseCleaner.com, Inc.) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 26-08-2014 07:49:21 Windows Update 02-09-2014 10:17:59 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1FFF4522-5232-468A-A0DD-FCCA865B93C7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-03] (Adobe Systems Incorporated) Task: {3051F4FF-3769-44A0-BC90-D0B39D57A4BB} - System32\Tasks\{66F668AF-9244-4B93-8244-6EBD56A465E2} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-07-24] (Skype Technologies S.A.) Task: {70557CA2-77CD-4AE6-8851-359D4B505EB1} - System32\Tasks\{C9DB8E34-710D-4A0C-810C-4E698895E911} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.112.259/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered Task: {BE33572B-7155-4A79-A897-F3FDC32679B2} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {D0FC42E5-5374-46AE-8519-A26DF3498A56} - System32\Tasks\Wise Auto Shutdown Task => C:\Program Files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe [2014-07-16] (WiseCleaner.COM) Task: {D5A55542-2544-4DB9-AAC7-7F1283D0B333} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Wise Auto Shutdown Task.job => C:\Program Files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe ==================== Loaded Modules (whitelisted) ============= 2009-01-21 16:45 - 2009-01-21 16:45 - 01401856 _____ () C:\Program Files (x86)\Acer Bio Protection\x64\LIBEAY32.dll 2013-02-17 01:55 - 2012-12-06 14:52 - 00136704 _____ () C:\Windows\System32\zlhp2600.dll 2006-12-09 05:55 - 2006-12-09 05:55 - 00022016 _____ () C:\Windows\System32\sugg1l6.dll 2012-05-30 15:40 - 2011-09-08 17:48 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll 2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe 2010-04-16 18:45 - 2010-04-16 18:45 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll 2010-07-28 23:58 - 2013-05-05 17:29 - 00646744 _____ () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe 2009-08-17 11:26 - 2009-08-17 11:26 - 00049152 _____ () C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\Memeo.API.dll 2009-02-25 16:18 - 2009-02-25 16:18 - 01196032 _____ () C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\sqlite3.DLL 2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe 2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe 2010-06-02 22:00 - 2010-06-02 22:00 - 00012656 _____ () C:\Program Files (x86)\Acer Bio Protection\AT9Proxy.dll 2010-03-23 14:26 - 2010-03-23 14:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll 2010-03-09 02:18 - 2010-03-09 02:18 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll 2010-03-09 02:13 - 2010-03-09 02:13 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll 2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll 2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll 2010-06-09 21:28 - 2009-12-24 02:32 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf 2010-06-09 22:02 - 2009-05-20 08:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll 2014-08-05 11:42 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Nina\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll 2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll 2014-09-04 09:19 - 2014-09-04 09:19 - 00043008 _____ () c:\users\nina\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwazsjh.dll 2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Nina\AppData\Roaming\Dropbox\bin\libcef.dll 2014-09-03 23:03 - 2014-08-26 10:14 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter for 64-bit Windows Description: Cisco Systems VPN Adapter for 64-bit Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/04/2014 09:17:02 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/03/2014 07:19:17 PM) (Source: TabletServicePen) (EventID: 1) (User: ) Description: Prefs: Failed to get user path Error: (09/03/2014 07:19:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Pen_Tablet.exe, Version: 5.2.5.5, Zeitstempel: 0x4e694ecd Name des fehlerhaften Moduls: Pen_Tablet.exe, Version: 5.2.5.5, Zeitstempel: 0x4e694ecd Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000002489b4 ID des fehlerhaften Prozesses: 0xa94 Startzeit der fehlerhaften Anwendung: 0xPen_Tablet.exe0 Pfad der fehlerhaften Anwendung: Pen_Tablet.exe1 Pfad des fehlerhaften Moduls: Pen_Tablet.exe2 Berichtskennung: Pen_Tablet.exe3 Error: (09/03/2014 02:22:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: DVMExportService.exe, Version: 1.2.15.2, Zeitstempel: 0x4c04c37b Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000001 ID des fehlerhaften Prozesses: 0x478 Startzeit der fehlerhaften Anwendung: 0xDVMExportService.exe0 Pfad der fehlerhaften Anwendung: DVMExportService.exe1 Pfad des fehlerhaften Moduls: DVMExportService.exe2 Berichtskennung: DVMExportService.exe3 Error: (09/03/2014 11:41:18 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/02/2014 10:20:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/02/2014 00:12:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/01/2014 07:27:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/01/2014 07:27:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: EgisService.exe, Version: 7.0.32.0, Zeitstempel: 0x4c0660ac Name des fehlerhaften Moduls: EgisFinger.dll, Version: 7.0.37.0, Zeitstempel: 0x4c0660a0 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00025261 ID des fehlerhaften Prozesses: 0x404 Startzeit der fehlerhaften Anwendung: 0xEgisService.exe0 Pfad der fehlerhaften Anwendung: EgisService.exe1 Pfad des fehlerhaften Moduls: EgisService.exe2 Berichtskennung: EgisService.exe3 Error: (09/01/2014 10:48:53 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) System errors: ============= Error: (09/04/2014 09:19:41 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: ) Description: 0x80070422 Error: (09/04/2014 09:19:41 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: ) Description: 0x80070422 Error: (09/04/2014 09:17:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (09/03/2014 07:22:19 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: ) Description: 0x80070422 Error: (09/03/2014 07:22:18 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: ) Description: 0x80070422 Error: (09/03/2014 07:21:49 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (09/03/2014 07:19:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst WD SmartWare Background Service erreicht. Error: (09/03/2014 00:34:46 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst EgisTec Ticket Service erreicht. Error: (09/03/2014 11:44:13 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: ) Description: 0x80070422 Error: (09/03/2014 11:44:13 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: ) Description: 0x80070422 Microsoft Office Sessions: ========================= Error: (09/04/2014 09:17:02 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/03/2014 07:19:17 PM) (Source: TabletServicePen) (EventID: 1) (User: ) Description: Prefs: Failed to get user path Error: (09/03/2014 07:19:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Pen_Tablet.exe5.2.5.54e694ecdPen_Tablet.exe5.2.5.54e694ecdc000000500000000002489b4a9401cfc79b1ce4ae46C:\Program Files\Tablet\Pen\Pen_Tablet.exeC:\Program Files\Tablet\Pen\Pen_Tablet.exe657705e7-338e-11e4-a2c7-cbdd7304a45b Error: (09/03/2014 02:22:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: DVMExportService.exe1.2.15.24c04c37bunknown0.0.0.000000000c00000050000000147801cfc75b2ffb92b9C:\Program Files (x86)\InstantView\config\DVMExportService.exeunknown01744563-3365-11e4-ada7-f979c1703d66 Error: (09/03/2014 11:41:18 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/02/2014 10:20:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/02/2014 00:12:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/01/2014 07:27:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) Error: (09/01/2014 07:27:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: EgisService.exe7.0.32.04c0660acEgisFinger.dll7.0.37.04c0660a0c00000050002526140401cfc609ef407e3fC:\Program Files (x86)\Acer Bio Protection\EgisService.exeC:\Program Files (x86)\Acer Bio Protection\EgisFinger.dll3720eae3-31fd-11e4-add4-88044db0df49 Error: (09/01/2014 10:48:53 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args) |
05.09.2014, 09:55 | #4 |
/// the machine /// TB-Ausbilder | Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Adware & Co. deinstallieren
Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
05.09.2014, 17:44 | #5 |
| Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Hallo, Das Uninstall mit Revo Uninstaller verlief erfolgreich, Combofix hat auch nicht gemeckert, ALLERDINGS habe ich Esel vergessen die Energiespareinstellungen zu deaktivieren, also hat sich der Laptop prompt mitten im Durchlauf von Combofix in den Ruhezustand versetzt. Ich hoffe, das hat jetzt nichts zerschossen. Das Logfile wurde aber immerhin erstellt: Logfile Combofix Code:
ATTFilter ComboFix 14-09-05.01 - Nina 05.09.2014 17:41:24.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3766.1982 [GMT 2:00] ausgeführt von:: c:\users\Nina\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859} SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk c:\users\Nina\AppData\Local\assembly\tmp c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3DA35E1F-A8BE-4073-A168-F1B319198252}.xps c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{46F238D6-92D2-4818-BE5C-A40AFDB1FDC5}.xps c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{D301467D-10A3-46F3-B35D-3AB6EAA7D1ED}.xps c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{E6DB4844-848E-426D-882B-63E234B0D008}.xps c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{FA397D9C-074D-42FB-A567-C87D06D98EC6}.xps c:\users\Nina\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll c:\windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe . . ((((((((((((((((((((((( Dateien erstellt von 2014-08-05 bis 2014-09-05 )))))))))))))))))))))))))))))) . . 2014-09-05 16:17 . 2014-09-05 16:17 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-09-05 15:05 . 2014-09-05 15:05 -------- d-----w- c:\program files (x86)\VS Revo Group 2014-09-03 21:37 . 2014-09-03 21:37 -------- d-----w- c:\windows\SysWow64\Adobe 2014-09-03 20:35 . 2014-09-03 20:35 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-09-03 20:35 . 2014-09-03 20:35 699568 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-09-02 20:25 . 2014-09-02 20:25 -------- d-----w- c:\programdata\AfquWazes 2014-08-29 08:38 . 2014-09-03 20:35 -------- d-----w- c:\users\Nina\AppData\Local\Adobe 2014-08-19 10:52 . 2014-08-19 21:49 -------- d-----w- c:\users\Nina\AppData\Roaming\Wise Auto Shutdown 2014-08-19 10:52 . 2014-08-19 10:52 -------- d-----w- c:\program files (x86)\Wise 2014-08-16 09:51 . 2014-08-16 09:29 880040 ----a-w- c:\windows\SysWow64\npdeployJava1.dll 2014-08-16 09:51 . 2014-08-16 09:29 802728 ----a-w- c:\windows\SysWow64\deployJava1.dll 2014-08-16 09:49 . 2014-08-16 09:49 -------- d-----w- c:\users\Nina\AppData\Roaming\Oracle 2014-08-16 09:29 . 2014-08-16 09:29 -------- d-----w- c:\program files (x86)\Common Files\Java 2014-08-16 09:29 . 2014-08-16 09:29 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2014-08-13 21:42 . 2014-08-07 01:52 526848 ----a-w- c:\windows\system32\aepdu.dll 2014-08-13 21:42 . 2014-08-07 01:46 424448 ----a-w- c:\windows\system32\aeinv.dll 2014-08-09 15:24 . 2014-08-09 15:24 -------- d-----w- c:\program files (x86)\Common Files\Skype . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-08-30 11:32 . 2010-06-24 10:33 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2014-08-21 03:43 . 2014-09-05 15:08 11319192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{74DDEDED-BBE6-4C9B-9E87-49D5057B0E43}\mpengine.dll 2014-08-14 00:31 . 2010-11-09 17:12 99218768 ----a-w- c:\windows\system32\MRT.exe 2014-08-05 07:20 . 2010-09-27 10:30 270496 ------w- c:\windows\system32\MpSigStub.exe 2014-07-17 10:07 . 2013-05-07 12:50 42040 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2014-07-03 14:40 . 2013-03-29 11:41 117712 ----a-w- c:\windows\system32\drivers\avgntflt.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"= "c:\users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll" [2014-03-26 424224] . [HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] 2014-03-26 14:19 424224 ----a-w- c:\users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] 2014-04-30 16:06 297128 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"= "c:\users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll" [2014-03-26 424224] . [HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DataSync Outlook"="c:\program files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe" [2009-12-07 720896] "AmazonMP3DownloaderHelper"="c:\users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe" [2013-05-22 400704] "AfquWazes"="c:\programdata\AfquWazes\AfquWazes.dat" [2014-09-02 266240] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-12-24 284696] "NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-07-24 588648] "BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-03-08 260608] "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-05-25 960080] "EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2009-12-24 401192] "EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2009-12-24 201512] "VitaKeyTSR"="c:\program files (x86)\Acer Bio Protection\EgisTSR.exe" [2010-06-02 186224] "BambooCore"="c:\program files (x86)\Bamboo Dock\BambooCore.exe" [2013-05-05 646744] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-08-05 751184] "DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-05-28 455512] "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968] "Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-08-04 161584] . c:\users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-7-30 36414496] OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2010-6-9 704032] Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-4-16 1127200] phase-6 Reminder.lnk - c:\program files (x86)\phase-6\phase-6\reminder\reminder.exe [2014-1-7 724992] phase6_17_erinnerung.lnk - c:\program files (x86)\phase6\phase6_17\WinStart\WinStart.exe [2005-7-26 49152] WDDMStatus.lnk - c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2009-8-17 2104320] WDSmartWare.lnk - c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe View=show_in_tray [2009-8-17 8919040] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "Userinit"="userinit.exe" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R1 DVMIO;DVMIO;c:\program files (x86)\InstantView\config\dvmio.sys;c:\program files (x86)\InstantView\config\dvmio.sys [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x] R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys;c:\windows\SYSNATIVE\DRIVERS\wacmoumonitor.sys [x] R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x] S2 ATService;AuthenTec Fingerprint Service;c:\program files (x86)\Fingerprint Sensor\AtService.exe;c:\program files (x86)\Fingerprint Sensor\AtService.exe [x] S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x] S2 bckd;bckd;c:\windows\system32\drivers\bckd.sys;c:\windows\SYSNATIVE\drivers\bckd.sys [x] S2 bckwfs;Blue Coat K9 Web Protection;c:\program files\Blue Coat K9 Web Protection\k9filter.exe;c:\program files\Blue Coat K9 Web Protection\k9filter.exe [x] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x] S2 DvmMDES;DeviceVM Meta Data Export Service;c:\program files (x86)\InstantView\config\DVMExportService.exe;c:\program files (x86)\InstantView\config\DVMExportService.exe [x] S2 EgisTec Service;EgisTec Service;c:\program files (x86)\Acer Bio Protection\EgisService.exe;c:\program files (x86)\Acer Bio Protection\EgisService.exe [x] S2 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x] S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x] S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x] S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files (x86)\PDF Architect\HelperService.exe;c:\program files (x86)\PDF Architect\HelperService.exe [x] S2 PDF Architect Service;PDF Architect Service;c:\program files (x86)\PDF Architect\ConversionService.exe;c:\program files (x86)\PDF Architect\ConversionService.exe [x] S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [x] S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe;c:\program files\Tablet\Pen\Pen_Tablet.exe [x] S2 TBSrv;Toolbar Service;c:\program files (x86)\Tbccint\ToolbarService\ToolbarService.exe;c:\program files (x86)\Tbccint\ToolbarService\ToolbarService.exe [x] S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe;c:\program files\Tablet\Pen\Pen_TouchService.exe [x] S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x] S2 WDDMService.exe;WD SmartWare Drive Manager Service;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [x] S2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [x] S3 ATSwpWDF;AuthenTec TruePrint USB Driver;c:\windows\system32\Drivers\ATSwpWDF.sys;c:\windows\SYSNATIVE\Drivers\ATSwpWDF.sys [x] S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL . Inhalt des "geplante Tasks" Ordners . 2014-09-05 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-03 20:35] . 2014-09-05 c:\windows\Tasks\Wise Auto Shutdown Task.job - c:\program files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe [2014-08-19 11:16] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] 2014-04-22 15:17 357432 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2010-04-23 520760] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-29 166424] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-29 391192] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-29 413720] "InstantView Agent"="c:\program files (x86)\InstantView\tools\aoiosnap.exe" [2010-05-04 1093312] "Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-04-23 861216] . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir= uLocal Page = c:\windows\system32\blank.htm mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q mStart Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir= mLocal Page = c:\windows\SysWOW64\blank.htm IE: &Citavi Picker... - file://c:\programdata\Swiss Academic Software\Citavi Picker\Internet Explorer\ShowContextMenu.html IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll IE: {{F15096F1-C84C-4c24-875A-189ABBA3BD38} - {b289cf57-0878-36e1-9cbd-8bb7fc2da46d} - mscoree.dll FF - ProfilePath - c:\users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\ FF - prefs.js: browser.startup.homepage - hxxp://ecosia.org/ FF - prefs.js: network.proxy.ftp - proxy.uni-bonn.de FF - prefs.js: network.proxy.ftp_port - 8080 FF - prefs.js: network.proxy.http - proxy.uni-bonn.de FF - prefs.js: network.proxy.http_port - 8080 FF - prefs.js: network.proxy.ssl - proxy.uni-bonn.de FF - prefs.js: network.proxy.ssl_port - 8080 FF - prefs.js: network.proxy.type - 0 FF - ExtSQL: !HIDDEN! 2013-01-20 14:09; {ACAA314B-EEBA-48e4-AD47-84E31C44796C}; c:\program files (x86)\Common Files\DVDVideoSoft\plugins\ff FF - user.js: extensions.irmysearch.aflt - dvd_14_18_ff FF - user.js: extensions.irmysearch.instlRef - 140305_a FF - user.js: extensions.irmysearch.cr - 374483982 FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) Wow6432Node-HKCU-Run-pfcuxj - (no file) Toolbar-Locked - (no file) WebBrowser-{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-{047F790A-7A2A-4B6A-AD02-38092BA63DAC} - c:\program files (x86)\InstallShield Installation Information\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}\setup.exe AddRemove-{7F811A54-5A09-4579-90E1-C93498E230D9} - c:\program files (x86)\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe AddRemove-{96AE7E41-E34E-47D0-AC07-1091A8127911} - c:\program files (x86)\InstallShield Installation Information\{96AE7E41-E34E-47D0-AC07-1091A8127911}\setup.exe AddRemove-{EE171732-BEB4-4576-887D-CB62727F01CA} - c:\program files (x86)\InstallShield Installation Information\{EE171732-BEB4-4576-887D-CB62727F01CA}\setup.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe c:\program files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe c:\program files (x86)\Cisco Systems\VPN Client\cvpnd.exe c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe c:\program files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe c:\users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE c:\windows\SysWOW64\RunDll32.exe c:\program files (x86)\Launch Manager\LMworker.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-09-05 18:31:44 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-09-05 16:31 . Vor Suchlauf: 8 Verzeichnis(se), 109.676.351.488 Bytes frei Nach Suchlauf: 18 Verzeichnis(se), 115.450.449.920 Bytes frei . - - End Of File - - B5B88EED622BDF00CB32F3A01E4AC54B |
06.09.2014, 13:51 | #6 |
/// the machine /// TB-Ausbilder | Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde |
07.09.2014, 12:48 | #7 |
| Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde MBAM: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 07.09.2014 Suchlauf-Zeit: 12:19:06 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.09.07.01 Rootkit Datenbank: v2014.08.21.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 CPU: x64 Dateisystem: NTFS Benutzer: Nina Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 332085 Verstrichene Zeit: 29 Min, 9 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 1 PUP.Optional.ClientConnect, C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe, 2760, Löschen bei Neustart, [f9d45595f08b63d32aad3b724ab76d93] Module: 0 (No malicious items detected) Registrierungsschlüssel: 7 PUP.Optional.ClientConnect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TBSrv, In Quarantäne, [f9d45595f08b63d32aad3b724ab76d93], PUP.Optional.MySearchDial.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, Löschen bei Neustart, [a12c6e7c7a013cfa1bd2aad2936f3dc3], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, In Quarantäne, [a12c6e7c7a013cfa1bd2aad2936f3dc3], PUP.Optional.PriceGong.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Löschen bei Neustart, [b815cc1e7efd8caa1846e9386a99857b], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Löschen bei Neustart, [1db09159512a62d46d7ae541877ced13], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Löschen bei Neustart, [3895bf2b0d6eb581460293aa0ef6d52b], PUP.Optional.Softonic.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, Löschen bei Neustart, [6964b93154271b1b050c9a7c55aee719], Registrierungswerte: 2 PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\Mysearchdial\1.8.29.0\, In Quarantäne, [16b7bd2dd7a447ef9e20df7dfd0711ef] PUP.Optional.InstallCore.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A2O1C1R1H2Z1S1G1M1F, Löschen bei Neustart, [3895bf2b0d6eb581460293aa0ef6d52b] Registrierungsdaten: 3 PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=, Gut: (www.google.com), Schlecht: (hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=),Ersetzt,[0bc22ac0e3989d992b997c74f01437c9] PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=, Gut: (www.google.com), Schlecht: (hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=),Ersetzt,[6667d416f2895ed8289c39b7ec18936d] PUP.Optional.MySearchDial.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=, Gut: (www.google.com), Schlecht: (hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=),Löschen bei Neustart,[6667b337dba0d46200c34fa12dd7ad53] Ordner: 5 PUP.Optional.MySearchDial.A, C:\Users\Nina\AppData\Roaming\mysearchdial, In Quarantäne, [7d5044a6a9d22c0ad8a206c359a9748c], PUP.Optional.OpenCandy, C:\Users\Nina\AppData\Roaming\OpenCandy, In Quarantäne, [14b94aa006758bab5d2b6b5e010135cb], PUP.Optional.OpenCandy, C:\Users\Nina\AppData\Roaming\OpenCandy\BFD13812C7E241988D2F9532ACACB313, In Quarantäne, [14b94aa006758bab5d2b6b5e010135cb], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], Dateien: 42 PUP.Optional.ClientConnect, C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe, Löschen bei Neustart, [f9d45595f08b63d32aad3b724ab76d93], PUP.Optional.ClientConnect, C:\Users\Nina\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll, In Quarantäne, [4d80a3475d1e8fa76671ecc1d42db14f], PUP.Optional.ClientConnect, C:\Users\Nina\AppData\Local\Conduit\Community Alerts\Alert.dll, In Quarantäne, [09c442a855264fe72daa09a46b96f50b], PUP.Optional.ClientConnect, C:\Users\Nina\AppData\Local\Conduit\CT2475029\MyAshampooAutoUpdaterHelper.exe, In Quarantäne, [94394aa043381422696e9419679a718f], PUP.Optional.MySearchDial.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi, In Quarantäne, [01cce4069dde8da9ff0d76a0de2508f8], PUP.Optional.MySearchDial.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\Mysearchdial.xml, In Quarantäne, [eedf6e7c2358270f9f123fdd04ff02fe], PUP.Optional.OpenCandy, C:\Users\Nina\AppData\Roaming\OpenCandy\BFD13812C7E241988D2F9532ACACB313\TuneUpUtilities2013-2200218_de-DE.exe, In Quarantäne, [14b94aa006758bab5d2b6b5e010135cb], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\1.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\2229.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\4489.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\450.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\a.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\b.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\c.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\d.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\e.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\f.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\g.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\h.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\i.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\j.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\k.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\l.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\m.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\n.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\o.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\p.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\q.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\r.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\s.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\t.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\u.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\v.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\w.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\wlu.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\x.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\y.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\z.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], PUP.Optional.MySearch.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.aflt", "dvd_14_18_ff");), Ersetzt,[5e6f6c7e2853fe38564171b21ce914ec] PUP.Optional.MySearch.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.instlRef", "140305_a");), Ersetzt,[a9247e6c681376c0bed92201937224dc] PUP.Optional.MySearch.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.cr", "374483982");), Ersetzt,[c70657930a71ee48deb99d866f960bf5] PUP.Optional.MySearch.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q");), Ersetzt,[bf0e36b4a5d62313f5a280a381840ff1] Physische Sektoren: 0 (No malicious items detected) (end) Adw: Code:
ATTFilter # AdwCleaner v3.309 - Bericht erstellt am 07/09/2014 um 13:07:04 # Aktualisiert 02/09/2014 von Xplode # Betriebssystem : Windows 7 Home Premium (64 bits) # Benutzername : Nina - LITTLEONE # Gestartet von : C:\Users\Nina\Downloads\adwcleaner_3.309.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\NCH Software Ordner Gelöscht : C:\ProgramData\Partner Ordner Gelöscht : C:\Program Files (x86)\NCH Software Ordner Gelöscht : C:\Program Files (x86)\Tbccint Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB [/!\] Nicht Gelöscht ( Junction ) : C:\Program Files\Gemeinsame Dateien Ordner Gelöscht : C:\Users\Nina\AppData\Local\Conduit Ordner Gelöscht : C:\Users\Nina\AppData\LocalLow\MyAshampoo Ordner Gelöscht : C:\Users\Nina\AppData\Roaming\DeviceVM Ordner Gelöscht : C:\Users\Nina\AppData\Roaming\dvdvideosoftiehelpers Ordner Gelöscht : C:\Users\Nina\AppData\Roaming\pdfforge Ordner Gelöscht : C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Conduit Datei Gelöscht : C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi Datei Gelöscht : C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js ***** [ Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2475029 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pinnacle-videospin_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pinnacle-videospin_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_videopad-video-editor_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_videopad-video-editor_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B5C212A-18A3-4A6C-B2CF-CD4704B44E1E} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Schlüssel Gelöscht : HKCU\Software\Conduit Schlüssel Gelöscht : HKCU\Software\DeviceVM Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\Tbccint_HKLM Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\MyAshampoo Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit Schlüssel Gelöscht : HKLM\SOFTWARE\DeviceVM Schlüssel Gelöscht : HKLM\SOFTWARE\MyAshampoo\toolbar Schlüssel Gelöscht : HKLM\SOFTWARE\MyAshampoo Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DeviceVM Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4 ***** [ Browser ] ***** -\\ Internet Explorer v8.0.7600.17267 -\\ Mozilla Firefox v32.0 (x86 de) [ Datei : C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\prefs.js ] Zeile gelöscht : user_pref("CT2475029..clientLogIsEnabled", false); Zeile gelöscht : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); Zeile gelöscht : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); Zeile gelöscht : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Zeile gelöscht : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Sat May 28 2011 17:35:15 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.CommunityChanged", true); Zeile gelöscht : user_pref("CT2475029.CurrentServerDate", "28-5-2011"); Zeile gelöscht : user_pref("CT2475029.DialogsAlignMode", "LTR"); Zeile gelöscht : user_pref("CT2475029.DialogsGetterLastCheckTime", "Sat May 28 2011 17:35:38 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.DownloadDomainsCheckInterval", "168"); Zeile gelöscht : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Sat May 28 2011 17:35:15 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983"); Zeile gelöscht : user_pref("CT2475029.DownloadReferralCookieData", ""); Zeile gelöscht : user_pref("CT2475029.FeedLastCount129133095456874337", 160); Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029379", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029381", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029382", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.FeedPollDate129133095459686870", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.FeedPollDate129133095459686871", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687146", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687147", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687148", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029379", 40); Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029381", 40); Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029382", 40); Zeile gelöscht : user_pref("CT2475029.FeedTTL129133095459686870", 40); Zeile gelöscht : user_pref("CT2475029.FeedTTL129133095459686871", 40); Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687146", 40); Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687147", 40); Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687148", 40); Zeile gelöscht : user_pref("CT2475029.FirstServerDate", "28-5-2011"); Zeile gelöscht : user_pref("CT2475029.FirstTimeFF3", true); Zeile gelöscht : user_pref("CT2475029.GroupingLastCheckTime", "Sat May 28 2011 17:35:15 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.GroupingLastErrorCode", ""); Zeile gelöscht : user_pref("CT2475029.GroupingLastResponse", true); Zeile gelöscht : user_pref("CT2475029.GroupingLastServerUpdateTime", "129484884546300000"); Zeile gelöscht : user_pref("CT2475029.GroupingServerCheckInterval", 1440); Zeile gelöscht : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Zeile gelöscht : user_pref("CT2475029.HasUserGlobalKeys", true); Zeile gelöscht : user_pref("CT2475029.Initialize", true); Zeile gelöscht : user_pref("CT2475029.InitializeCommonPrefs", true); Zeile gelöscht : user_pref("CT2475029.InstallationAndCookieDataSentCount", 1); Zeile gelöscht : user_pref("CT2475029.InstalledDate", "Sat May 28 2011 17:35:39 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.InvalidateCache", false); Zeile gelöscht : user_pref("CT2475029.IsGrouping", true); Zeile gelöscht : user_pref("CT2475029.IsMulticommunity", true); Zeile gelöscht : user_pref("CT2475029.IsOpenThankYouPage", true); Zeile gelöscht : user_pref("CT2475029.IsOpenUninstallPage", true); Zeile gelöscht : user_pref("CT2475029.LanguagePackLastCheckTime", "Sat May 28 2011 17:35:26 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440); Zeile gelöscht : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx"); Zeile gelöscht : user_pref("CT2475029.LastLogin_3.3.3.2", "Sat May 28 2011 17:35:15 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.LatestVersion", "3.3.3.2"); Zeile gelöscht : user_pref("CT2475029.Locale", "en"); Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipHeight", "83"); Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipShow", true); Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipWidth", "295"); Zeile gelöscht : user_pref("CT2475029.RadioIsPodcast", false); Zeile gelöscht : user_pref("CT2475029.RadioLastCheckTime", "Sat May 28 2011 17:35:17 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.RadioLastUpdateIPServer", "3"); Zeile gelöscht : user_pref("CT2475029.RadioLastUpdateServer", "129054397178370000"); Zeile gelöscht : user_pref("CT2475029.RadioMediaID", "13098944"); Zeile gelöscht : user_pref("CT2475029.RadioMediaType", "Media Player"); Zeile gelöscht : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT247502913098944"); Zeile gelöscht : user_pref("CT2475029.RadioStationName", "Mellesleg%20-%20Rapp"); Zeile gelöscht : user_pref("CT2475029.RadioStationURL", "hxxp://195.228.254.168:8060/"); Zeile gelöscht : user_pref("CT2475029.SearchFromAddressBarIsInit", true); Zeile gelöscht : user_pref("CT2475029.SearchInNewTabEnabled", true); Zeile gelöscht : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440); Zeile gelöscht : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Sat May 28 2011 17:35:16 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"); Zeile gelöscht : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"); Zeile gelöscht : user_pref("CT2475029.ServiceMapLastCheckTime", "Sat May 28 2011 17:35:08 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.SettingsLastCheckTime", "Sat May 28 2011 17:35:08 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.SettingsLastUpdate", "1306530423"); Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsInterval", 504); Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Sat May 28 2011 17:35:08 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1246786978"); Zeile gelöscht : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029"); Zeile gelöscht : user_pref("CT2475029.UserID", "UN71680498347049385"); Zeile gelöscht : user_pref("CT2475029.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdownload.conduit.com/\"}"); Zeile gelöscht : user_pref("CT2475029.globalFirstTimeInfoLastCheckTime", "Sat May 28 2011 17:35:13 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.isAppTrackingManagerOn", true); Zeile gelöscht : user_pref("CT2475029.myStuffEnabled", true); Zeile gelöscht : user_pref("CT2475029.myStuffPublihserMinWidth", 400); Zeile gelöscht : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"); Zeile gelöscht : user_pref("CT2475029.myStuffServiceIntervalMM", 1440); Zeile gelöscht : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"); Zeile gelöscht : user_pref("CT2475029.testingCtid", ""); Zeile gelöscht : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Sat May 28 2011 17:35:08 GMT+0200"); Zeile gelöscht : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Sat May 28 2011 17:35:17 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", "\"1294295055\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "L+tncv4eqt6Qm5T3dzChdA=="); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "poKjTfHs0NrVUIalKI8jyg=="); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "QmycQXJXVyFVAzIiNllWhQ=="); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "K4Vqu91uAzWURlxJRdXJOg=="); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"803651ba7facb1:0\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029", "\"634416823708270000\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000"); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029", "\"1306530423\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equalizer_dead.gif", "\"0678fe477ac91:0\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimize.gif", "\"046c7ab477ac91:0\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gif", "\"0484de117c4c91:0\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gif", "\"0e7a152347ac91:0\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif", "\"087c778347ac91:0\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634410529136300000\""); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"bcec633949bfb505b4a6d40895bed7af\"-gzip"); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"16805a433e033d615b947be8364a9d45\"-gzip"); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"b22b76cb146a9f4b495f253a82b51be7\"-gzip"); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"41df5f08475d0541ff0d1a21118945ee\"-gzip"); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"87aee62226e15876cebaaafd336f8466\"-gzip"); Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"c4a1726652f8a2fe628ceb2f677a335e\"-gzip"); Zeile gelöscht : user_pref("CommunityToolbar.EngineOwner", "CT2475029"); Zeile gelöscht : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"); Zeile gelöscht : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo"); Zeile gelöscht : user_pref("CommunityToolbar.IsEngineShown", true); Zeile gelöscht : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwner", ""); Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", ""); Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", ""); Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2475029"); Zeile gelöscht : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat May 28 2011 17:35:15 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Zeile gelöscht : user_pref("CommunityToolbar.alert.locale", "en"); Zeile gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Zeile gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat May 28 2011 17:35:06 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Zeile gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Zeile gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Zeile gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false); Zeile gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Zeile gelöscht : user_pref("CommunityToolbar.alert.userId", "35679e2b-7340-4eb9-8519-e76c99293b9d"); Zeile gelöscht : user_pref("CommunityToolbar.globalUserId", "b148c481-547b-4521-af0f-28e1dab75f18"); Zeile gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Zeile gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200"); Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200"); Zeile gelöscht : user_pref("ConduitEngine.HideEngineAfterRestart", true); Zeile gelöscht : user_pref("extensions.irmysearch.aflt", "dvd_14_18_ff"); Zeile gelöscht : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0At[...] Zeile gelöscht : user_pref("extensions.irmysearch.cr", "374483982"); Zeile gelöscht : user_pref("extensions.irmysearch.instlRef", "140305_a"); ************************* AdwCleaner[R0].txt - [23406 octets] - [07/09/2014 13:02:44] AdwCleaner[S0].txt - [21849 octets] - [07/09/2014 13:07:04] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [21910 octets] ########## Junkware Removal folgt so schnell wie möglich! Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by Nina on 07.09.2014 at 13:22:44,21 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\Nina\appdata\locallow\boost_interprocess" Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{029D830E-F428-49E7-BD74-0348B92744F5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{031D70A7-56D6-418F-8373-9C2F30D6EDC5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{03528794-A793-4F39-ADF6-E42381E5BFF0} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0384FFA3-E1DD-4ADB-99E4-1CF57B3C162C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{039E07FB-462F-4801-B048-5371FD6A6135} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{03CEF6C0-96C3-4822-ADC2-E74BDA3AF2B9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0461C0E7-EA43-42FC-9733-CCB8853D01E7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{047AA1E0-9661-4D21-A465-714B1DFE1151} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{051E53F8-5907-4D46-9FA8-C701DAA6BDA7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{056D3BB6-4987-40AC-98D4-92870D3E3192} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{05754939-9291-4342-B9D7-28AFAADD6A43} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{05B62694-E6CD-4192-B47A-A694CA2115EA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{05E4053A-2E01-40EF-9BDD-234773F8A770} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{068A5E0C-88FC-4F14-A525-0AEC379F3E5F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{06B34E4F-3441-4E9E-A13B-9CB6E6213CBB} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{06EAA74A-B969-47BA-A1B5-FF19FE475E10} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0765FDDD-E906-4B87-9250-20854E175A05} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{086B74BF-A76F-4267-AA09-A9BAC0767893} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{08779DFC-DC04-4803-ACCA-2C4149126420} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{089D3CDF-CC0E-4550-BA18-8122FB760B72} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{09CA7CF7-1C5F-49C1-AE1E-B2E5A1F9EE72} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0BCFF5E2-F450-4D4A-9807-086032F343EA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0BE9B4B3-2E88-487E-A958-5F9E93AD46EB} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0C366AC8-E27F-4A1F-B86C-4E885E3802C9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0C941BB7-5830-4774-9DB6-10969314057C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0D5000DB-D4D5-412C-B36D-841B0ECDF39B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0DF00B88-D44B-4A10-8332-D009195EAC4E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0E9648ED-B536-48EB-976F-697622531AC4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0F720A56-E420-4268-9606-29BB369EAE86} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0F8E7728-D702-4CA5-A2E5-7F7F534E74A2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0F9E48DE-0481-40B7-A721-5948AFD6D12D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1074A37C-5003-4401-87AB-12B337F5D69A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{10AEAC26-65E5-4456-AA28-C6B3CDF7DB58} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{13617C45-E96B-4263-A585-A8CFA63B4A21} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{14F779D6-A451-4D55-BABB-2B45BBA2C135} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{14FE2536-1A5C-4CBD-BADA-C3A2CAE67601} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{14FE8BD3-572B-470E-AFBC-4F780401B4A6} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{153C9E7F-E851-41CE-A81B-C10461112224} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{15D23D6A-E6C9-4251-A0E1-24538085E676} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1673BE9C-3F57-4935-82EE-D3D44E273929} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{16A39DF4-C45F-43C3-8384-E3417F747434} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{16B17BF7-0936-446B-B9ED-57012E3FB85F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1887C285-71C1-4BDF-9612-CE1E3454E902} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{19582329-C343-49F6-AAFF-77BB67AE545E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1A96E710-B7F1-4BBF-B2F7-121DD6EA48E1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1B20882C-3DB4-4912-B78E-D271BBD6530F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1B309313-9FB2-4132-9952-F4F8DBA7A42C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1B3E6F75-7443-4311-B4BE-27FC52B7CFC5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1B3F6ED1-584F-486C-A6DF-1081308B9DB4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1C4B1CC0-E7B1-4F20-B099-9D755C219497} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1DA0A392-89F3-4863-A2E3-3F50A2DC9EE2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1E812AB2-BFF4-4324-946D-B8C705D597ED} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1EDA21A6-6163-4852-98E6-F23D0F328042} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1FD01FC3-A8A4-45B5-AFB2-92151D823223} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{200C9266-3317-447F-9F49-AABA36F8A2FC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2026024B-5D98-435A-8BA9-A2395DF0C63B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2090DA16-4CD1-49FC-8140-150D1D03CD91} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{20A1088C-D712-4F9C-AF57-336FAB12E465} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{20AB4BF6-A9FA-4D03-B93C-C9311D8E31E3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{20DB0770-0B50-45EE-92E6-9CEA873A9189} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{210093B6-C7E3-4BF5-9B94-533DE8D9BE7A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2175A595-F4DA-45DD-A2D3-1F867DEFBA28} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2200A531-DECC-434B-AB4F-74AA95C4E3B2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{23A62B1C-BD4D-4613-AC69-A6731C591D75} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{23B92E8C-454B-4D02-95BA-A9FB7D52B6FA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{266C1BEC-C967-415C-B97B-93C350D85A34} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2778B576-48E3-4183-9461-53E7DC3FE095} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{27A2A828-23B7-44C8-90B0-A7C013661E17} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{27A30146-5103-418D-907B-74A3E315B5FB} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{27D78E89-BA0B-4C16-8EEC-F1180476C975} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{28392372-30AC-40F4-8F46-778188BAA374} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{287D198D-C64E-44DB-93C2-CCAE92A940A1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{28A22016-193D-48BF-A538-392FBD005863} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{29D525AD-D8FC-4059-BA14-AA99FE785F12} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2A250127-1F3C-4748-BE4B-30B3EE6B3986} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2A40B785-3AB9-4FBB-8942-3A3D571F4146} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2A729402-798A-4FC1-903C-A456233B832D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2B28E343-4E1C-4F4F-9C45-46EB93CD5B0E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2B8ACB50-78AC-44F3-8C50-1F7E6E78CCC8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2C19541B-BDEB-4778-9CDD-AFCDFBEA5478} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2C4F5A9E-D4FE-4608-A2A8-47719CE418DE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2DBFFE4A-6AC1-408A-B198-95FF2990A116} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2DE692EE-2EC2-44E5-8EB0-8D480940E8C3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2E634E7F-D17D-4844-86AA-D46B5593A403} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{30B2F81B-061D-4B07-B192-AAA348C7A72B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{30DA46A1-F907-4B18-B4BB-07F50836693F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{310CD5C7-3D04-43EF-9160-86FCC177D6BA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3130D064-71DD-414D-BD99-6DA3D38402B7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{315F2FB7-D9D2-4B8C-8B95-D2F6BD03E6F2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{316F5C47-9440-43BE-9F7E-48C99EAD0E90} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{31B8766A-C4D9-446B-965E-61C9481DEDA2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{31E933CA-B33D-4A15-906B-C756D2068379} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{32BADEE8-5F3A-4742-8D6D-4260AA0C01D5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{32C7BFEB-5047-4035-A5E7-49A01C919F10} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{32D73DFD-0AE9-4089-AD85-B6637A9AC537} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{32DDDEB6-FFB6-4E4B-80F9-7891B9192F24} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{33336EBE-731B-478D-B6A8-6862B57A0378} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{35A284F4-0DDF-4F27-A27F-F8C8D0173B53} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{361FFFAF-147A-4C88-8772-0B2B182F40FF} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3642F59D-C327-4A53-AE52-8BEF13CC9C06} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3644F219-662F-41DE-9EB5-886389CB8024} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{36EC8C2B-D98A-463D-904A-82097D698300} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3721D08C-129B-463A-8601-E73328150E87} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{375EE61D-D3E4-4D63-BBC1-9E80E81D14C3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{383C953C-C6E6-4656-8EBC-7673D24CD955} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{389E0B13-DAD7-4F38-A593-F2F26A4B763A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{39D1BEB7-7ADD-45FF-9F29-B976C6A7D5F5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3A4BF910-DFA2-469E-A500-F6CCEE451CFB} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3A6E9921-B0B7-4E07-A680-11545CD10F3F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3A88EE2C-3C09-41AC-A4BC-B1388CB6ED8E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3AA219E2-D416-441C-8ABC-A4D822161665} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3BB2BB61-D1EA-4EE6-88C7-770D6DCB7CFD} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3C4F2A63-B9A1-4013-886B-880F87D4382A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3CBA2D54-2BDC-43EB-9A6A-91CF99FBDCF5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3DD03556-B7BA-4043-971D-124046B4C9EB} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3E091262-E8D8-48EF-AA44-88B98519568B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3E1B9656-9829-47C1-AB44-95C672AA3A8B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3F197E66-E95F-4E3B-B47F-306FF23B7837} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3FCB7CE5-3C3C-42A6-9E42-6AF6BC1EC558} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{41980302-8273-453C-814B-B61963EAADC1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{42D70BF1-6E72-48BB-B3F7-9DC9E726D2D9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{43056C1A-4D6C-42D0-8CA7-833C5A2FA8A9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{43406E0E-F961-431A-95C3-29A80EE5EAE1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{435B5CA7-B37D-467A-BEBB-890A9255EA95} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{43E353EE-814B-4F67-B567-5A4ED6AB0D3C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{45D3E4BE-0050-4030-A73A-9FF8265A062A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{45E0DC16-AB43-4339-8766-5C0AD72D1535} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{46CE913A-76F1-4E05-BBBA-9EC40010C4D4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{46DA5067-BFA2-4CD5-9CE8-BE6187A69FFC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{47A42E75-C557-4D65-BDDA-09C413B0BBC4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{48481666-9223-4AE6-B6C8-7873E443B375} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{492584B0-F7E7-462A-BEA6-2E29024D278C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{49547A4A-BA3C-441E-A6CC-3FEA9B59EF87} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{49FB6AC8-5FCE-49D5-89DD-88BE16BFFEE8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4A1BDC7E-BD9B-4EFB-BCE2-E59B0A8EBDAE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4A9B36B1-1E81-4958-8356-A3AA2E5749AA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4B100F44-017B-497A-8A39-E53D61DC6C8E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4BA33900-9255-4E23-8F08-CA110088C817} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4C57138B-0AFF-4F2D-9563-6E08D8F87F12} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4C8EE85A-0AC2-4642-B1B8-83DE42F35AEE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4CA82E83-5AF2-4BF3-A95D-374C9622A47F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4CDCA13A-C56C-4CA6-8C3E-F5C837C2CB49} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4D1BE080-215A-4014-9681-BA793C1DCC80} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4D1CABD4-C42C-469B-9ECC-1EFE49FC4086} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4D65A72D-A7F1-47E3-B167-3794B9C9FB23} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4E02D17D-DCCF-41DE-8CD2-AFD55BE00041} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4EB4A5CA-18E3-448A-88BB-A658B500BF00} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4ECEAF48-A6EF-433F-81C5-CE0F55E6B611} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4ED0D7F6-57FC-4B4F-B946-FCA690627EB2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4F53BC86-6D8F-4317-8E6C-D4901D4D7F30} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4F90FE6D-B77B-46FE-A72F-7FDB5684648C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{501DEDBE-8AC9-4484-8C3D-05356481F126} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{50681163-4A01-4C74-A300-ECFA65F78CB6} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{507239DD-6D88-4B0C-8F35-0625EF629A9D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{508CE52D-49CB-4241-9279-5445F7F461E5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{51AB8D27-6E61-4DA3-AD05-86F34AA2F430} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5240DED4-DCA7-4C02-82B8-1ADAE9AB9F31} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{527062C1-C72C-4469-8548-FB0B058B7C05} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{52D94F45-2E54-4D4D-AB9A-25F0545DBEA5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{52F61266-0929-4032-A206-5F81A2E7231F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5312D84C-C937-410A-B0F2-3CB3E849B94E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{53402FBC-6B68-49F3-A00D-8895DA033D0C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5391D825-FDE8-4250-82C9-1AD4943569A2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5570F2BA-D583-4612-8D4F-3AFD6B5CCB58} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{55A1AC91-81A9-4AD0-915E-DF98FC3B1F17} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5645E131-17F4-49F0-A656-154D0F6B9868} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{56F19ED8-06C0-42E2-8525-3D24D4B42401} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5706C12C-030E-4283-81FD-6FA92F0BA057} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{57254126-343F-4A70-8254-3666CAF4BC12} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5859141F-41A1-4A05-BDF4-A50009940E7F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{59143784-0110-4EAF-85E0-DB0DF91E2914} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{593F63F7-8EC1-4D10-B82D-CF90EE27BF85} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A10641F-8389-4165-93ED-72F685B37C0B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A3C80CA-74ED-4CD6-8E2C-5878C956AB0C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A3E8C91-CAAD-40C5-8F18-F6046DD8B8B4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A68260D-179B-4FAF-8685-23EBE5830766} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A990C96-280F-4A4A-BDCC-BAF22F3888D4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5B28D5FD-57E5-48EC-984C-B78597E5956F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5C5EC22C-3664-4BDA-9C9D-D120E566B774} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5DEB7CC3-F36E-4899-B427-9076905014EA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5E0A5BDC-8293-4F86-A5B8-D938A69CDBA7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5E8CE1E9-4671-478A-AEC6-74F3179E4BA4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5EF28C96-0420-4D08-87C2-D5B4B9B77590} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5F3C1AF3-A9C4-46B9-B431-DB66A9802A5A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5F47E8CD-A0A8-49DC-BE15-636F0F7EB4B5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{60681DED-2AC3-44A6-9E1E-1E6E3D5E912F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{61F35954-F46B-4F48-91A2-1A7AAB6F6675} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{628D546D-94F2-4486-BD5D-BAA0145A1EA9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{63600632-E2C6-455E-BC45-909EA7609815} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{636D0DF5-F6B4-4DDA-8255-C61AEB3E0886} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6431360B-8E5D-43AC-8FB8-0FCEA459B3E0} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6486ECA1-6856-4E32-ACB5-EADEF605AACF} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{64AE90EC-32A1-4774-A634-C8A56C0FC415} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{64AF0230-214B-4A30-B57C-6D20FFEB9F61} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{64C28440-25E4-4F7F-9964-E8ECC55DB939} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{65103D88-20DC-4413-B755-A5914D6A87A4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{65D79EFE-8210-45EF-AA6E-D46909983CF1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{65F2E55D-1615-4364-AABB-CCAA4BED0886} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{65F9A462-F4A9-4668-BC19-866F9CFB2910} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{667B82F1-CCD7-4C54-AE1D-EED978851C75} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{66D53E6D-4C17-4646-9FFD-633A6E81B7E8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{67EBC499-5481-41BD-9B3F-682D4B146D54} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6811A33D-CE95-49C3-BCF4-03C6E2AB6638} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6829483F-9AE4-4271-B158-12DCA69CF205} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{683DF5AD-AC07-4FF8-9877-0267B0B53D8C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{68995E0D-C9A0-47D4-83B2-ECFEB724118D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{68CB6B5A-8030-44FC-B536-28DF0E53C00D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{69388422-70C8-4CAD-A380-17F8CFD3A964} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6942FE8E-6A33-4FC5-A0CD-0CFF6D35E838} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{69CC905A-997D-465C-8331-FF1B958EB984} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{69F77BE3-C713-468D-BCBD-FF1AB76CD9DC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6A5452DB-1D0B-4910-8035-C3F99BD23E12} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6A69D387-6A6C-4709-8AF4-CCF3887DDBAA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6A8EAB68-53C3-4754-AEDD-A67E23381E49} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6A97D209-7B20-4012-8DC9-1E11E11D3CDD} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6BE9A956-F8A7-4A56-AEE4-A2E10BEE0D2E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6C960F61-7F70-4168-94F0-306C4C643D87} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6E0CF25C-71E8-4AA3-8C31-E4552F907891} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6E128FB9-3DE3-4917-9538-C03668B41E55} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6E37A17D-0207-4178-8A5D-B310C860AA96} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6E9224BA-D97D-48C9-BA9B-9B96E11F115E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6EA65BF7-9B83-438A-84C1-C02602822A60} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6EBC7888-1BF4-4CE3-A716-5AF095FB0128} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6F0FDEEA-B336-47E0-8FCB-470FF907B677} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6F1D437D-67EA-455A-A913-2F3F4A10FBF3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6F2FE038-ABBF-4482-9E46-FC3F42ACBA80} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6F41E4CA-C4DF-4055-AE0F-BAFB3E857EEA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6FC89343-BA32-4BAB-B7D6-475AE7F53D1E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7258198B-E489-4E76-8D26-F34548E4431F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{734CEFF5-1E22-438B-9393-5CD86B137877} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7379D1A6-A2FA-4B6B-824E-CB14C4AB7840} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{73886C50-2C6C-40A2-AF9E-02F2B6706A85} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{73D83507-5AD0-433B-A56C-35A5CDB40772} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{73E285E3-7853-4A23-9549-7762EA6833E9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{750AE376-4FC6-4340-9952-52EA20569DFE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{75F97E5F-2CEE-4CD0-972E-93D0A673C3A8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{763B0558-FC7F-45D0-B8F5-422E2484504F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{76C2EA96-7917-45E5-9AB9-4F6F22DE7811} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7776FDCC-77E7-46A4-AEC1-D41775489B5D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{779F2220-7DD9-4962-BE53-6F84FDD66CC3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{78620EA3-57DA-4A79-AFA1-91A8E9505709} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7894C603-BB43-40A7-96CE-B0A59C2FEE48} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{789FE0D9-492D-497D-BC2B-2B5114E61A4F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{78A2ADA8-6AEF-454C-8DB6-E07E15B5A997} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{79F1667C-CC77-481C-8C3C-031DA449DD68} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7ADEDEF7-8B84-4707-B06E-3AC48626C5D8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7B620989-DD07-4BED-9444-B1A58D1277E6} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7B79DB91-2760-4B28-94AA-7D07BB9A239E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7B8BEBDB-FDBC-4889-8B4D-95EEC913B710} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7BCFDA45-3594-4519-94C7-951E047BDD18} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7BEF2BF0-45C4-4E62-9EF6-4089A4D3C690} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7BFFDAF5-9BD7-4991-BF53-CC8E174FA400} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7C5D0C97-A6E5-4D1B-B595-2A7558342B66} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7D2F6A1D-49FB-4A92-949F-2B5E9A3EE203} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7E04D3E0-E1E4-4517-8DFD-40A2B66EC745} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{805E879A-DED7-40F5-B940-3F6345D6068D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{80E38BC0-F1BF-49A1-BCD1-1BFD280B39ED} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8138C80E-A94F-4CC8-8EE6-5AD14EEC18A8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8140EA31-548E-45E3-96DF-D90C82FCA6D1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8203D243-C559-49D8-B2D5-01275CDF1DB4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{82A5F07A-CE02-42B4-8FEE-C9913980BA94} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8300E6B3-0E1C-492D-9D1F-CE5F2C6E7022} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8311E7EA-AEE6-450C-A203-DF26E0D35536} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{845F06EB-9687-4FBD-A8CB-F5F29CB2CE75} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{84A8BDB3-A8A4-4C1C-83AA-58F55E7AB491} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{85594B07-1C78-4801-BE10-A85F9D1EA9E4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{863AD83C-8282-4D87-AC40-EDD3458D8A04} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{87154DF9-147D-4F5D-A001-F4DD983DB31B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{87577DFA-74C2-4191-8C7B-9C59167168EB} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{87712429-795E-4519-A948-D47ACB6A36E7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{87733A6C-90B2-4008-98BB-2A64646B8BBE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8773F4F3-837A-48FC-B729-B249F9835E8C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{879C1D89-F258-47B1-A2EE-5421DE6F0C36} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{88083C39-D1FB-4A7A-86C9-D1719BFFE3EE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{880F67FA-A615-46DF-AE31-197DB6C80840} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{88DB05F8-6894-477C-AF9A-0E03A0ACA2F6} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{896E116A-7922-4E4A-93FA-E19798CD0475} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{89EF97F7-E12A-4B84-9117-042194DB5D10} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{89FC8A27-2541-4F7F-8605-27B7C0186778} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8A2B292C-F8D4-4473-BEC9-5BE5782C54A9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8A3056CC-563B-44CA-8CA8-764F2C214C3F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8A4A7280-2F8F-4171-8F3B-E18E455F09CA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8A77B936-111C-4D2B-862D-E9FE79D636F4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8AE9E41C-3296-4DA9-B2FF-62365BDDD382} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8B91C22F-11F6-427C-8F6A-2CE85C35DFD3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8C84EA4D-309C-4118-ADC4-991492B1E272} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8D3CB47C-950C-4E81-BF12-6171C686405E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8D5E9050-D4E2-4C4A-B474-CD4C15C3C960} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8DB1DFEF-1495-4847-99A8-FE3A5C60CFCA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8EFDFDF7-14F0-43A2-86B1-E6162F98BACC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9044909D-5DB0-4DB6-ABBD-6AC0469C7C73} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9052AA7E-2AF2-4FED-BA9C-AB50BF9DB2EA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{905FD5B0-7CF8-4D8F-8EEE-47AE5180B23B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{91712EF5-53D9-4390-BCFE-32D48D7D0768} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{917ADAA9-4D71-4584-8931-6D82AF3EFB9C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{91853912-789D-46B3-8A20-465785A77118} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{919F7B14-E2D9-45F9-A2F0-A7AF9A5B37B2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{91B6E25D-1063-478A-BC49-B13F8808901E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{91E4636B-11A9-4250-B24B-68A319C61D53} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{92A68555-F9A8-4248-8B1A-11CF8BD0C808} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{92B13D92-8044-42CC-BC00-A826BA981285} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9556E1FF-A069-48C0-9FD7-F9C5B2328C30} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{95C6B798-DE26-459B-A5C0-B0B31F5836EF} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{97408B00-9F61-4623-BE45-29543525DFC9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9792A5B2-5298-4C61-B951-F9BE3D361737} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{97CF9236-C518-46B6-90AC-61832075F691} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{983AB8AC-CCB5-42E6-AE31-A6FCB99C48C2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{993E4B73-77E4-4EC4-AC16-55C45D464B33} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{998615A4-19B8-4757-BE09-D3B71380782F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{99FFA968-BC19-465A-92BE-97309F63BA5A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9A309A1B-6786-4206-8B1C-A6F17E43B599} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9A705B04-F26F-4E37-982C-232BF40CC396} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9A7B0F91-C361-4694-9CBC-B0C212F73C69} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9ABBD6E5-2998-4424-8AEE-3FB5FC55CF16} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9AFE8F23-932D-4426-860D-9DAA6B2E981E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9C158578-E66B-426A-91E0-ED98D57F691A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9C762968-A63A-42AF-BA2C-BF6B5099F27B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9C7A0F7B-71EE-4DEF-B423-0C3BDD8B73B3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9CC023E2-7902-4267-8B1A-68427E3795B4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9D43AA61-FBDA-48BA-9910-F4110E8C48BE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9DB0F9FE-C660-4E28-BB96-FEBAEC1CCD0A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9FAE4DA2-66AA-48B3-9E5A-64E9A46844C7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A030AC57-0195-42A7-969B-27F1D7AB55A2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A03F61CD-89EC-4533-8D22-B544648A35A7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A1105233-FD54-4F83-BFFD-4FE036A67EA3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A26F83CE-3967-4D0B-89ED-24F5D0F2A3A2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A2EFB2BE-C194-49B8-A5A3-E3C563FE80D5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A3448E0E-CAA9-4CC5-A63E-0A4571B0CC20} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A3A73200-1318-462B-AA04-723435262778} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A44FC8D3-D6F2-48BB-BBEB-33D0D1E0BECB} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A4C9FAE6-B578-41A1-AF43-B1B0B759AF01} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A5CAA8BA-E62E-4CDA-9738-FCE2870C07CA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A6C64E63-2771-4DBA-AD4B-A8E071D36C88} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A7DF6CBD-965B-4199-A2DB-93AE75CBD0E6} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A8A5A33C-143C-4B04-801B-67C2D1A548BD} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A8AE3F88-25B5-463E-A0FC-7A906817F93A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A8BFBBAC-5DAE-4034-A238-5822215F822B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A92596E9-160F-4271-8429-948060FC149F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A9362AA3-CB0D-4734-83D1-D1EBE69D4DD8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A9432BEE-DF8F-4EFB-B5FD-3760E4703142} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A962EA4C-598F-48A6-BCE8-FF5885DDCA87} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A9AD5A4B-EDAC-4B92-A3B5-1082702EF82B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AB631A7A-48D4-433A-AFA9-3AF049CB2BC3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ABB51346-970C-406F-AB09-816E1A3DB0A7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ABC013BA-89A4-4642-BC7D-6D190A30740D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ABC2DE1F-6264-4502-9302-C4CD7D48B2A3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AC13BD86-7539-416C-B09D-811FD5FDF8C3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AC21C33D-8442-41F0-A4A6-91AC79B8DCB0} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AC6AD567-98BD-4987-BA6C-536CE8EA66D3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AD4889BE-3A7A-4FC8-8C7D-5AB89CD9CB7B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AD78E5B9-5AEF-4BC6-94EC-D24C91552936} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ADB10979-B9E5-4C65-A4C9-7A57569952EF} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AECA3020-ED1B-43B4-A1BE-C5DED4043989} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B091C4C2-3791-4C00-A0A4-05F50BBB1372} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B0DCC8C4-C019-4C58-83D8-4569E3DE2C8A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B0F28EED-9FC5-4F3B-8452-B44940EFF419} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B105647F-6968-4719-9BFA-D3284F090A4F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B1476CBA-138E-48C6-B794-E0EEBC1D920E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B2B116A0-F7F7-4AF6-8226-8ACB6750827C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B2EF0790-3682-45A1-B7A8-E76195692473} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B40267D6-B3FD-46CA-AF89-FF1A427A7CDF} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B5746458-F1BF-46F3-AF71-BBAC3CF0A0E7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B5C93932-1622-48EA-8547-7167531F652B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B61A76FC-BF4E-4210-A2BF-C8A18FBF84E1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B62D7DBF-6AE1-4D4A-AB6F-F71ED6984450} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B6399BEB-6D92-424E-8D3B-CA420F9E1D6F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B74CD69D-106A-4D45-AD7C-2D8C4B728E27} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7927D3C-839C-4D4A-8864-EC888769D631} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7942996-22CD-4881-8E06-6008D77C8DF1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7995065-FE72-4028-BBB1-4E9F353BDF70} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7DCB85B-CFD9-4C34-8B81-BA9826E08F45} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7EEC998-698E-4788-ADEA-BE24BDD0C835} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B81FF54E-5992-4D1A-98C9-4DA7D7BAEA6E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B8371FCC-AFF6-43CB-BBF2-F64090FA39DC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B87A61E5-1B2F-4B53-817E-173AED2FE696} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B88373BB-01CE-4B1F-82AF-19CC19522F6F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B8DDF08D-6F41-4002-9324-3CD1A07D9D39} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B93BEB10-FD95-4231-8697-E9634D0BF59E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B95866F8-BBD0-4070-8998-2497C5F7D009} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B9FEA595-873B-409A-B775-186EF974FDE6} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BA7AD6BE-7DC4-4089-B4F9-12E749A6631C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BB911F03-B9C6-4A33-8713-0BE87A05C743} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BBEABD98-F0AC-4049-B287-32D4986D6913} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BC0ED74A-5E36-4E72-9FFF-3E0E1DDD17DD} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BC1BBCC5-66D5-4079-A77F-F1090AF57C87} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BC39761F-5A62-4AD9-9441-7CEE2652DCC5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BCCFE3DA-CE2E-41BB-BC3E-3BB8A5DDF459} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BD96EBD6-3627-46CC-B7D1-0402A4CBDC6D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BE6E2A0E-2EE1-490F-8C58-DBD090A5F532} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BEAD2CE5-C555-49A5-BBD5-F0D138A870AE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BEBEB1AA-29C9-464C-97EA-A2AD2E0B595C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BF7B58B5-64E6-4380-AC1A-98C0BFAD389E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C0E59206-1A3B-4566-BE12-A0791449CA19} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C11548B5-854D-410F-8A31-1B1E86017F97} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C150984F-6E47-4E91-9639-E88D0251EA9B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C18728B5-6292-4E17-876C-10C2AC031E3E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C205A912-8662-42F1-887D-980C5699E911} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C20BBEB6-F8B2-4629-AF56-5C595A788930} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C215136B-5F40-4E56-8BB6-B72D9CA9FE7A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C2C4E6A9-46C3-4E75-9A8A-6DC95AC1FBAC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C3A83712-9EAE-4F67-B5DA-C9B6E6EB40CF} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C3ED8225-A150-4C08-BA20-CABFD33EA616} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C41E5127-6506-4E1C-B678-8413BF861ED7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C447DB6E-B45B-4AD4-AEB2-8B2408C0CEBB} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C4D0DF8B-D266-4FCA-94B4-402FBE4BA381} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C4E8BE46-3A20-49C4-9B8B-78744BDB6302} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C4EE3B97-DB26-4938-8848-740D02350A0B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C645C338-F2C8-4DFA-83DA-8CBF33629F9D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C6A6DCFB-77CB-480C-808E-DDC690CB276C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C793B7F3-8D11-405C-959B-95E8022202B9} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C7B893FC-F1CC-4898-9622-62E8C3A2C379} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C7C56AC0-45D2-4250-A227-22B9EE3021FE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C8DFCD7B-6086-48EC-8320-DC4109C90EF0} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C9864B40-639B-4D70-BEE2-2410D79A374B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CA1BCCBC-0F92-487E-88D5-757703DC32EC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CA497B48-8C72-45EA-B236-D03F0E130FBC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CAEA1B43-57C3-437B-8DA4-CDC832757D7C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CBB1A9D6-B25C-412C-BC08-CA94D9938E6C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CC41F55A-1ED7-4216-814F-5880C8B4DBDE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CC52C6C6-3206-449F-B521-43AC456B5E93} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CD92449C-A587-4FFC-BE44-B31861BFE65E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CE0B4A3B-66B2-4E9E-A8A5-7C5C2C77175F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CEB1A45B-3F90-486D-A126-3B21D6AD14DC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CEC15515-12F4-4974-B05F-6F32733F9BA4} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF29BB94-8A88-4110-8A3B-4EF36F770E72} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF8851D1-ACD6-445E-964E-394BD6FBDD1C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF8FF3D8-50B7-48D0-A225-1B9AFC4E6628} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF9B3145-B416-4DDD-85E7-FFBFD5B825E5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF9C061B-6296-466C-89C1-8B6EC00F0C21} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CFA2F687-A467-482A-A1E7-EDC0825ECD0B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CFCC01EF-4A2C-45A3-8BEE-66EDA1765856} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D04B96E1-83FA-4441-9C96-0AB00090E2D7} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D1515A08-9230-4702-9004-208353EF8C09} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D1AD3914-8BE8-4E0F-B948-CC9A6AE3B44E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D2F167F3-A012-4607-9E9F-3CF079D05AE1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D311A7A2-4BC4-4A6E-AF60-98D729A06455} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D38F53BE-C053-4A86-B697-C49C3D202703} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D3AA2FB9-CFE7-40D8-A4F0-9C33B6469A50} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D3DAC667-C3E9-4768-802E-C8772F86C184} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D3EB9225-D17A-41BA-A215-B7D6955408B1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D3ED76DA-EE25-4516-B97E-9C8C29A99DB5} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D40C15A5-4530-4F05-9141-72FA173D8730} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D4877055-243D-4B83-9017-780318F48C7A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D757EE6C-787D-45F1-9C6F-E40ED73FBA25} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D76BE50F-983E-4E12-9B4B-4C247D493C04} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D95A2C1D-39CB-4C22-8E63-720394F60EEF} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DA25E517-C441-4337-BB27-3536E5E81C1B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DA2DE117-0225-41BE-929E-F9B71821B7B8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DA5AAEC8-6113-4315-8DF6-A5E417F0166D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DAD19485-66C0-4CA5-BBC4-39ABA7236AE2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DB5CCD8A-108F-4E32-B561-58D53ABC2A40} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DC10D610-C96A-4279-97B7-EE49C5A3EF2C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DC879D6E-3AD6-4B95-B4E3-943546A3FB48} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DE1E4BCF-35FB-4A1D-B7AC-5AC669F8C15C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DE20C605-B727-47F5-BC8A-DDA0781222CE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DE7B5F0A-E583-412F-98FC-B0B783ED661C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DF81481E-52D6-4438-A566-6C9FCB3F2880} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DF930DAD-094E-44F1-974A-A6E7F6BF0554} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DFEA45F1-0F24-4EF2-AB78-4AD4A68BB0ED} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E0281FFB-2ECD-447F-9B0C-2889695D9D4D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E0824090-D4CF-4B46-94C9-C24224E89505} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E199EFA8-8410-4443-BD09-731F8ECC1A92} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E20D13C4-6DBC-402D-8E57-1F3B16789DC3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E25DC990-4C29-4AF5-A405-2B702200DBE2} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E33ADAE3-4BCF-4B5D-A1AE-4648CA425D15} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E36F46DE-D9FB-45A8-A7E5-62D4DEBAEF11} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E4045DDF-5643-43BE-A1D6-141EDFE4354F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E43C70A1-C480-493D-A472-354E3C9BEBDE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E5AB4D1A-D42A-4EF7-A0A1-B5E73C850090} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E6AB5736-F5C7-46BF-B074-F99E268F06EE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E7E0E27B-97AD-4CE1-BDDC-5108F63B0686} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E87B104E-916F-4286-B7DA-FD8D44A27226} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E89830F7-4639-4D6E-9A39-A23F2C73CF45} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E8BC9549-4FD3-47B7-B8D2-6166DA02CF07} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E8DE1127-633F-42CB-9425-885EBD3EB3D8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E8F0EBDC-4E52-4831-A2F3-8BDA6D3762FC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E986CC04-39EE-4957-B7EC-744F16050700} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EA25CB4C-E69D-4D15-BB4B-3707A631BB2F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EB1B83EA-8B51-4A69-9E50-51E87A358E84} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EBDF00F9-7914-4DDE-A862-A2C80B6E6AC8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ECB00095-59EB-42EE-9F91-E60B1C2EFAEE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ED807047-E042-485D-84A0-F35402272D80} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EDCB3145-E2BE-409D-AEAD-9D87F57A6A0C} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EE6CCB81-E205-46CB-9AD3-F1458027DDC1} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EF543FE7-4617-48DA-B0FA-0FBA7F5DF249} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EF999DDE-B38B-49DD-A5F8-DEBF637B84EC} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EF9F40D0-6655-4791-A734-B2239F01ECE8} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F01F374C-62AF-4DB9-AD1C-6C2435668890} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F0B0B3AE-0F9B-4B5B-8323-A5B4EA2D3E48} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F13FAEE5-2EDC-4846-AD42-16DF40D9FF88} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F161CBAA-C68C-4DEC-8988-8D830484269E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F1E16341-12CC-4886-A567-C4F946EB9283} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F3A58AD0-DF08-42A4-B0DA-4CCD32D72E76} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F5911072-5E6E-4C98-96E0-3E65BDE8B301} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F6503FBA-5B3D-4E2B-93E9-ABDA9E1A7E17} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F68438A5-9520-4072-8BF3-323705A87AC0} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F6C239AF-9635-4C1C-8D54-7A72787CDF4B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F7A71C3B-D1CF-44ED-ACC6-724703AFED53} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F7B05ABD-2F4E-4817-AD61-441CD90CF04A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F90B4D35-AEF0-4141-A8CD-A01B77A42DDE} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F9175BFD-0AE3-4798-8BB1-23FFF8EE662B} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F93CA2FA-E5E0-4E03-8FCC-59BBE4C2A92D} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F95C5700-B425-45D7-9B3F-73728694F886} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FA6CCA0D-38C0-4996-8D34-34C1A86A3C77} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FA99CEBF-604E-402B-941B-2532F719E5BD} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FBC18B31-DEBB-4D14-92E6-D9657220BDAA} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FBEC7C2B-5781-4DAA-9E55-4182FECB993E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FC99521D-4F7A-474D-93F3-2458AE5A70E0} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FD88CE99-39A5-48FA-A182-A03DFC06ED2A} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FE2B3D72-9D3E-4AD8-8169-AB31603FE32E} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FE3744B9-46FC-4F2E-8154-5D8C4DDE332F} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FE37C4F2-0396-4370-A2F0-C179DFD3AAF3} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FF504ACF-ACA0-4D2C-8571-A36480C2AB31} Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FF58CC91-0699-4133-97DF-52E4299990B6} ~~~ FireFox Emptied folder: C:\Users\Nina\AppData\Roaming\mozilla\firefox\profiles\npi0g2yw.default\minidumps [689 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 07.09.2014 at 13:41:02,93 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
07.09.2014, 17:47 | #8 |
| Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Und hie rnoch das aktuelle FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02 Ran by Nina (administrator) on LITTLEONE on 07-09-2014 18:35:15 Running from C:\Users\Nina\Downloads Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe (Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Blue Coat Systems, Inc.) C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (DeviceVM, Inc.) C:\Program Files (x86)\InstantView\config\DVMExportService.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe (Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (WiseCleaner.COM) C:\Program Files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (DeviceVM, Inc.) C:\Program Files (x86)\InstantView\tools\aoiosnap.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (O3SIS AG) C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe () C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Intel Corporation) C:\Windows\System32\igfxext.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-04-23] (Conexant Systems, Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2029352 2010-01-29] (Synaptics Incorporated) HKLM\...\Run: [InstantView Agent] => C:\Program Files (x86)\InstantView\tools\aoiosnap.exe [1093312 2010-05-04] (DeviceVM, Inc.) HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-04-23] (Acer Incorporated) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-24] (Intel Corporation) HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [960080 2010-05-25] (Dritek System Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-24] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-24] (Egis Technology Inc.) HKLM-x32\...\Run: [VitaKeyTSR] => C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe [186224 2010-06-02] (Egis Technology Inc. ) HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2013-05-05] () HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [DataSync Outlook] => C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe [720896 2009-12-07] (O3SIS AG) HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] () HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AfquWazes] => regsvr32.exe " Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk ShortcutTarget: phase-6 Reminder.lnk -> C:\Program Files (x86)\phase-6\phase-6\reminder\reminder.exe (phase-6) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase6_17_erinnerung.lnk ShortcutTarget: phase6_17_erinnerung.lnk -> C:\Program Files (x86)\phase6\phase6_17\WinStart\WinStart.exe (phase6) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital) Startup: C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW BHO: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\x64\EgisPBIE.dll (Egis Technology Inc.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO-x32: SwissAcademic.Citavi.IEPicker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\EgisPBIE.dll (Egis Technology Inc.) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default FF Homepage: hxxp://ecosia.org/ FF NetworkProxy: "ftp", "proxy.uni-bonn.de" FF NetworkProxy: "ftp_port", 8080 FF NetworkProxy: "http", "proxy.uni-bonn.de" FF NetworkProxy: "http_port", 8080 FF NetworkProxy: "no_proxies_on", "uni-bonn.de" FF NetworkProxy: "socks_version", 4 FF NetworkProxy: "ssl", "proxy.uni-bonn.de" FF NetworkProxy: "ssl_port", 8080 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.4 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.) FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\ecosia.xml FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\yahoo-msd.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira Browser Safety - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\abs@avira.com [2014-09-05] FF Extension: Suche App - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-20] FF Extension: LeechBlock - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2013-10-12] FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-09-28] FF Extension: Adblock Plus - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-12] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-23] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-07-23] FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files (x86)\Acer Bio Protection\FFExt FF Extension: SimplePass Online Accounts Extension - C:\Program Files (x86)\Acer Bio Protection\FFExt [2010-06-26] FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2010-11-26] FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-05-21] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG) R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [2037248 2010-04-26] (AuthenTec, Inc.) [File not signed] R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG) R2 bckwfs; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2647256 2014-01-24] (Blue Coat Systems, Inc.) R2 DvmMDES; C:\Program Files (x86)\InstantView\config\DVMExportService.exe [420088 2010-06-02] (DeviceVM, Inc.) S2 EgisTec Service; C:\Program Files (x86)\Acer Bio Protection\EgisService.exe [310128 2010-06-02] (Egis Technology Inc. ) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-09] (NewTech Infosystems, Inc.) [File not signed] S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [31744 2010-12-15] () [File not signed] R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) R2 WDDMService.exe; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [116224 2009-08-17] (WDC) [File not signed] R2 WDSmartWareBackgroundService; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG) R2 bckd; C:\Windows\System32\drivers\bckd.sys [126168 2014-01-24] (Blue Coat Systems, Inc.) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 DVMIO; \??\C:\Program Files (x86)\InstantView\config\dvmio.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-07 18:35 - 2014-09-07 18:35 - 00000000 ____D () C:\FRST 2014-09-07 13:41 - 2014-09-07 13:41 - 00054959 _____ () C:\Users\Nina\Desktop\JRT.txt 2014-09-07 13:22 - 2014-09-07 13:22 - 00000000 ____D () C:\Windows\ERUNT 2014-09-07 13:19 - 2014-09-07 13:19 - 01016261 _____ (Thisisu) C:\Users\Nina\Downloads\JRT.exe 2014-09-07 13:09 - 2014-09-07 13:09 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\DeviceVM 2014-09-07 13:02 - 2014-09-07 13:18 - 00000000 ____D () C:\AdwCleaner 2014-09-07 13:01 - 2014-09-07 13:01 - 01370483 _____ () C:\Users\Nina\Downloads\adwcleaner_3.309.exe 2014-09-07 12:59 - 2014-09-07 12:59 - 00013010 _____ () C:\Users\Nina\Desktop\mbam.txt 2014-09-07 12:18 - 2014-09-07 12:58 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-07 12:18 - 2014-09-07 12:18 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-07 12:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-07 12:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-07 12:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-07 12:15 - 2014-09-07 12:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nina\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-05 18:34 - 2014-09-05 18:34 - 00023015 _____ () C:\Users\Nina\Desktop\COMBOFIX.txt 2014-09-05 18:31 - 2014-09-05 18:31 - 00023015 _____ () C:\ComboFix.txt 2014-09-05 17:38 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-09-05 17:38 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-09-05 17:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-09-05 17:37 - 2014-09-05 18:31 - 00000000 ____D () C:\Qoobox 2014-09-05 17:37 - 2014-09-05 18:27 - 00000000 ____D () C:\Windows\erdnt 2014-09-05 17:30 - 2014-09-05 17:30 - 05576440 ____R (Swearware) C:\Users\Nina\Desktop\ComboFix.exe 2014-09-05 17:05 - 2014-09-05 17:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nina\Downloads\revosetup95.exe 2014-09-05 17:05 - 2014-09-05 17:05 - 00001272 _____ () C:\Users\Nina\Desktop\Revo Uninstaller.lnk 2014-09-05 17:05 - 2014-09-05 17:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-09-04 11:39 - 2014-09-04 11:39 - 00147024 _____ () C:\Users\Nina\Desktop\GMER.txt 2014-09-04 10:20 - 2014-09-04 10:20 - 00380416 _____ () C:\Users\Nina\Downloads\p2n2tqh1.exe 2014-09-04 10:10 - 2014-09-04 10:13 - 00067212 _____ () C:\Users\Nina\Downloads\Addition.txt 2014-09-04 10:07 - 2014-09-07 18:38 - 00025016 _____ () C:\Users\Nina\Downloads\FRST.txt 2014-09-04 10:07 - 2014-09-04 10:13 - 00000000 ____D () C:\Users\Nina\Desktop\FRST 2014-09-04 10:06 - 2014-09-04 10:07 - 02104832 _____ (Farbar) C:\Users\Nina\Downloads\FRST64.exe 2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log 2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable 2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe 2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe 2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-09-03 23:35 - 2014-09-03 23:36 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe 2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-03 22:35 - 2014-09-07 13:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-03 22:35 - 2014-09-03 22:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-03 22:35 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-03 22:35 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-02 22:25 - 2014-09-07 12:07 - 00000000 ____D () C:\ProgramData\AfquWazes 2014-09-02 00:56 - 2014-09-07 18:31 - 00000450 _____ () C:\Windows\Tasks\Wise Auto Shutdown Task.job 2014-09-02 00:56 - 2014-09-02 00:56 - 00002874 _____ () C:\Windows\System32\Tasks\Wise Auto Shutdown Task 2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel 2014-08-29 10:38 - 2014-09-03 22:35 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe 2014-08-19 12:52 - 2014-08-22 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown 2014-08-19 12:52 - 2014-08-19 23:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown 2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise 2014-08-19 11:09 - 2014-08-19 14:37 - 00000000 ____D () C:\Users\Nina\Desktop\Collage 2014-08-16 11:51 - 2014-08-16 11:29 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll 2014-08-16 11:51 - 2014-08-16 11:29 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle 2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-14 12:44 - 2014-08-14 13:46 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente 2014-08-13 23:42 - 2014-08-07 03:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-13 23:42 - 2014-08-07 03:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL 2014-08-12 00:21 - 2014-08-12 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-07 18:38 - 2014-09-04 10:07 - 00025016 _____ () C:\Users\Nina\Downloads\FRST.txt 2014-09-07 18:35 - 2014-09-07 18:35 - 00000000 ____D () C:\FRST 2014-09-07 18:33 - 2010-06-26 05:36 - 00000012 ____H () C:\dvmexp.idx 2014-09-07 18:31 - 2014-09-02 00:56 - 00000450 _____ () C:\Windows\Tasks\Wise Auto Shutdown Task.job 2014-09-07 18:31 - 2010-11-03 15:00 - 00000000 ____D () C:\Users\Public\Documents\phase6_17_Daten 2014-09-07 18:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-07 18:31 - 2009-07-14 06:51 - 00536335 _____ () C:\Windows\setupact.log 2014-09-07 13:50 - 2010-06-26 08:24 - 00000268 _____ () C:\dvmaccounts.ini 2014-09-07 13:50 - 2010-06-26 05:21 - 01367852 _____ () C:\Windows\WindowsUpdate.log 2014-09-07 13:41 - 2014-09-07 13:41 - 00054959 _____ () C:\Users\Nina\Desktop\JRT.txt 2014-09-07 13:22 - 2014-09-07 13:22 - 00000000 ____D () C:\Windows\ERUNT 2014-09-07 13:21 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-07 13:21 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-07 13:19 - 2014-09-07 13:19 - 01016261 _____ (Thisisu) C:\Users\Nina\Downloads\JRT.exe 2014-09-07 13:18 - 2014-09-07 13:02 - 00000000 ____D () C:\AdwCleaner 2014-09-07 13:18 - 2013-09-03 11:00 - 00000000 ___RD () C:\Users\Nina\Dropbox 2014-09-07 13:18 - 2013-09-03 10:40 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Dropbox 2014-09-07 13:09 - 2014-09-07 13:09 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\DeviceVM 2014-09-07 13:09 - 2010-06-26 05:17 - 00189808 _____ () C:\Windows\PFRO.log 2014-09-07 13:01 - 2014-09-07 13:01 - 01370483 _____ () C:\Users\Nina\Downloads\adwcleaner_3.309.exe 2014-09-07 13:01 - 2014-09-03 22:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-07 12:59 - 2014-09-07 12:59 - 00013010 _____ () C:\Users\Nina\Desktop\mbam.txt 2014-09-07 12:58 - 2014-09-07 12:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-07 12:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security 2014-09-07 12:18 - 2014-09-07 12:18 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-07 12:15 - 2014-09-07 12:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nina\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-07 12:15 - 2010-06-26 15:11 - 00756680 _____ () C:\Windows\system32\perfh007.dat 2014-09-07 12:15 - 2010-06-26 15:11 - 00173344 _____ () C:\Windows\system32\perfc007.dat 2014-09-07 12:15 - 2009-07-14 07:13 - 01768244 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-07 12:07 - 2014-09-02 22:25 - 00000000 ____D () C:\ProgramData\AfquWazes 2014-09-07 00:26 - 2010-09-08 18:05 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Skype 2014-09-05 18:35 - 2011-09-05 15:15 - 00000000 ___RD () C:\Users\Nina\Desktop\Internet 2014-09-05 18:34 - 2014-09-05 18:34 - 00023015 _____ () C:\Users\Nina\Desktop\COMBOFIX.txt 2014-09-05 18:31 - 2014-09-05 18:31 - 00023015 _____ () C:\ComboFix.txt 2014-09-05 18:31 - 2014-09-05 17:37 - 00000000 ____D () C:\Qoobox 2014-09-05 18:31 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-09-05 18:27 - 2014-09-05 17:37 - 00000000 ____D () C:\Windows\erdnt 2014-09-05 18:22 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-09-05 18:18 - 2009-07-14 04:34 - 76546048 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-09-05 18:18 - 2009-07-14 04:34 - 24903680 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-09-05 18:18 - 2009-07-14 04:34 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-09-05 18:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak 2014-09-05 18:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak 2014-09-05 17:30 - 2014-09-05 17:30 - 05576440 ____R (Swearware) C:\Users\Nina\Desktop\ComboFix.exe 2014-09-05 17:05 - 2014-09-05 17:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nina\Downloads\revosetup95.exe 2014-09-05 17:05 - 2014-09-05 17:05 - 00001272 _____ () C:\Users\Nina\Desktop\Revo Uninstaller.lnk 2014-09-05 17:05 - 2014-09-05 17:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-09-04 15:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-04 11:39 - 2014-09-04 11:39 - 00147024 _____ () C:\Users\Nina\Desktop\GMER.txt 2014-09-04 10:20 - 2014-09-04 10:20 - 00380416 _____ () C:\Users\Nina\Downloads\p2n2tqh1.exe 2014-09-04 10:13 - 2014-09-04 10:10 - 00067212 _____ () C:\Users\Nina\Downloads\Addition.txt 2014-09-04 10:13 - 2014-09-04 10:07 - 00000000 ____D () C:\Users\Nina\Desktop\FRST 2014-09-04 10:07 - 2014-09-04 10:06 - 02104832 _____ (Farbar) C:\Users\Nina\Downloads\FRST64.exe 2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log 2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable 2014-09-04 10:04 - 2010-09-08 16:08 - 00000000 ____D () C:\Users\Nina 2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe 2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe 2014-09-03 23:42 - 2010-09-08 16:54 - 00000000 ____D () C:\Users\Nina\AppData\Local\Google 2014-09-03 23:42 - 2010-06-09 21:57 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-09-03 23:36 - 2014-09-03 23:35 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe 2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-03 23:03 - 2014-07-23 20:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-03 23:03 - 2012-05-03 02:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-03 22:35 - 2014-09-03 22:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-03 22:35 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-03 22:35 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-03 22:35 - 2014-08-29 10:38 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe 2014-09-03 21:27 - 2011-02-04 11:14 - 00000000 ____D () C:\Users\Nina\Documents\Outlook-Dateien 2014-09-03 20:12 - 2010-09-08 16:23 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Adobe 2014-09-03 20:12 - 2010-09-08 16:10 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Macromedia 2014-09-03 14:20 - 2013-03-26 22:37 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\vlc 2014-09-03 13:25 - 2011-09-09 13:18 - 00000000 ____D () C:\Users\Nina\Desktop\Temporary 2014-09-03 12:56 - 2010-10-13 12:39 - 00000000 ____D () C:\Users\Nina\.gimp-2.6 2014-09-02 13:12 - 2013-12-29 19:19 - 00000000 ____D () C:\Users\Nina\Desktop\BA 2014-09-02 00:56 - 2014-09-02 00:56 - 00002874 _____ () C:\Windows\System32\Tasks\Wise Auto Shutdown Task 2014-09-01 23:06 - 2010-09-29 00:20 - 00000000 ____D () C:\Users\Nina\Gesendete 2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel 2014-09-01 17:09 - 2010-10-20 10:50 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\gtk-2.0 2014-08-30 16:27 - 2010-09-09 19:00 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Liteon 2014-08-29 12:34 - 2012-01-08 22:25 - 00000000 ____D () C:\Users\Nina\Documents\Essen&Trinken 2014-08-29 12:33 - 2011-09-05 15:10 - 00000000 ___RD () C:\Users\Nina\Desktop\Miscellaneous 2014-08-29 12:03 - 2011-11-24 03:19 - 00000000 ____D () C:\Users\Nina\Desktop\Celtic Films 2014-08-22 12:00 - 2011-09-05 15:16 - 00000000 ___RD () C:\Users\Nina\Desktop\Regulars 2014-08-22 11:02 - 2014-08-19 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown 2014-08-21 19:41 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-08-21 14:23 - 2014-08-05 11:42 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-21 14:23 - 2013-02-26 02:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-08-21 14:23 - 2013-02-26 02:42 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-08-19 23:49 - 2014-08-19 12:52 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown 2014-08-19 14:37 - 2014-08-19 11:09 - 00000000 ____D () C:\Users\Nina\Desktop\Collage 2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise 2014-08-16 11:51 - 2012-07-07 10:46 - 00000000 ____D () C:\Program Files (x86)\Java 2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle 2014-08-16 11:30 - 2013-10-21 19:09 - 00000000 ____D () C:\ProgramData\Oracle 2014-08-16 11:29 - 2014-08-16 11:51 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll 2014-08-16 11:29 - 2014-08-16 11:51 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-08-14 13:46 - 2014-08-14 12:44 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente 2014-08-14 11:40 - 2013-09-03 11:00 - 00001019 _____ () C:\Users\Nina\Desktop\Dropbox.lnk 2014-08-14 11:40 - 2013-09-03 10:57 - 00001388 _____ () C:\Windows\wininit.ini 2014-08-14 11:40 - 2013-09-03 10:56 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-08-14 02:38 - 2013-07-13 15:40 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-14 02:38 - 2010-06-09 21:45 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-14 02:31 - 2010-11-09 19:12 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-14 02:30 - 2014-07-16 08:21 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL 2014-08-12 00:22 - 2014-08-12 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX 2014-08-12 00:22 - 2010-12-21 20:32 - 00000000 ____D () C:\Program Files (x86)\DivX 2014-08-12 00:22 - 2010-12-21 20:28 - 00000000 ____D () C:\ProgramData\DivX 2014-08-12 00:21 - 2010-12-21 20:34 - 00000000 ____D () C:\Program Files\DivX 2014-08-09 17:24 - 2010-09-08 18:04 - 00000000 ____D () C:\ProgramData\Skype Files to move or delete: ==================== C:\Users\Nina\Firefox Setup 3.6.9.exe Some content of TEMP: ==================== C:\Users\Nina\AppData\Local\Temp\avgnt.exe C:\Users\Nina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpeiuhpt.dll C:\Users\Nina\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-06 18:18 ==================== End Of Log ============================ |
08.09.2014, 13:35 | #9 |
/// the machine /// TB-Ausbilder | Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurdeESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.09.2014, 23:36 | #10 |
| Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde So, erst einmal das ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=74c6b6e52e27934b9b1b2deff9803db7 # engine=20064 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-09-09 06:41:03 # local_time=2014-09-09 08:41:03 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7600 NT # compatibility_mode_1='Avira Desktop' # compatibility_mode=1810 16777213 100 100 43236 154787235 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 75308 161917911 0 0 # scanned=293284 # found=14 # cleaned=0 # scan_time=39397 sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir" sh=37FDC039C02562267559D42D94DDB64B692FD091 ft=1 fh=7aeecd1bb81f6a22 vn="Variante von Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\hk64tbMyA0.dll.vir" sh=A6D053127826CDA8DD8FCDBB4E81F63000910624 ft=1 fh=e8f05c501331b563 vn="möglicherweise Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\hktbMyA0.dll.vir" sh=7148AC44C7FE0CB8D30A12ACB28171AE1F609C20 ft=1 fh=779162af1796b620 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\tbMyA0.dll.vir" sh=ABF759CA3BFB16DE62197DD7C417AC5039A43AE0 ft=1 fh=1801af74030ebca1 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll.vir" sh=4209335C4BA9AFCFF95CB4D3D9F28978B67B9AAB ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="E:\LITTLEONE\Backup Set 2012-07-15 190000\Backup Files 2012-07-15 190000\Backup files 6.zip" sh=FA2F3919D12D002D3924FF54AF40C5114547DFF5 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="E:\LITTLEONE\Backup Set 2012-07-15 190000\Backup Files 2012-07-15 190000\Backup files 7.zip" sh=065FCF833F6DD354E53D9D279A6626585E44D7E5 ft=0 fh=0000000000000000 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="E:\LITTLEONE\Backup Set 2012-07-15 190000\Backup Files 2013-03-09 001808\Backup files 5.zip" sh=65D49DD916F512A485C97635A41D6BE3405D3C8C ft=0 fh=0000000000000000 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="E:\LITTLEONE\Backup Set 2012-07-15 190000\Backup Files 2013-06-02 194051\Backup files 4.zip" sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir" sh=37FDC039C02562267559D42D94DDB64B692FD091 ft=1 fh=7aeecd1bb81f6a22 vn="Variante von Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\hk64tbMyA0.dll.vir" sh=A6D053127826CDA8DD8FCDBB4E81F63000910624 ft=1 fh=e8f05c501331b563 vn="möglicherweise Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\hktbMyA0.dll.vir" sh=7148AC44C7FE0CB8D30A12ACB28171AE1F609C20 ft=1 fh=779162af1796b620 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\tbMyA0.dll.vir" sh=ABF759CA3BFB16DE62197DD7C417AC5039A43AE0 ft=1 fh=1801af74030ebca1 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll.vir" Code:
ATTFilter Results of screen317's Security Check version 0.99.87 Windows 7 x64 (UAC is enabled) Out of date service pack!! ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Java 7 Update 67 Adobe Flash Player 15.0.0.152 Adobe Reader 10.1.11 Adobe Reader out of Date! Mozilla Firefox (32.0) ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe Microsoft Small Business Business Contact Manager BcmSqlStartupSvc.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2014 01 Ran by Nina (administrator) on LITTLEONE on 10-09-2014 00:32:08 Running from C:\Users\Nina\Desktop\Wurmkur sept\FRST Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe (Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe (Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisService.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Blue Coat Systems, Inc.) C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (DeviceVM, Inc.) C:\Program Files (x86)\InstantView\config\DVMExportService.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe (Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (DeviceVM, Inc.) C:\Program Files (x86)\InstantView\tools\aoiosnap.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (O3SIS AG) C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe () C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Intel Corporation) C:\Windows\System32\igfxext.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe () C:\Users\Nina\Downloads\SecurityCheck.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-04-23] (Conexant Systems, Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2029352 2010-01-29] (Synaptics Incorporated) HKLM\...\Run: [InstantView Agent] => C:\Program Files (x86)\InstantView\tools\aoiosnap.exe [1093312 2010-05-04] (DeviceVM, Inc.) HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-04-23] (Acer Incorporated) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-24] (Intel Corporation) HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [960080 2010-05-25] (Dritek System Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-24] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-24] (Egis Technology Inc.) HKLM-x32\...\Run: [VitaKeyTSR] => C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe [186224 2010-06-02] (Egis Technology Inc. ) HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2013-05-05] () HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [DataSync Outlook] => C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe [720896 2009-12-07] (O3SIS AG) HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] () HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AfquWazes] => regsvr32.exe " Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk ShortcutTarget: phase-6 Reminder.lnk -> C:\Program Files (x86)\phase-6\phase-6\reminder\reminder.exe (phase-6) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase6_17_erinnerung.lnk ShortcutTarget: phase6_17_erinnerung.lnk -> C:\Program Files (x86)\phase6\phase6_17\WinStart\WinStart.exe (phase6) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital) Startup: C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW BHO: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\x64\EgisPBIE.dll (Egis Technology Inc.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO-x32: SwissAcademic.Citavi.IEPicker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\EgisPBIE.dll (Egis Technology Inc.) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default FF Homepage: hxxp://ecosia.org/ FF NetworkProxy: "ftp", "proxy.uni-bonn.de" FF NetworkProxy: "ftp_port", 8080 FF NetworkProxy: "http", "proxy.uni-bonn.de" FF NetworkProxy: "http_port", 8080 FF NetworkProxy: "no_proxies_on", "uni-bonn.de" FF NetworkProxy: "socks_version", 4 FF NetworkProxy: "ssl", "proxy.uni-bonn.de" FF NetworkProxy: "ssl_port", 8080 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.4 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.) FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\ecosia.xml FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\yahoo-msd.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira Browser Safety - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\abs@avira.com [2014-09-05] FF Extension: Suche App - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-20] FF Extension: LeechBlock - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2013-10-12] FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-09-28] FF Extension: Adblock Plus - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-12] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-23] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-07-23] FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files (x86)\Acer Bio Protection\FFExt FF Extension: SimplePass Online Accounts Extension - C:\Program Files (x86)\Acer Bio Protection\FFExt [2010-06-26] FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2010-11-26] FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-05-21] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG) R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [2037248 2010-04-26] (AuthenTec, Inc.) [File not signed] R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG) R2 bckwfs; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2647256 2014-01-24] (Blue Coat Systems, Inc.) R2 DvmMDES; C:\Program Files (x86)\InstantView\config\DVMExportService.exe [420088 2010-06-02] (DeviceVM, Inc.) R2 EgisTec Service; C:\Program Files (x86)\Acer Bio Protection\EgisService.exe [310128 2010-06-02] (Egis Technology Inc. ) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-09] (NewTech Infosystems, Inc.) [File not signed] S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [31744 2010-12-15] () [File not signed] R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) R2 WDDMService.exe; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [116224 2009-08-17] (WDC) [File not signed] R2 WDSmartWareBackgroundService; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG) R2 bckd; C:\Windows\System32\drivers\bckd.sys [126168 2014-01-24] (Blue Coat Systems, Inc.) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 DVMIO; \??\C:\Program Files (x86)\InstantView\config\dvmio.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-10 00:19 - 2014-09-10 00:19 - 00854417 _____ () C:\Users\Nina\Downloads\SecurityCheck.exe 2014-09-08 23:45 - 2014-09-08 23:45 - 02347384 _____ (ESET) C:\Users\Nina\Downloads\esetsmartinstaller_deu.exe 2014-09-07 18:42 - 2014-09-08 23:44 - 00000000 ____D () C:\Users\Nina\Desktop\Wurmkur sept 2014-09-07 18:35 - 2014-09-10 00:32 - 00000000 ____D () C:\FRST 2014-09-07 13:22 - 2014-09-07 13:22 - 00000000 ____D () C:\Windows\ERUNT 2014-09-07 13:19 - 2014-09-07 13:19 - 01016261 _____ (Thisisu) C:\Users\Nina\Downloads\JRT.exe 2014-09-07 13:09 - 2014-09-07 13:09 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\DeviceVM 2014-09-07 13:02 - 2014-09-07 13:18 - 00000000 ____D () C:\AdwCleaner 2014-09-07 13:01 - 2014-09-07 13:01 - 01370483 _____ () C:\Users\Nina\Downloads\adwcleaner_3.309.exe 2014-09-07 12:18 - 2014-09-07 12:58 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-07 12:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-07 12:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-07 12:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-07 12:15 - 2014-09-07 12:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nina\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-05 18:31 - 2014-09-05 18:31 - 00023015 _____ () C:\ComboFix.txt 2014-09-05 17:38 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-09-05 17:38 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-09-05 17:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-09-05 17:38 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-09-05 17:37 - 2014-09-05 18:31 - 00000000 ____D () C:\Qoobox 2014-09-05 17:37 - 2014-09-05 18:27 - 00000000 ____D () C:\Windows\erdnt 2014-09-05 17:30 - 2014-09-05 17:30 - 05576440 ____R (Swearware) C:\Users\Nina\Desktop\ComboFix.exe 2014-09-05 17:05 - 2014-09-05 17:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nina\Downloads\revosetup95.exe 2014-09-05 17:05 - 2014-09-05 17:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-09-04 10:20 - 2014-09-04 10:20 - 00380416 _____ () C:\Users\Nina\Downloads\p2n2tqh1.exe 2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log 2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable 2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe 2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe 2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-09-03 23:35 - 2014-09-03 23:36 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe 2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-03 22:35 - 2014-09-10 00:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-03 22:35 - 2014-09-09 20:02 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-03 22:35 - 2014-09-09 20:02 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-03 22:35 - 2014-09-09 20:02 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-02 22:25 - 2014-09-07 12:07 - 00000000 ____D () C:\ProgramData\AfquWazes 2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel 2014-08-29 10:38 - 2014-09-03 22:35 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe 2014-08-19 12:52 - 2014-08-22 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown 2014-08-19 12:52 - 2014-08-19 23:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown 2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise 2014-08-19 11:09 - 2014-08-19 14:37 - 00000000 ____D () C:\Users\Nina\Desktop\Collage 2014-08-16 11:51 - 2014-08-16 11:29 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll 2014-08-16 11:51 - 2014-08-16 11:29 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle 2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-14 12:44 - 2014-08-14 13:46 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente 2014-08-13 23:42 - 2014-08-07 03:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-13 23:42 - 2014-08-07 03:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL 2014-08-12 00:21 - 2014-08-12 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-10 00:32 - 2014-09-07 18:35 - 00000000 ____D () C:\FRST 2014-09-10 00:19 - 2014-09-10 00:19 - 00854417 _____ () C:\Users\Nina\Downloads\SecurityCheck.exe 2014-09-10 00:10 - 2010-06-26 05:21 - 01416340 _____ () C:\Windows\WindowsUpdate.log 2014-09-10 00:01 - 2014-09-03 22:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-09 20:02 - 2014-09-03 22:35 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-09 20:02 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-09 20:02 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-09 16:00 - 2010-06-26 15:11 - 00756680 _____ () C:\Windows\system32\perfh007.dat 2014-09-09 16:00 - 2010-06-26 15:11 - 00173344 _____ () C:\Windows\system32\perfc007.dat 2014-09-09 16:00 - 2009-07-14 07:13 - 01768244 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-09 15:56 - 2009-07-14 06:51 - 00537567 _____ () C:\Windows\setupact.log 2014-09-09 11:03 - 2013-03-26 22:37 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\vlc 2014-09-09 09:43 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-09 09:43 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-09 08:40 - 2011-02-04 11:14 - 00000000 ____D () C:\Users\Nina\Documents\Outlook-Dateien 2014-09-09 08:35 - 2010-11-03 15:00 - 00000000 ____D () C:\Users\Public\Documents\phase6_17_Daten 2014-09-09 08:34 - 2010-06-26 05:36 - 00000012 ____H () C:\dvmexp.idx 2014-09-09 08:32 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-09 00:54 - 2010-06-26 08:24 - 00000268 _____ () C:\dvmaccounts.ini 2014-09-09 00:00 - 2014-02-17 21:19 - 00000000 ____D () C:\Program Files\Blue Coat K9 Web Protection 2014-09-08 23:45 - 2014-09-08 23:45 - 02347384 _____ (ESET) C:\Users\Nina\Downloads\esetsmartinstaller_deu.exe 2014-09-08 23:44 - 2014-09-07 18:42 - 00000000 ____D () C:\Users\Nina\Desktop\Wurmkur sept 2014-09-08 22:02 - 2010-09-08 18:05 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Skype 2014-09-07 13:22 - 2014-09-07 13:22 - 00000000 ____D () C:\Windows\ERUNT 2014-09-07 13:19 - 2014-09-07 13:19 - 01016261 _____ (Thisisu) C:\Users\Nina\Downloads\JRT.exe 2014-09-07 13:18 - 2014-09-07 13:02 - 00000000 ____D () C:\AdwCleaner 2014-09-07 13:18 - 2013-09-03 11:00 - 00000000 ___RD () C:\Users\Nina\Dropbox 2014-09-07 13:18 - 2013-09-03 10:40 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Dropbox 2014-09-07 13:09 - 2014-09-07 13:09 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\DeviceVM 2014-09-07 13:09 - 2010-06-26 05:17 - 00189808 _____ () C:\Windows\PFRO.log 2014-09-07 13:01 - 2014-09-07 13:01 - 01370483 _____ () C:\Users\Nina\Downloads\adwcleaner_3.309.exe 2014-09-07 12:58 - 2014-09-07 12:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-07 12:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-07 12:15 - 2014-09-07 12:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nina\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-07 12:07 - 2014-09-02 22:25 - 00000000 ____D () C:\ProgramData\AfquWazes 2014-09-05 18:35 - 2011-09-05 15:15 - 00000000 ___RD () C:\Users\Nina\Desktop\Internet 2014-09-05 18:31 - 2014-09-05 18:31 - 00023015 _____ () C:\ComboFix.txt 2014-09-05 18:31 - 2014-09-05 17:37 - 00000000 ____D () C:\Qoobox 2014-09-05 18:31 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-09-05 18:27 - 2014-09-05 17:37 - 00000000 ____D () C:\Windows\erdnt 2014-09-05 18:22 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-09-05 18:18 - 2009-07-14 04:34 - 76546048 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-09-05 18:18 - 2009-07-14 04:34 - 24903680 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-09-05 18:18 - 2009-07-14 04:34 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-09-05 18:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak 2014-09-05 18:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak 2014-09-05 17:30 - 2014-09-05 17:30 - 05576440 ____R (Swearware) C:\Users\Nina\Desktop\ComboFix.exe 2014-09-05 17:05 - 2014-09-05 17:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nina\Downloads\revosetup95.exe 2014-09-05 17:05 - 2014-09-05 17:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-09-04 15:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-04 10:20 - 2014-09-04 10:20 - 00380416 _____ () C:\Users\Nina\Downloads\p2n2tqh1.exe 2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log 2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable 2014-09-04 10:04 - 2010-09-08 16:08 - 00000000 ____D () C:\Users\Nina 2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe 2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe 2014-09-03 23:42 - 2010-09-08 16:54 - 00000000 ____D () C:\Users\Nina\AppData\Local\Google 2014-09-03 23:42 - 2010-06-09 21:57 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-09-03 23:36 - 2014-09-03 23:35 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe 2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-03 23:03 - 2014-07-23 20:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-03 23:03 - 2012-05-03 02:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-03 22:35 - 2014-08-29 10:38 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe 2014-09-03 20:12 - 2010-09-08 16:23 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Adobe 2014-09-03 20:12 - 2010-09-08 16:10 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Macromedia 2014-09-03 13:25 - 2011-09-09 13:18 - 00000000 ____D () C:\Users\Nina\Desktop\Temporary 2014-09-03 12:56 - 2010-10-13 12:39 - 00000000 ____D () C:\Users\Nina\.gimp-2.6 2014-09-02 13:12 - 2013-12-29 19:19 - 00000000 ____D () C:\Users\Nina\Desktop\BA 2014-09-01 23:06 - 2010-09-29 00:20 - 00000000 ____D () C:\Users\Nina\Gesendete 2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel 2014-09-01 17:09 - 2010-10-20 10:50 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\gtk-2.0 2014-08-30 16:27 - 2010-09-09 19:00 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Liteon 2014-08-29 12:34 - 2012-01-08 22:25 - 00000000 ____D () C:\Users\Nina\Documents\Essen&Trinken 2014-08-29 12:33 - 2011-09-05 15:10 - 00000000 ___RD () C:\Users\Nina\Desktop\Miscellaneous 2014-08-29 12:03 - 2011-11-24 03:19 - 00000000 ____D () C:\Users\Nina\Desktop\Celtic Films 2014-08-22 12:00 - 2011-09-05 15:16 - 00000000 ___RD () C:\Users\Nina\Desktop\Regulars 2014-08-22 11:02 - 2014-08-19 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown 2014-08-21 19:41 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-08-21 14:23 - 2014-08-05 11:42 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-21 14:23 - 2013-02-26 02:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-08-21 14:23 - 2013-02-26 02:42 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-08-19 23:49 - 2014-08-19 12:52 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown 2014-08-19 14:37 - 2014-08-19 11:09 - 00000000 ____D () C:\Users\Nina\Desktop\Collage 2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise 2014-08-16 11:51 - 2012-07-07 10:46 - 00000000 ____D () C:\Program Files (x86)\Java 2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle 2014-08-16 11:30 - 2013-10-21 19:09 - 00000000 ____D () C:\ProgramData\Oracle 2014-08-16 11:29 - 2014-08-16 11:51 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll 2014-08-16 11:29 - 2014-08-16 11:51 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-08-14 13:46 - 2014-08-14 12:44 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente 2014-08-14 11:40 - 2013-09-03 11:00 - 00001019 _____ () C:\Users\Nina\Desktop\Dropbox.lnk 2014-08-14 11:40 - 2013-09-03 10:57 - 00001388 _____ () C:\Windows\wininit.ini 2014-08-14 11:40 - 2013-09-03 10:56 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-08-14 02:38 - 2013-07-13 15:40 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-14 02:38 - 2010-06-09 21:45 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-14 02:31 - 2010-11-09 19:12 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-14 02:30 - 2014-07-16 08:21 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL 2014-08-12 00:22 - 2014-08-12 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX 2014-08-12 00:22 - 2010-12-21 20:32 - 00000000 ____D () C:\Program Files (x86)\DivX 2014-08-12 00:22 - 2010-12-21 20:28 - 00000000 ____D () C:\ProgramData\DivX 2014-08-12 00:21 - 2010-12-21 20:34 - 00000000 ____D () C:\Program Files\DivX Files to move or delete: ==================== C:\Users\Nina\Firefox Setup 3.6.9.exe Some content of TEMP: ==================== C:\Users\Nina\AppData\Local\Temp\avgnt.exe C:\Users\Nina\AppData\Local\Temp\drm_dyndata.dll C:\Users\Nina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpeiuhpt.dll C:\Users\Nina\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-06 18:18 ==================== End Of Log ============================ --- --- --- Die Fehlermeldung direkt nach Anmeldung bleibt leider Oder war die Frage nach anderen Problemen neben der Fehlermeldung? Was tue ich am Ende eigentlich mit den ganzen Programmen, die ich jetzt installiert habe? Behalten, oder besser entfernen und bei Bedarf in der akutellsten Version neu installieren? Ohne eure Anweisungen kann und sollte ich da ja eh nichts mit anfangen. Vielen Dank auf jeden Fall für all die Mühe bisher! Lg --- --- --- Geändert von NiFu (09.09.2014 um 23:48 Uhr) |
10.09.2014, 17:38 | #11 |
/// the machine /// TB-Ausbilder | Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Adobe updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AfquWazes] => regsvr32.exe " Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fehlermeldung sollte weg sein. Unbedingt Windows updaten. Da fehlt ein ganzes Servicepack!
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.10.2014, 00:29 | #12 |
| Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Hallo, das kann ja nicht wahr sein... Ich habe schlicht und einfach nicht gerafft, dass der Thread auf eine 2. Seite gesprungen ist und mich gewundert, warum nix mehr kam. Die Email muss mir irgendwie durch die Lappen gegangen sein. Gah. Werde mich gleich dran machen. Edit: Alle Adobe-Programme (Flash, Shockwave, Adobe Reader... ) updaten? Windows Update behauptet das System sei auf dem neusten Stand, das kann natürlich in den letzten 20 Tagen erfolgt sein v.v' . Geändert von NiFu (02.10.2014 um 00:38 Uhr) |
02.10.2014, 17:09 | #13 |
/// the machine /// TB-Ausbilder | Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Das Servicepack gibt es schon Jahre.....
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.10.2014, 19:56 | #14 |
| Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Aber wie kann ich es denn updaten, wenn der Updater überzeugt ist, dass das System up to date ist? Was die Adobe Updates angeht hänge ich auch etwas in der Luft. Gehe ich da einfach die Liste der verfügbaren Updates auf Adobe.com durch? Geändert von NiFu (02.10.2014 um 20:04 Uhr) |
03.10.2014, 13:12 | #15 |
/// the machine /// TB-Ausbilder | Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Adobe Reader deinstallieren, aktuelle Version installieren, lade Dir das Servicepack1 für Win7 als Offline Installer.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde |
avira logfiles, avira malware, checkliste, drahtlos, fehlercode 0x5, fehlercode 0xc0000005, fehlermeldung, malware, nicht mehr, pup.optional.clientconnect, pup.optional.installcore.a, pup.optional.mysearch.a, pup.optional.mysearchdial.a, pup.optional.opencandy, pup.optional.pricegong.a, pup.optional.softonic.a, quarantäne, regsvr32 fehler beim laden des moduls, reparieren, win32/installmonetizer.aq, win32/pricegong.a, win32/toolbar.conduit, win32/toolbar.conduit.b, win32/toolbar.conduit.x, win64/toolbar.conduit.b, windows, windows 7 |