Neuer PC Spam Mails

Wundakynd · 03.12.2014, 21:34

Schönen guten Abend ich bitte um Hilfe,

ich habe mir einen neuen PC gekauft.
Als ich alles eingerichtet habe habe ich ein paar Tage später meine Email Postfächer gelesen & musste festellen das über mein Web.de Postfach Spam Mails versendet werden, ich habe diese direkt gelöscht & das Passwort geändert leider hat es nichts gebracht so das ich das Postfach gelöscht habe.

Heute musste ich feststellen das auch meine beiden GMX Postfächer Spam Mails versenden.

Ich hoffe das man mir helfen kann.

Schöne Grüße

cosinus · 04.12.2014, 00:58

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Wundakynd · 04.12.2014, 09:39

Guten Morgen cosinus,

nein mein Virenscanner gab komplett grünes Licht.

Hier die Logs.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-12-2014
Ran by Timi (administrator) on TIM on 04-12-2014 09:33:54
Running from C:\Users\Timi\Downloads
Loaded Profile: Timi (Available profiles: Timi)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(VIA Technologies, Inc.) C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monito
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2461504 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-22] (Realtek Semiconductor)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [254464 2014-10-20] (Razer Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124720 2014-10-09] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-102848646-3345290315-1485685738-1001\...\MountPoints2: {eb6a1d43-7090-11e4-825c-74d435d1e1a4} - "E:\AutoRun.exe" 

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-102848646-3345290315-1485685738-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://localoem.msn.com/
HKU\S-1-5-21-102848646-3345290315-1485685738-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://localoem.msn.com
HKU\S-1-5-21-102848646-3345290315-1485685738-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de/
HKU\S-1-5-21-102848646-3345290315-1485685738-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-102848646-3345290315-1485685738-1001 -> DefaultScope {D6B099C1-7ADA-45DF-B0FC-5EE4D791532D} URL = 
SearchScopes: HKU\S-1-5-21-102848646-3345290315-1485685738-1001 -> {D6B099C1-7ADA-45DF-B0FC-5EE4D791532D} URL = 
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1

FireFox:
========
FF ProfilePath: C:\Users\Timi\AppData\Roaming\Mozilla\Firefox\Profiles\1vmayb9c.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Extension: Avira Browser Safety - C:\Users\Timi\AppData\Roaming\Mozilla\Firefox\Profiles\1vmayb9c.default\Extensions\abs@avira.com [2014-12-03]
FF Extension: GMX MailCheck - C:\Users\Timi\AppData\Roaming\Mozilla\Firefox\Profiles\1vmayb9c.default\Extensions\toolbar@gmx.net [2014-12-03]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1044784 2014-10-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [806704 2014-10-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [995064 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [162096 2014-10-09] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-09-17] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-05-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2014-02-15] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-09-17] (NVIDIA Corporation)
R2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [367616 2014-10-20] (Razer Inc.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 avfwim; C:\Windows\system32\DRIVERS\avfwim.sys [114608 2014-10-22] (Avira GmbH)
R1 avfwot; C:\Windows\system32\DRIVERS\avfwot.sys [141376 2014-10-22] (Avira GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43064 2014-10-23] (Avira Operations GmbH & Co. KG)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-09-17] (NVIDIA Corporation)
S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-09-05] (Windows (R) Win 7 DDK provider)
S3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40256 2014-09-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
R3 VUSB3HUB; C:\Windows\System32\drivers\ViaHub3.sys [227840 2013-12-11] (VIA Technologies, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 xhcdrv; C:\Windows\System32\drivers\xhcdrv.sys [297984 2013-12-11] (VIA Technologies, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-04 09:33 - 2014-12-04 09:34 - 00012317 _____ () C:\Users\Timi\Downloads\FRST.txt
2014-12-04 09:33 - 2014-12-04 09:33 - 02117632 _____ (Farbar) C:\Users\Timi\Downloads\FRST64.exe
2014-12-04 09:33 - 2014-12-04 09:33 - 00000000 ____D () C:\FRST
2014-12-03 20:45 - 2014-12-03 20:47 - 40032176 _____ () C:\Users\Timi\Downloads\GMX_Firefox_Setup.exe
2014-12-02 16:07 - 2014-12-02 16:07 - 00000000 ____D () C:\Users\Timi\AppData\Local\Macromedia
2014-12-02 16:00 - 2014-12-04 09:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-02 16:00 - 2014-12-02 16:00 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-02 15:59 - 2014-12-02 16:01 - 00000000 ____D () C:\Users\Timi\AppData\Local\Adobe
2014-12-02 15:04 - 2014-12-02 15:04 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-11-27 19:04 - 2014-11-27 19:04 - 00000000 __SHD () C:\Users\Timi\AppData\Local\EmieBrowserModeList
2014-11-26 23:49 - 2014-10-22 16:40 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2014-11-26 23:49 - 2014-10-22 16:40 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2014-11-26 23:41 - 2014-11-26 23:47 - 174072248 _____ () C:\Users\Timi\Downloads\avira_internet_security_de.exe
2014-11-26 22:26 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-11-26 22:26 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-11-26 22:25 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-11-26 22:25 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-11-26 22:25 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-11-26 22:25 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-11-26 22:25 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-11-26 22:25 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-11-26 22:25 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-11-26 22:25 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-11-26 22:25 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-11-26 22:25 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-11-26 22:25 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-11-26 22:25 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-11-26 22:25 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-11-26 22:25 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-11-26 22:25 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-11-26 22:25 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-11-26 22:25 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-11-26 22:25 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-11-26 22:25 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2014-11-26 22:25 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-11-26 22:25 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-11-26 22:25 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2014-11-26 22:25 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-11-26 22:25 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-11-26 22:25 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-11-26 22:25 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-11-26 22:25 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2014-11-26 22:25 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2014-11-26 22:25 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-11-26 22:25 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL
2014-11-26 22:25 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-11-26 22:25 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-11-26 22:25 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-11-26 22:25 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-11-26 22:25 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-11-26 22:25 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-11-26 22:25 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-11-26 22:25 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-11-26 22:25 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-11-26 22:25 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys
2014-11-26 22:25 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2014-11-26 22:25 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2014-11-26 22:25 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-11-26 22:25 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-11-26 22:25 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2014-11-26 22:25 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-11-26 22:25 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2014-11-26 22:25 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-11-26 22:25 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-11-26 22:25 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-11-26 22:25 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2014-11-26 22:25 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2014-11-26 22:25 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2014-11-26 22:25 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2014-11-26 22:25 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2014-11-26 22:25 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-11-26 22:25 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-11-26 22:25 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-11-26 22:25 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2014-11-26 22:25 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-11-26 22:25 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-11-26 22:25 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2014-11-26 22:25 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2014-11-26 22:25 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-11-26 22:25 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2014-11-26 22:25 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2014-11-26 22:25 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-11-26 22:25 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2014-11-26 22:25 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-11-26 22:25 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-11-26 22:25 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2014-11-26 22:25 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-11-26 22:25 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-11-26 22:25 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-11-26 22:25 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2014-11-26 22:25 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-11-26 22:25 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2014-11-26 22:25 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-11-26 22:25 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-11-26 22:25 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-11-26 22:25 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2014-11-26 22:25 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-11-26 22:25 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-11-26 22:25 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-11-26 22:25 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-11-26 22:25 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-11-26 22:25 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-11-26 22:25 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2014-11-26 22:25 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-11-26 22:25 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-11-26 22:25 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2014-11-26 22:25 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-11-26 22:25 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-11-26 22:25 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-11-26 22:25 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2014-11-26 22:25 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-11-26 22:25 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-11-26 22:25 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-11-26 22:25 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-11-26 22:25 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2014-11-26 22:25 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-11-26 22:25 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-11-26 22:25 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-11-26 22:25 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-11-26 22:25 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2014-11-26 22:25 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-11-26 22:25 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-11-26 22:25 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-11-26 22:25 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-11-26 22:25 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2014-11-26 22:25 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-11-26 22:25 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-11-26 22:25 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-11-26 22:25 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2014-11-26 22:25 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-11-26 22:25 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-11-26 22:25 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-11-26 22:25 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-11-26 22:25 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-11-26 22:25 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-11-26 22:25 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls
2014-11-26 22:25 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls
2014-11-26 22:25 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2014-11-26 22:25 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2014-11-26 22:25 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-11-26 22:25 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2014-11-26 22:25 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-11-26 22:25 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2014-11-26 22:25 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-11-26 22:25 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2014-11-26 22:25 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2014-11-26 22:25 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-11-26 22:25 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-11-26 22:25 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2014-11-26 22:25 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-11-26 22:25 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-11-26 22:25 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-11-26 22:25 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-11-26 22:25 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-11-26 22:25 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2014-11-26 22:25 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-11-26 22:25 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-11-26 22:25 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-11-26 22:25 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2014-11-26 22:25 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2014-11-26 22:25 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-11-26 22:25 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-11-26 22:25 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2014-11-26 22:25 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2014-11-26 22:25 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2014-11-26 22:25 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-11-26 22:25 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-11-26 22:25 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2014-11-26 22:25 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-11-26 22:25 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2014-11-26 22:25 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2014-11-26 18:17 - 2014-11-26 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-11-26 18:17 - 2014-11-26 18:17 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-11-26 18:17 - 2014-11-26 18:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-11-26 18:10 - 2014-11-26 18:11 - 13087456 _____ (Microsoft Corporation) C:\Users\Timi\Downloads\Silverlight_x64.exe
2014-11-26 17:38 - 2014-11-26 17:38 - 00001160 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-26 17:33 - 2014-11-26 17:37 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-11-26 17:31 - 2014-11-26 23:49 - 00002089 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-11-26 17:31 - 2014-11-26 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-26 17:31 - 2014-11-26 17:31 - 00000000 ____D () C:\Users\Timi\AppData\Roaming\Avira
2014-11-26 17:31 - 2014-11-26 17:31 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-26 17:30 - 2014-11-26 17:38 - 00000000 ____D () C:\ProgramData\Avira
2014-11-26 17:30 - 2014-11-26 17:38 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-26 17:30 - 2014-10-23 14:02 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-11-26 17:30 - 2014-10-23 14:02 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-11-26 17:30 - 2014-10-23 14:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-11-26 17:30 - 2014-10-23 14:01 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-11-26 17:16 - 2014-11-26 17:25 - 151804352 _____ () C:\Users\Timi\Downloads\avira_free_antivirus_de_14.0.7.342.exe
2014-11-26 17:14 - 2014-12-03 20:48 - 00001178 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-26 17:14 - 2014-12-03 20:48 - 00001166 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-26 17:14 - 2014-12-03 20:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-26 17:14 - 2014-11-26 17:14 - 00000000 ____D () C:\Users\Timi\AppData\Roaming\Mozilla
2014-11-26 17:14 - 2014-11-26 17:14 - 00000000 ____D () C:\Users\Timi\AppData\Local\Mozilla
2014-11-26 17:14 - 2014-11-26 17:14 - 00000000 ____D () C:\ProgramData\Mozilla
2014-11-26 17:13 - 2014-12-03 20:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-26 16:39 - 2014-11-26 16:39 - 00000000 ____D () C:\Users\Timi\AppData\Local\Razer_Inc
2014-11-26 16:33 - 2014-11-26 16:33 - 00000000 ____D () C:\ProgramData\Razer
2014-11-26 16:33 - 2014-11-26 16:33 - 00000000 ____D () C:\Program Files (x86)\Razer
2014-11-26 16:08 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2014-11-26 16:08 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-11-26 16:08 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2014-11-26 12:24 - 2014-11-26 12:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-26 12:24 - 2014-10-31 23:26 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-26 12:20 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-11-26 12:20 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-26 12:20 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-26 12:20 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-11-26 12:20 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-11-26 12:20 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-11-26 12:20 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-11-26 12:20 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-11-26 12:20 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-11-26 12:20 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-11-26 12:20 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-26 12:20 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-11-26 12:20 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-26 12:20 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-11-26 12:20 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-11-26 12:20 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-11-26 12:20 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-11-26 12:20 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-11-26 12:20 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2014-11-26 12:20 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2014-11-26 12:19 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-11-26 12:19 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-11-26 12:19 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-11-26 12:19 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-11-26 12:19 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-11-26 12:19 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-11-26 12:19 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-11-26 12:19 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-11-26 12:18 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-26 12:18 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-11-26 12:18 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-11-26 12:18 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-26 12:18 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-26 12:18 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-11-26 12:18 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2014-11-26 12:18 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-11-26 12:18 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-26 12:18 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-26 12:18 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-11-26 12:18 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-26 12:18 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-11-26 12:18 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-11-26 12:18 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-11-26 12:18 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-11-26 12:18 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-11-26 12:18 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-11-26 12:17 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-11-26 12:17 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-11-26 12:17 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-11-26 12:17 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-11-26 12:17 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-11-26 12:17 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-11-26 12:17 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-11-26 12:17 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-11-26 12:17 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-11-26 12:17 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-11-26 12:17 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-11-26 12:17 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-11-26 12:17 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-11-26 12:17 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-11-26 12:17 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-11-26 12:17 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-11-26 12:17 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-26 12:17 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-26 12:17 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-11-26 12:17 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-11-26 12:17 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-11-26 12:17 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-11-26 12:17 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-11-26 12:17 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-11-26 12:17 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-11-26 12:16 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-11-26 12:16 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-11-26 12:16 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-11-26 12:16 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-11-26 12:16 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-11-26 12:16 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-11-26 12:16 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-11-26 12:16 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-11-26 12:16 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2014-11-26 12:16 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2014-11-26 12:16 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-11-26 12:16 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2014-11-26 12:16 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2014-11-26 12:16 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-11-26 12:16 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-11-26 12:16 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-26 12:16 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-11-26 12:16 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-11-26 12:16 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-11-26 12:16 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-26 12:16 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-11-26 12:16 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-11-26 12:16 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-11-26 12:16 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-11-26 12:16 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-11-26 12:16 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-11-26 12:16 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-11-26 12:16 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-11-26 12:16 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-11-26 12:16 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-11-26 12:16 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-11-26 12:16 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2014-11-26 12:16 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-11-26 12:16 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-11-26 12:15 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-26 12:15 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-11-26 12:15 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-11-26 12:15 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-11-26 12:15 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-11-26 12:15 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-11-26 12:15 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-26 12:15 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-11-26 12:15 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-26 12:15 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-26 12:15 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-26 12:15 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-11-26 12:15 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-26 12:15 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-26 12:15 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-26 12:15 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-11-26 12:15 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-26 12:15 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2014-11-26 12:15 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-26 12:15 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-26 12:15 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-26 12:15 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-26 12:15 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-26 12:15 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-11-26 12:15 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-26 12:15 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-26 12:15 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-11-26 12:15 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-11-26 12:15 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-11-26 12:15 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-26 12:15 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-26 12:15 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-11-26 12:15 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-11-26 12:15 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-26 12:15 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-11-26 12:15 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-11-26 12:15 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-11-26 12:15 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-26 12:15 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-26 12:15 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-26 12:15 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-26 12:15 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-26 12:15 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-26 12:15 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-11-26 12:15 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-26 12:15 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-11-26 12:15 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-26 12:15 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-11-26 12:15 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-11-26 12:15 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-11-26 12:15 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-11-26 12:15 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-11-26 12:15 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-26 12:15 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-11-26 12:15 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-26 12:15 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-11-26 12:15 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-26 12:15 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-26 12:15 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-26 12:15 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-26 12:15 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-26 12:15 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-26 12:15 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-11-26 12:15 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-26 12:15 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2014-11-26 12:15 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-11-26 12:15 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-26 12:15 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-26 12:15 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-11-26 12:15 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-26 12:15 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-26 12:15 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-11-26 12:15 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-11-26 12:15 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-11-26 12:15 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-26 12:15 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-11-26 12:15 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-26 12:15 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-11-26 12:15 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-26 12:15 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-11-26 12:15 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-26 12:15 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-11-26 12:15 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-11-26 12:15 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-26 12:15 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-26 12:15 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-26 12:15 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-26 12:15 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-11-26 12:15 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-11-26 12:15 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-26 12:15 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-26 12:15 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-26 12:15 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-11-26 12:15 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-11-26 12:12 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-26 12:12 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-26 12:12 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-26 12:12 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-26 12:11 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-26 12:11 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-26 12:11 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-26 12:11 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-26 12:11 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-26 12:11 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-26 12:11 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-26 12:11 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-11-26 12:11 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-26 12:11 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-26 12:11 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-26 12:11 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-26 12:11 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-26 12:11 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-11-26 12:11 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-26 12:11 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-11-26 12:11 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-11-26 12:11 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-11-26 12:11 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-11-26 12:10 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-11-26 12:10 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-11-26 12:10 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-11-26 12:10 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-11-26 12:10 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-11-26 12:10 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-11-26 12:10 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-11-26 12:10 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-11-26 12:10 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2014-11-26 12:10 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2014-11-26 12:10 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-11-26 12:10 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-11-26 12:10 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-11-26 12:10 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-11-26 12:10 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-11-26 12:10 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-11-26 12:10 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-11-26 12:10 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-11-26 12:10 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-11-26 12:10 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2014-11-26 12:10 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-11-26 12:10 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-11-26 12:10 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-11-26 12:10 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-11-26 12:10 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-11-26 12:10 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-11-26 12:10 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-11-26 12:10 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-11-26 12:10 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-11-26 12:10 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2014-11-26 12:10 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2014-11-26 12:10 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2014-11-26 12:10 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2014-11-26 12:10 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2014-11-26 12:10 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2014-11-26 12:10 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2014-11-26 11:33 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2014-11-26 11:33 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2014-11-24 22:25 - 2014-11-24 22:41 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-11-24 22:21 - 2014-11-24 22:40 - 00000000 ____D () C:\Users\Timi\AppData\Local\Battle.net
2014-11-24 22:21 - 2014-11-24 22:23 - 00000000 ____D () C:\Users\Timi\AppData\Roaming\Battle.net
2014-11-24 22:21 - 2014-11-24 22:21 - 00001137 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-11-24 22:21 - 2014-11-24 22:21 - 00000000 ____D () C:\Users\Timi\AppData\Roaming\NVIDIA
2014-11-24 22:21 - 2014-11-24 22:21 - 00000000 ____D () C:\Users\Timi\AppData\Local\Blizzard Entertainment
2014-11-24 22:21 - 2014-11-24 22:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-11-24 22:21 - 2014-11-24 22:21 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-11-24 22:21 - 2014-11-24 22:21 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-11-24 22:14 - 2014-11-24 22:15 - 00000000 ____D () C:\ProgramData\Battle.net
2014-11-24 22:01 - 2014-11-24 22:01 - 00297848 _____ () C:\Windows\Minidump\112414-26609-01.dmp
2014-11-24 21:54 - 2014-11-24 21:54 - 00000000 ____D () C:\Users\Timi\AppData\Local\Chris_Pietschmann_(http__
2014-11-24 21:19 - 2014-11-24 21:19 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-11-24 21:19 - 2014-11-24 21:19 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-11-24 21:19 - 2014-11-24 21:19 - 00000000 ____D () C:\Program Files\MSBuild
2014-11-24 21:19 - 2014-11-24 21:19 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-11-24 21:19 - 2014-11-24 21:19 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-11-24 21:14 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2014-11-24 21:14 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-24 21:14 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2014-11-24 21:14 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-11-24 21:03 - 2014-11-24 21:03 - 01373696 _____ () C:\Users\Timi\Downloads\VirtualRouterInstaller_1.0.msi
2014-11-24 20:52 - 2014-11-24 20:52 - 00000000 ____D () C:\Users\Timi\AppData\Roaming\Macromedia
2014-11-24 20:43 - 2014-11-24 22:01 - 707195610 _____ () C:\Windows\MEMORY.DMP
2014-11-24 20:43 - 2014-11-24 22:01 - 00000000 ____D () C:\Windows\Minidump
2014-11-24 20:43 - 2014-11-24 20:43 - 00297736 _____ () C:\Windows\Minidump\112414-25281-01.dmp
2014-11-24 20:41 - 2014-11-24 20:41 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-24 20:41 - 2014-11-24 20:41 - 00000000 ____D () C:\Program Files\Realtek
2014-11-24 20:41 - 2014-05-22 07:18 - 03962840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-24 20:41 - 2014-05-22 07:18 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-24 20:41 - 2014-05-22 07:18 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 01099203 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-24 20:41 - 2014-05-22 07:18 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00897152 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00753280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00065112 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00060504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll
2014-11-24 20:41 - 2014-05-22 07:18 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-24 20:40 - 2014-11-24 20:40 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-11-24 20:40 - 2014-05-22 07:18 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-24 20:40 - 2014-05-22 07:18 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-24 20:40 - 2014-05-22 07:17 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-24 20:40 - 2014-05-22 07:17 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-24 20:40 - 2014-05-22 07:17 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-24 20:40 - 2014-05-22 07:17 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-24 20:40 - 2014-05-22 07:17 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-24 20:38 - 2014-11-24 20:38 - 00000000 ____D () C:\Intel
2014-11-24 20:34 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-24 20:34 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-11-24 20:34 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-24 20:34 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-11-24 20:34 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-24 20:34 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-11-24 20:33 - 2014-12-03 20:49 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-102848646-3345290315-1485685738-1001
2014-11-24 20:33 - 2014-09-13 21:13 - 00613696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-11-24 20:30 - 2014-11-24 20:30 - 00000000 __SHD () C:\Users\Timi\AppData\Local\EmieUserList
2014-11-24 20:30 - 2014-11-24 20:30 - 00000000 __SHD () C:\Users\Timi\AppData\Local\EmieSiteList
2014-11-24 20:29 - 2014-11-24 20:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-11-24 20:29 - 2014-11-24 20:29 - 00000000 ____D () C:\ProgramData\MobileBrServ
2014-11-20 09:47 - 2014-11-20 09:47 - 00000000 ____D () C:\Users\Timi\AppData\Roaming\Intel Corporation
2014-11-20 09:45 - 2014-11-26 17:37 - 00000000 ____D () C:\Users\Timi\AppData\Local\Packages
2014-11-20 09:45 - 2014-11-24 22:44 - 00000000 ____D () C:\Users\Timi
2014-11-20 09:45 - 2014-11-20 09:46 - 00000000 ____D () C:\Users\Timi\AppData\Local\NVIDIA Corporation
2014-11-20 09:45 - 2014-11-20 09:45 - 00001457 _____ () C:\Users\Timi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-20 09:45 - 2014-11-20 09:45 - 00000020 ___SH () C:\Users\Timi\ntuser.ini
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Vorlagen
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Startmenü
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Netzwerkumgebung
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Lokale Einstellungen
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Eigene Dateien
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Druckumgebung
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Documents\Eigene Musik
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Documents\Eigene Bilder
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\AppData\Local\Verlauf
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\AppData\Local\Anwendungsdaten
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 _SHDL () C:\Users\Timi\Anwendungsdaten
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 ____D () C:\Users\Timi\AppData\Roaming\Adobe
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 ____D () C:\Users\Timi\AppData\Local\VirtualStore
2014-11-20 09:45 - 2014-11-20 09:45 - 00000000 ____D () C:\Users\Timi\AppData\Local\NVIDIA
2014-11-20 09:45 - 2014-07-18 07:46 - 00000000 ___RD () C:\Users\Timi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-20 09:45 - 2014-07-18 07:36 - 00000000 ___RD () C:\Users\Timi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-20 09:45 - 2014-03-18 11:11 - 00000369 _____ () C:\Users\Timi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-20 09:45 - 2014-03-18 11:11 - 00000369 _____ () C:\Users\Timi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-20 09:45 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Timi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-20 09:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Timi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-20 09:45 - 2012-10-02 07:25 - 00000830 _____ () C:\Users\Timi\Desktop\Treiber und Software.lnk
2014-11-11 19:50 - 2014-11-11 19:50 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-11-11 19:49 - 2014-11-11 19:49 - 00000000 ____D () C:\Users\Public\CyberLink
2014-11-11 19:48 - 2014-11-11 19:48 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-11 05:27 - 2014-11-11 05:27 - 00080384 _____ (Razer Inc) C:\Windows\system32\RazerCoinstaller.dll
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Programme
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-11-10 17:13 - 2014-11-10 17:13 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-11-10 17:11 - 2014-12-04 09:33 - 01726974 _____ () C:\Windows\WindowsUpdate.log
2014-11-10 17:10 - 2014-11-11 19:51 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-102848646-3345290315-1485685738-500
2014-11-07 22:40 - 2014-10-24 11:38 - 00000036 _____ () C:\Windows\time.bat

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-04 09:33 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-12-04 09:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-12-03 21:38 - 2014-03-18 11:03 - 01780340 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-03 21:38 - 2014-03-18 10:25 - 00765378 _____ () C:\Windows\system32\perfh007.dat
2014-12-03 21:38 - 2014-03-18 10:25 - 00159696 _____ () C:\Windows\system32\perfc007.dat
2014-12-02 15:04 - 2013-08-22 15:46 - 00024546 _____ () C:\Windows\setupact.log
2014-11-26 23:53 - 2014-09-19 12:48 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-26 23:53 - 2014-03-18 02:50 - 01014892 _____ () C:\Windows\PFRO.log
2014-11-26 23:53 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-26 23:52 - 2014-03-18 10:40 - 00000000 ____D () C:\Program Files\Windows Journal
2014-11-26 23:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2014-11-26 23:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-11-26 23:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-26 23:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-26 23:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2014-11-26 23:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2014-11-26 23:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup
2014-11-26 23:52 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-11-26 23:52 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-11-26 17:35 - 2013-08-22 15:44 - 00338016 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-26 17:34 - 2014-09-19 11:58 - 00000000 ____D () C:\ProgramData\Norton
2014-11-26 17:34 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-11-26 17:33 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-26 17:33 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-26 17:33 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore
2014-11-26 17:33 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-11-26 17:33 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-26 17:33 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-26 17:31 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-26 16:43 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-26 16:33 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-26 12:27 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-26 12:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-11-26 12:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager
2014-11-26 12:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera
2014-11-24 22:34 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-11-24 21:19 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-11-24 21:19 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-11-24 20:49 - 2014-09-19 21:54 - 00000000 ___RD () C:\Hyrican_Installation
2014-11-24 20:41 - 2014-09-19 12:45 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-24 20:40 - 2014-09-19 12:51 - 00018304 _____ () C:\Windows\system32\results.xml
2014-11-24 20:40 - 2014-09-19 11:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-24 20:38 - 2014-09-19 12:47 - 00000724 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2014-11-24 20:34 - 2014-09-19 12:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-24 20:33 - 2014-09-19 12:47 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-24 20:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-11-24 20:30 - 2014-09-19 12:45 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-11-20 21:51 - 2013-08-22 16:38 - 00714208 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-20 21:51 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-11 12:56 - 2014-09-19 21:54 - 00000000 ____D () C:\Windows\Panther
2014-11-11 12:56 - 2013-08-22 16:37 - 00003843 _____ () C:\Windows\DtcInstall.log
2014-11-10 17:15 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-11-10 17:13 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-11-10 17:11 - 2013-08-22 15:46 - 00000116 _____ () C:\Windows\setuperr.log
2014-11-07 22:40 - 2013-08-22 16:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template

Some content of TEMP:
====================
C:\Users\Timi\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-02 14:35

==================== End Of Log ============================

--- --- ---

Wundakynd · 04.12.2014, 09:40

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-12-2014
Ran by Timi at 2014-12-04 09:34:37
Running from C:\Users\Timi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: FireWall (Enabled) {753F9273-B322-2907-AC37-03D0F1702F22}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Avira (HKLM-x32\...\{905d3ded-fe60-432c-b56e-7cd19f2899ac}) (Version: 1.1.24.28609 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.24.28609 - Avira Operations GmbH & Co. KG) Hidden
Avira Internet Security (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4427.02 - CyberLink Corp.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.25.00.03 - Huawei Technologies Co.,Ltd)
Mozilla Firefox 34.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0 (x86 de)) (Version: 34.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 344.11 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Platform (x32 Version: 1.42 - VIA Technologies, Inc.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.34.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 3.91 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.42 - VIA Technologies, Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

27-11-2014 12:43:07 Removed Virtual Router v1.0

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {795CAA52-2871-4D34-94C7-A2329C841815} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-10-31] (Microsoft Corporation)
Task: {8E9F5068-DDE7-4E45-85B5-7CDF827989B9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-02] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-11-24 20:29 - 2014-02-15 07:59 - 00239184 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2014-09-19 12:48 - 2014-09-13 22:53 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-19 12:42 - 2013-09-16 11:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-11-26 17:13 - 2014-11-26 07:25 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "RzWizard"

========================= Accounts: ==========================

Administrator (S-1-5-21-102848646-3345290315-1485685738-500 - Administrator - Disabled)
Gast (S-1-5-21-102848646-3345290315-1485685738-501 - Limited - Disabled)
Timi (S-1-5-21-102848646-3345290315-1485685738-1001 - Administrator - Enabled) => C:\Users\Timi

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/26/2014 11:54:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Name des fehlerhaften Moduls: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000ec68
ID des fehlerhaften Prozesses: 0x458
Startzeit der fehlerhaften Anwendung: 0xigfxCUIService.exe0
Pfad der fehlerhaften Anwendung: igfxCUIService.exe1
Pfad des fehlerhaften Moduls: igfxCUIService.exe2
Berichtskennung: igfxCUIService.exe3
Vollständiger Name des fehlerhaften Pakets: igfxCUIService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxCUIService.exe5

Error: (11/26/2014 05:36:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Name des fehlerhaften Moduls: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000ec68
ID des fehlerhaften Prozesses: 0x4a8
Startzeit der fehlerhaften Anwendung: 0xigfxCUIService.exe0
Pfad der fehlerhaften Anwendung: igfxCUIService.exe1
Pfad des fehlerhaften Moduls: igfxCUIService.exe2
Berichtskennung: igfxCUIService.exe3
Vollständiger Name des fehlerhaften Pakets: igfxCUIService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxCUIService.exe5

Error: (11/26/2014 02:09:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Name des fehlerhaften Moduls: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000ec68
ID des fehlerhaften Prozesses: 0x4bc
Startzeit der fehlerhaften Anwendung: 0xigfxCUIService.exe0
Pfad der fehlerhaften Anwendung: igfxCUIService.exe1
Pfad des fehlerhaften Moduls: igfxCUIService.exe2
Berichtskennung: igfxCUIService.exe3
Vollständiger Name des fehlerhaften Pakets: igfxCUIService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxCUIService.exe5

Error: (11/24/2014 10:41:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NIS.exe, Version: 12.10.0.42, Zeitstempel: 0x5202e8a2
Name des fehlerhaften Moduls: WINHTTP.dll, Version: 6.3.9600.16384, Zeitstempel: 0x521579c9
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00014b1b
ID des fehlerhaften Prozesses: 0x120
Startzeit der fehlerhaften Anwendung: 0xNIS.exe0
Pfad der fehlerhaften Anwendung: NIS.exe1
Pfad des fehlerhaften Moduls: NIS.exe2
Berichtskennung: NIS.exe3
Vollständiger Name des fehlerhaften Pakets: NIS.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NIS.exe5

Error: (11/24/2014 10:01:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Name des fehlerhaften Moduls: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000ec68
ID des fehlerhaften Prozesses: 0x438
Startzeit der fehlerhaften Anwendung: 0xigfxCUIService.exe0
Pfad der fehlerhaften Anwendung: igfxCUIService.exe1
Pfad des fehlerhaften Moduls: igfxCUIService.exe2
Berichtskennung: igfxCUIService.exe3
Vollständiger Name des fehlerhaften Pakets: igfxCUIService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxCUIService.exe5

Error: (11/24/2014 08:44:01 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004E028
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c7c00280-b24d-4e82-89ca-4f1288eb1d9e;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (11/24/2014 08:43:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Name des fehlerhaften Moduls: igfxCUIService.exe, Version: 6.15.10.3621, Zeitstempel: 0x5376e21a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000ec68
ID des fehlerhaften Prozesses: 0x404
Startzeit der fehlerhaften Anwendung: 0xigfxCUIService.exe0
Pfad der fehlerhaften Anwendung: igfxCUIService.exe1
Pfad des fehlerhaften Moduls: igfxCUIService.exe2
Berichtskennung: igfxCUIService.exe3
Vollständiger Name des fehlerhaften Pakets: igfxCUIService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxCUIService.exe5

Error: (11/24/2014 08:40:52 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EFD
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c7c00280-b24d-4e82-89ca-4f1288eb1d9e;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (11/24/2014 08:40:52 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD
SKU-ID=c7c00280-b24d-4e82-89ca-4f1288eb1d9e

Error: (11/24/2014 08:40:52 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0x80072EFD


System errors:
=============
Error: (12/04/2014 09:29:38 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: NT-AUTORITÄT)
Description: Für den Miniport "Remote NDIS based Internet Sharing Device #2, {FFAB4BFB-C31C-4776-83CD-739EE8BA54FB}" ist das Ereignis "74" aufgetreten.

Error: (12/03/2014 08:37:11 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: NT-AUTORITÄT)
Description: Für den Miniport "Remote NDIS based Internet Sharing Device #2, {FFAB4BFB-C31C-4776-83CD-739EE8BA54FB}" ist das Ereignis "74" aufgetreten.

Error: (12/02/2014 03:29:40 PM) (Source: DCOM) (EventID: 10010) (User: Tim)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/02/2014 03:29:06 PM) (Source: DCOM) (EventID: 10010) (User: Tim)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/02/2014 03:22:13 PM) (Source: DCOM) (EventID: 10010) (User: Tim)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/02/2014 03:21:43 PM) (Source: DCOM) (EventID: 10010) (User: Tim)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/02/2014 02:47:12 PM) (Source: DCOM) (EventID: 10010) (User: Tim)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/02/2014 02:46:42 PM) (Source: DCOM) (EventID: 10010) (User: Tim)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/02/2014 02:36:45 PM) (Source: DCOM) (EventID: 10010) (User: Tim)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/02/2014 02:36:15 PM) (Source: DCOM) (EventID: 10010) (User: Tim)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}


Microsoft Office Sessions:
=========================
Error: (11/26/2014 11:54:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxCUIService.exe6.15.10.36215376e21aigfxCUIService.exe6.15.10.36215376e21ac0000005000000000000ec6845801d009cbd4797c95C:\Windows\system32\igfxCUIService.exeC:\Windows\system32\igfxCUIService.exe288c2ce4-75bf-11e4-8262-001e101f0000

Error: (11/26/2014 05:36:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxCUIService.exe6.15.10.36215376e21aigfxCUIService.exe6.15.10.36215376e21ac0000005000000000000ec684a801d00996fc77f13fC:\Windows\system32\igfxCUIService.exeC:\Windows\system32\igfxCUIService.exe5072c9bc-758a-11e4-8261-001e101f0000

Error: (11/26/2014 02:09:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxCUIService.exe6.15.10.36215376e21aigfxCUIService.exe6.15.10.36215376e21ac0000005000000000000ec684bc01d0097a366aefc9C:\Windows\system32\igfxCUIService.exeC:\Windows\system32\igfxCUIService.exe7c1eacc0-756d-11e4-8260-74d435d1e1a4

Error: (11/24/2014 10:41:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NIS.exe12.10.0.425202e8a2WINHTTP.dll6.3.9600.16384521579c9c000000500014b1b12001d0082a1ac45756C:\Program Files (x86)\Norton Internet Security\Engine\21.0.0.100\NIS.exeC:\Windows\SYSTEM32\WINHTTP.dll97ad456a-7422-11e4-825f-001e101f0000

Error: (11/24/2014 10:01:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxCUIService.exe6.15.10.36215376e21aigfxCUIService.exe6.15.10.36215376e21ac0000005000000000000ec6843801d00829c7a6069fC:\Windows\system32\igfxCUIService.exeC:\Windows\system32\igfxCUIService.exe0fdb290d-741d-11e4-825f-001e101f0000

Error: (11/24/2014 08:44:01 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0xC004E028RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c7c00280-b24d-4e82-89ca-4f1288eb1d9e;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (11/24/2014 08:43:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxCUIService.exe6.15.10.36215376e21aigfxCUIService.exe6.15.10.36215376e21ac0000005000000000000ec6840401d0081eecfc3d6aC:\Windows\system32\igfxCUIService.exeC:\Windows\system32\igfxCUIService.exe30c01217-7412-11e4-825e-001e101f0000

Error: (11/24/2014 08:40:52 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x80072EFDRuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c7c00280-b24d-4e82-89ca-4f1288eb1d9e;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (11/24/2014 08:40:52 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0x80072EFDc7c00280-b24d-4e82-89ca-4f1288eb1d9e

Error: (11/24/2014 08:40:52 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0x80072EFD00010001(0x00000000, 20:40:51:791 - https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=DM)
00020001(0x00000000, 20:40:51:791)
00030001(0x00000000, 20:40:51:807 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 20:40:51:807 - 0)
00040001(0x00000000, 20:40:51:807 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 20:40:51:807 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F86, 20:40:51:807 - 0, 1)
00040006(0x00000001, 20:40:51:807 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 20:40:51:807 - 0)
00020008(0x80072EFD, 20:40:52:822 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>GxZrD5+rpQpwhfV0V8MbVtY2WjSUQ2Qwf+SLVK0jsExHQcyOsRsklfv5J1Ejq7I6YxuxxAu8A904ZopBmJA4oMMW1f+B4atQXyUiiKhiDd78uEZasRvjvrDuQIbhVcse1mhZU9N/SKB3gZzVcNEZR28pWVSmJ+zTRSPnSljv6eebLt5VI2MBY5hLIEp8b57OcJRJDIX//YKLy36D3FWDUq3STYMXqed0hI85tquOFgzMW49iYisoQ8pnsRudEW2AspbeQtjNfe7qB9zHCONVgXAbgcaPL0WwUZNaUsR1yN4l6WsNm+Z0QBLOQZkaLXcJWMC+uWNr5hetdV6+ZTrWkD93WP3H3VCGtP97aYpH232/pjQbCvUaBzMmf4AsYhATpt7MRrt7g7sy4+50kJE9w8ugrb7rNjfYcbMvMtMZf5UWDAUi/ccj94OVUb1RFuptU9EaD/CyDZ/j+cViFUmB3d+dqKQsMUX7sv9UPdP69ngosoN43bvOZdH+MFo48pFuFyVKY+zE9pLw484TYv69dxIAE+s+EU+dDnb9kY1m89i0gRNzwuwrZzu3iqPNel1b0g+/df1AiHAogH+keclXCxiQh3JHEqcCFkZDmjjRbuX8h+y6UFT3pmuUurJs+LSJRfXuz+epCaYaVcG5Q3RakS/gqjLqXByVx0iBSLjdzxxrjZshodXEJtlXM28GQ+xr2arqhbWQTP25lQy9z5walQ8ZPXD6AZjV5iggOhGM7MDe7+ymhys9eMRWjVhdAsxZXVwy85DW+Av3kAMiN/nBZ4W9Iky8Z4u1JHX8hRLINJtShLoVhRat8F5JPXUjW1Fr9yZvSxxky+dsCJ69DCtt/eAYzajJOoqhpSK1bDaGhS+Z0OXdJT25LuZBypwwx5fdDc0X3kYQq0u8fxhSXJ6F3dKfhxx3/O9wI86wnBrDcP0S+LAFeMb5wcnSdjT+Fv7HZJXfRDOXjZ8TwgQb76hs/WmQedkIrobz32WJORvW2tpqzsmaptgICz/7c6dhEW0FDKyotpb6Bi9fv63jQZYW/tzwQv8mDt/EhoDRyseBplyrP4t9xfeDfsMlOrI22WweUk+l9I+ilRPwsOzC4/9HMq2lJVz5E9Qom4VdZukDt4Az32fGyo5H9jC6MKz/K4IO/flt0EnwgJsmR7xQDkzBgllsX+WODB++ntnnKbBlpA+ASAcGhfkYCITHvoj7zbzI/iExBJmoLtzvis5wjz0GdlaJuLFJLN4c68Md4p8LUYUxCoy9LKKAfL4ZjTGfeyEiIERuP2EGohF+7N+ShnS6iFV7UsHTrdbECgif7cOT7sQOl0qXIXUVtWbEfURZsV5vaac7Zp9aXfZmVuXuWZGO6lV1N8G1EIED71DjaKM5OPNK0JKvwdwRewsA5OyOSPvAwlaGUzEvuVY3T2ry6CMpQKCweMCWSH3Q3fXKu9p0f464BdfiUc5zN2GNltDvGM0OPMZIun1Zb5m+5lFNZVc2QITvbk/sX3vvethCyVoTlvJ+1vNL5LJYsDGC00AO+tKJertWisdNSfxgqe461LBTDDiqoSSpzaymA+YXAxUtPk4gYcTvxnP1xP0KaGh5KdfvCIkEWL1/fQmi0joVHJhNT2xHUPGCNVSxKxeBNeGqb3O7Gi5UqMGcCDnYHyjllWwzpC1C8NQcazYYpPHQHLE2LDM+kdANLaBZqcgb/nhhpNcfPi862R7LEgpv7FSb/QD451llTbuu4SnOkfmHFUZ30IE59nqiJ0dbioZWbpV4OZJvX++DzWp19sSnue5H5FIYH7zp64P8KiBofaS8WUA+udSz8/C0WeHteiwZdIXTDN4R3l9YjlZCTVz6+uqSB/0JnOnrVEliI3H09E66oxBa/DcOWLVKv/C4rtW3KHacR3fx43tggC7hFfn1qE3SmY4E+oq3caH7JsKlJocKZ/vdsDTOSviCVnNoaWKCYIGVr0NfkFQ9pQJhT+3u3Q+E2/miAzl5VqnwYrnaS+9EoqoKDQtLbvp7y47c6D5Mmg2FeHWKKwQegg0EEP5K0szWyUAY6R2N6FUeaDWfpZW5Uittjp2Z+t8QbLEkBM/eQSDm4sbdhlVWWbF3g0ch60pdyPnBxitpmV17cPX+ohyO1YSgyPY3ywqHDDAToMz+Jv7gW9LcOVVqQsv9bS7r7yJrEbltpJyMu6dVvAw1AK6QyX2yGCCimPi7OfCyUnYCWoR2XYG66f67ISBMOOuS/JykDgaC+kY7+C7Rn9VoSa8/wHVz53CUV3+mGLLDPJRfAiP9m3eznFHvpueu28XkokLQuiuqKVZcSizHoJYmYCC7ZqZ0NO1ZLTxPWZXZQctS1vhIDdeB31EXzdxvhSNaR1SMYFkAMye9QL1B+U/nUAoNh+t32w+odeOJ4rfN+NtQ9O5+cFxfmo46o002r2Xh0uBlBZOCe1PeRcyjAPZew1H+Kuf4UegxYBI2A2Xf2hXtoacotphreopIkKIWDe9ciu+koyOMwKtAbTrZQyvIFtimLJTlepHKftJG3SQac8o0jrWFONm1rNQZ1lzlXUSqKg5ewaGO73sdZ4aCugpwjnLDNqHl0y8VWM46ZkF1bhaTX3y/Wcy5XlKsA+RZkMKgnSmoTECPMyMbcADO3oua1a9SItZchMydAhp5oZ/v2RMQrFhy4hbHKf+7n9aKa/ttj6Iqe1HdjoXhfxwNThVmEOB5x1T4pc1vMeh5eG+o2nKZuvfNbdePO432+0bA6s4OJPlckeD3b6YkoKbYdKYUiHdsNQkmU3vp/CNqUSXbGKGaLHOKDpO0hEGiVnVk/GdXxTub20lzFiRcPChOipTc3Sj2VqSPWjVEaRn4I1KGIP0ccjM4vmzm2+rYxiMtW6SKXdZ9unZGYz9cebtmSnTHXvLB6GPhK+r3Sqhgsppx6ooi+Mc3IWMAS8ZYCZF9fIvZ3v+TcvFdSdFXROi7S7bLb1gfGo5mOxCddI5Y/YwHDwpJBwfbuwcF9FekrDBkKN59ysMSfRgP8YAM9vnhd4MSWJG1vKGY0EnbdOG810oqePjo3zXVYw++rIKm7+uBFLFJ2d4iy0F6cuWsy0a0wdM1uQ+hQY9LYCZWWP4jOav/CKLqQ8Kckb1FoVPES2L+fReu57zO4l3b4Sm2HhaB/ngc1nNmRaTeKWK4PhXMF63VtrTnqvSmXwmZ3bC2hiodhbzNtg9nAo6iKUD4EgHwmDxHhJ6JWRCthfKc2D6U5Sz0kblGmRMtQ4jfP9Fzyr2yPXvstiPRGrxMOLRyQUuKLd9LamQwC4TGA4Jlgd+PYwmsEvGhxGxgLwWexI7cya+ctMqPfbLVTr4I1rnSew9mqDUvE3Wslf4jJ5TVH54UDpnuJ1qxpQEkUFuZZsB7Ctf/ClQmMDVfKLXSEpJC7Wb31J+MfPZm7U32XsLu5Gl1bJnoojY1/OqiQDLPJUkMxznXjDDp4imePqi3n2SiQkd9X9aCC/1QS191tbPoUOgyOBCKniytNfUd17wWRqdXCp/+yy/qYTNQPHDJ3y42aJP5e33jGIGfA4BZzhNTPeuSM/3+qO/Ka0fEkIh5K12B0tEomjJ94i3R/NuGsxb0ewx6AxEXxhgQgrv+T1x+54dH7koj6U+0DdHdLnDmUfOLHpGXmBhETm/FIVhsl23czE7lPyhNGxAeCNna+h0+ZP0SPC4ixNi+dgmmOYDVYqGO6ktuPk5G9J2h3TTQTrpnEI26gPiT5qUnmciSrTatWdulvhAU/2npM1a0Fiuo7GVQLZ7rj2IARUgGXj+AR2XGk1YWqCpEW6f1W3TZv7Poo9i64QQysWh1uaplkuna25ZeNgfApbKVLM4aRB5HH7IR9gu8BT6BIA/kyEip/uxhidE0rUvoTq9lxz7OBnWCDNCFxNVMxMCmdDSbYyTvOF2MzdYxyp9e2S//os9Jbe39roU+rfXwaaMtYa1pVl7t045N7BHW15tYpaOmAuJmg3Na+Pcp9ZOPAesORUeggG/jLV9B8uqx+KqBEuw06vmmedoV8WLnRMwv0hSIZByz4moUit1lsc32bApIN20PhoyEuBwJgR4Q1auN3j2Rdp4dIGwtlBd3munXjfcpO5GpeiO4B4L5JRKVxYtz0PM4qTo19C365aXxzJWWEOkPKMCJ2wLUNOdq5aTYipyrDOyX2w8F37dMPByeegVmlKCadKwExX1zgBX16OGlphFMdEWaaSqHrJQYN6rmkP43+xVim6I8vIGq3qlajSg+7n3Q96n0Y8iH97Kdnqs8YhJQBoXREnqW6bSdEEGirpQ1p8wdiSrGW6pgOhETckRND1H5Pwj35a6P53r7+YOLp72UB9STGnQ9jPISrRYxitVQaSNOYAqQG249TEgkZn9hnTBEybQxdZZjnyUS8G5L6N/BDSaFYmCSKvEx+FXPYXeEqJ7c65qR/YMygN9jfgPMz+wSbFEyJMW7fha+W4njNg3BaKKWkaQ1tmwIBD4xCmoPbzq8GZfyWkFjyd07cvHu/B1Qf9HaEw1F65LFDqKUHZqfhcEnRsj5+gZj+Ji9o7qH2jSacjuQIdcu1cpTkH4ERzmpLg8iWwOutT9FjL2IbeSCmSGGVBFmOxP6DaudI8knZdACG20lT9YwFWdDDr0qxVdxGZa1mPwuE2IA036MY68LFMpYelFaSNEgfobcaxHCbqkwJjqmrk7cS6Rf5m6nCha2+7wcbxAl7JygXpHJeofBBp/00kt4BENE4TwjK3cxy/8SxOqieC0ifHFhzLB5BdaC1uKCJpGA94ba+e3miOsOav2JcQYndcmulbjcLdd7sP3l14Lco867il2MoR+Z4VZQjA4ldlC7IBZuLxZZB+7zjuW3FbPlL5/zgmqd5zsEiuS8r+1cYA/jwnM1Xcrh+O6aHLzVzBuSDaSLEopYXVEDk4HKguj0Sxh7mqv/mymM69GKYNowEVRbS0ubaxrUG888xVKm8AogacQVOWHBYZEIG73XTAamdUJQEN7srQDg/H0ObnvY9X4gWoVpIbZdyA4Agg4ChGS9+hXdibR7ZJgiC30oZtcBw2Q6D/Tck0N3+lK/WTdbuQkrs0bHjE8zCdMdi7oW0zp4npqXXjiWhNT6AHNMtNPXSGnVusTUwELZ8UUaOmU6ziHc3LH5lFQKiNKAKAKE+UaDe2pY2S7+1UO+zqIbLjjRVpBC33XClaqiOIQ8h+Vj/JBY5XV/FJtwiLDvxYTj0X0gSnr+QUbIqN+LzVaSQHVsC5+qieswzHjy0IwcDF1CkMvxqrPzunyU6FjgFxA0hg0WtHycyAZhkG+dtD+KG1zSMVAmT5QnWPpnCNrZ1X2qLS0XHrRlqGCH1hxS4/e4h+HZXdIp7FmjDdNPFmeNprWLWgv2RcvxACXBreSQD/VeLnWlMBeHJLlOb4Dm5nxsunPezyVHuhRF0iq1zdAjblkKdKueDmQ3ZH9fePVwSAWdKSG2mzxM4fKvZtTKwRR+c2OcmjOxAMHPoMS652rhmDq9Ynm8kdTXR3/ERfq57RlBIFxI+QgHYYuiQyUegGpBuBg5qWZihwo1h8A/Cp3+c+Z5bSxmSkn6rNsRru5ZSmwZAqNfJCMKt6n0tOgcJdtKesMJxuIXK4dsbKWRyL5ddm7DMcCoa0QgNYWjeP4X1QkTTJLSB7LrwpR1988TBqJdqlDY997B0WMMWcwPSKqJQ3GFqXTdDU4F7a4Gf4tGlFHhppUGWIoGk0YGRdjqp+HkFp3DqstGDLxG9Bo0eJ0yUk6wG1buXW7zhpAQXSc4VFf77IVnT3zxwztvoQkAoQiCn+dcVT4GxBqsIjg18bc4Dtphmrg/w34A/FG9UAXSG8eOLF6ZofavhH3ouBKNhksA1odP3RXrgRl/tvlExSNuppfOXAfPnbY8iNKt7Tvf/u8lOZoGYcYfUXWF0WL0ijJ3FPBszs8KaiWGS1Vbv5hG8iglHRpVjg38i1W9x8UuNG/DdhcKYRGtx8IETqc/znp6H95lrOKBgICyMTpnbHBZxAWNT3HHrTJLaTt+AOqAo0xAzoNkUEllSh6I6BO2333kdlRNS+o8LGSoE0u6HFEqTtDcE86LsE7NHT5pFWwXfElShzvX+U+BIILchcGV5b0HHXi9Ahk7Iaq9VWU4wr7uTnIlF9FOij6XusszCiYWnCUmYh5QQS7NGMrMtKR24Uz0Sx5Sdmu1uyPNN2k9SY539AjKBmD4F7crqGbVWuL+NVhrW1DgiL99P7VUcsHwNbqMGjxbWVzz5i3O0H04efOhjz2OIHwDOB7iSa054qbwQ78ktRGWC4MVGUAs2rKG+VhXMUhL5m+CxLTP3QAoUYQPZ47kptXE0s610E9meMVaHm2OGrmPnZP0zSSP2PB1vPhpA2eub7ipxD/sVtb4TWa9oUfiWsVJjVyXWuyDlNmeJAMW9YpK8Y8hvdWkGeMKclv95sah4hHI+lfKy78GaB0HLBtSlokMlqVkESAFL1u5W/p0wsupaJsU+M8adj/e8B+5hYiGnO7qunZukuyd2cA0k4t41eu5bc4uN0E3AahKrc6mkI+5fy6bGsdy4OC4Ga5FB3fsb92kl4xc5EBfeT2kYFT5C/KqfWEjrh801ErRMpINiHpoiuoCLMbM9/p6RzDl7o+nllxAxiE1Hfgq9TVG+c6Rb2BScscQylvXx33kBq/xsHQ+z8sIqKnvykoNiWXh6g8qldPxZxlgt63bGkGJoSwOQWApmAtwYVc+nD+QYtVNvX6kuNgiXwVV99DB08aylSySECZDCDk1jq5ZAS6wHnX/WziOWTjF9oUgC6O+O0Z6dHmt2gRKbHbpKanOvZ7h5sp7wC7sN4A47EPEoHydEhzceYUemIF5hsxTU2c4IlMJ7GDeBqCGx1ee5r5VlTx0mZmZqNC1hxCeUQR3fVqnv4M88y2y3LGZI/Y7pNv0+kuBZaYUhp6J3FRo9kNqk6sTT95EAtoZmeK8yzVY6YATbAys2TIU5LP1c0G30hdUIvDFCNW/xt42fEFiGXPsl8qzrH1iO5j+SzaeDeuKFALW15UMJdSqqrxtraxpuWuS3/fsHCvX6peoOSooXCf9PWg8izmI+Rd0vxJlAumWogFBSnbTsEkSFuJ5zl8QwJjyPFtEHKjUYuJ7AgTgbsTsD+pkaEwrA3isyHXT2YlrIB8gD/0M2G81aGqVfakop+SuNhVKxeN0ove5N0L0DM11+oKnXZU0B2IIgO5m4ESXVJ82hetn4pes75hBq8oz7+E+cHAP+TcpKDJ2yuH9ZFZm1FGwHeAmlvg6lFxV+bmN60VbTGaouI09QLeDv2Qw3GemHUS6DNW609mBlAy5giOjrCh5jxODCE50OHigzuql3FToMu6367tWWFMF1dnA0nV0lXB4st4NTVxIEqLtgsn5ZksToNNeROKWboV2OXCGw99mHeZu5lxmx1mH2QRMqv0vdRizgJYYIiE30VlF5EPlyZ1D+IHC91o1pUACtsxlj3YtFvpX5yKVjZHa80gINeJRFdpzj+a/B11CskNENqWT6BiSCRdLulvyph6lO/ArmrHAPbqkZHSmxWzXTBtjMknsBYvZ/DhvZ89MnHtWEtJaP/wOUCJ9OWNvRBLUt0yyGDTetI2Ki5aWwhBsQaSTyZo8+rVLSXLVWCi/uSbxRzxgUoDOeGWaGKwsCBkYDsnzWMchT90eycOGNk5y94ZKj02IOe0nzimq6rOIXavGBEJQpPMv9yNuf0G4k4e1Miuc4s91BbebpFjHSeSJEHeQUJ2rbrDak7UqL9re5otDFKQQwGxFaiSNTD8R2kiky/z1LE0gdD3dZp+oR47oOE2DMb81vH4uirxTIufopoEGZFJfQldCLtzINbHdkjayxw8p7567qD7fCYe570br3p24nXH1rGM4Lj9cVPK8JWxsDf4LHC0nYrzb1EDaK7kPLomR+G0jJTvSIKtPEUKG13j8k8u8MgAJ4rnyrYqm11ZjVjrsZY7fNiAMZUFRffrGeWiTmeCYSlWvZetN3De5LRGyD7Xyg4zrWXNfo0N45V5mr6Y+96o0MPFK1pRH9crQSgO7Q2B8U91qhHxj6Drw0nppezEjtusK57zn+5IsGALxuOgrnjJvBA7Wxdct5ggZG6PeaZtgLSVD5CBeGcImnFKjHE9wJIgRJdmOh3tdmkjNIFP2e/1PEIGqR8MTkIpWac/dP0xyleXMEIxF4CUFF+HkFYsvMmsgLdlmQkJwJtTmpWLWZ4FnThRCO5ljrdpELGK+SExD/SC+s+fWw7HNtiShuWVCC/YPYcvj8b1jDxuCghW9/HVOTalwrnRPVeYR1e3pmBiN8dd/OsmhY17ue67mASPHnv/ZR8g1M6m+JFEK/Jp9zPQV7SzsZr/n+T88xR0Fqkq1TuUnrGpaVYbNUNraVwgUnLpqZsb6iuMKTubfeHD0lfq3JDeGTTapoaCnRtG794zAleqNC4n7xJKNcdpQGzVPWqcWFIU04rX230sqdxwd8eZcmY2E0yxFv2eDscn7JtEuzUgvKHnmabqqmBXjraqR4nmUxep1qKYFm30jSoHl9CiTGuIslyQ5b/r4EtsxAe2sCKEfYlkX8OsrbPLqtmtQ4Pl8KY8WreIbFAiRMjWkJVf8Ff+MAtMXOcI1wnjrQ9SQMJyhteMx8Tg4QlOLHCMYENdbC18nNwz0e4n6tU97jXYhEe1ElfQkLERFRtkFqIT2OHjM6yWP6e38+0xUBZR06CeGsyZGEM3OC94hn9nTjmscvPSVk85W3JB7Gs0fL8ZZWKlrNvof3Wg/o1tOwtXWWQNkfbSBVM0qh3raRHSRXhzvOq2XfYUCPAsLD1ZYlaQt7nYYBOl9JnfmkptbWU+yxh80fTBxUZ1crZB1zZqVu85e++5RCWWWkEI5alQZtVOZCXbuCTgOSf6tnzdurZ7EBNv5eWlLMgBbV50BG9YWFm8vfDha7F6GKXt+oWoZoN4MEUemkljSbjnXcRFditVvF/p4MC1B4/bT3MhyIZjPNdkYQRbFHa7T0/EkAiZj9YfQVhvFrQWnOs6raBn5g+lGpvCyhN9HEXdoS9e7DQgnN7RukYOSGtQMts0hLaETr+1vqUhoTglINB2idH90NMb6XodYDKzcz3ZqIkBlIW6UHgO9jIS8NxE7A/dhPpRbD1HDdj9TvystpIo0puETpDtT2DMZ8CMoOsb0tis1IIkc/4PcLhS74PkDrqeOiE6PF/aSGZvhO6D2yyaKTI7YGDcCBUFaa76mDRKuLkxnWr+hpgqFY/ROAxWJowk57oNNIjKD+O1iAZuatFwMNHHuj3eMczkMqTSNo5Esyk26hR/1dp3d3ULCLdyGWXSBxttxtC4jScurKTa6lfS9rAtnyy9RY2RuJ7GTlciwAJbfWl94EAil0+8RwSK4hBFIEyt5EFya1Etzm3FwXYU7anmu24YlzelNrRsOFcwjDJRmFRAWOXNtgo4NCnmZw/2iD0sZBgYxK8p9tDP/caSySBePBvKhqyaAYvgHPdmjFjEOvpA0JGF9hG4LbMmg5XkPmabtgUutxJdKEreB5mXJ2/0rua2fFtpa0z2IJbEDqjKDB7ww8hgc427IpjBNb+Or17RCzVy96yg1nHK1+t3Hlu/FeMyeRwMzlqj1WshnMT2KWIJQ1cKZ7pvntU/FWUg7Zjdi+/JyoBJg5dgfv1t9DiUygDkYq15oa7T9UUzSlKl4jRMFMG1wS5scecVlvqWu9rTrgfLiBNYeNAM1w28rKqJaGKTML1Fz7O5eJqybqfZcYqIbt0aYRuDZb3NGOQ6Bb1g9RgvtpYDrs4TF4fLKlZaLLCPxPnuEnGhdyt3QSBGRxPmJdTJXHSQ3qzvbcc3tVnU26XUCxl6yG64A0Sng1MC55KlEjh2UmVw3IcBcFbek38n3zGj8fAtcLU+DIohhnlW0bgN6J0MvpMXK/30nsnJenRb/OWPcADakdZDlg3bXaoHUnexsdEIcUjOicWjArWclxm+X5jRAt3nS6kDiVsbA2M8j8RApcqo9v1sMwfloQXIQy9lTe2dSIs0OYMftVH+Ci7vUMJ++K/x41z/UTsya7MVR+B2RVhe1OeZIE0Z1tkdwWO4yBUCxpb+7M8A3muDYyTS5AqsQWA2BwziLcLfZHmYKQ1a3oPWB5WguKaMUtLloJSahwJQ4COqBjHwNhdfHp788LXa95/52T8oMJUY+fvY+lW9E9TKsNOD2etZfOi4+Grg9eTtCCtmVUYBrbNttoduNt1N04VakqhD4QuMj/LXQ43xk3u6ndckueTv+fyIwkhEdErl28DSDew9g7/thFqQmax5r386LLdp4ryzbjdHsYzHBsQSTaoa1g5yR+6bnQMN8ePJBcbBfbpsn0V8fBNFaCHXWnLSM21CFrX0k7ZYchWq894avUwYTrcPTYUiCru9Wn9Hx13S+aSmEjopgv15IWbIWga1wrBudiSQVWvC3JgPKt74NR7K0AOoKM5r3GYbSOU/JPYYW0DdJgJlwY4tt2FptS7TA+9UUNVxZodMRyQlkUE4f5Gg2qJztcOf95z+siwCpIcwn7ZRag/DSTCHFiNPBCamOZohEdiDhwpAE+2wM9qVTuDbLt5hHyht3g/MR2rQtrrz9X7CcQdQcEU3IxnFPClyu9TLgvsplBt/B+vrIDmVVIUogPFddy/XJYUEgmVAXGsKFcTchAMHWJphsWIK4a9sH40ODHLXEYg4cKK1Ibm2iiX8lKXsvYfMZrJf22wcBwZN5RI0/NpbHuBcA2hqdrf4VlcL2bh8JaEQPOyNDH1Dmzf3ZuO8E6orIfhBJ5NlNwAcmiKy7ObxWdXbpWGHX40YL57zn3FPuaFfj0Gqm4M+gxnPOIYIJpm/EJkyQxUx5Gq9aj9PkLH30E6vuH0qALUlihUMmuRjsP/ZRSq0I2DhKcmbj3X1ZlD24t/4fiEbWztlIWeqqvgICczXVh+EdEynOaK0bvgiNao9QEOqqO4ff2eUG/OZlh8SEA+kZq5r2bsKa1I9AUQ5TM9cOoUAICvdFfOl0nguzbSII46/VeUs54X6QnxDTHfIl4ianJH/XNUA96jSxJ0JRRHOmShuWiM7umnLrtRMpFxndy2avSx8jszC/LibBkFSNfHYJzjOr1RcxS1hpR72pRoQoMQMCravR2jjiUzvOKMclD8wUR2qIaKClHC6Sf1h6XV9xFo8XH+GsMXRkE6Oqv+ztNKyxQFE48enEcVsya/W3O2JeFY4I6x753l29MzP20T4c6FByeNBQZh3bnFPxoutgzZ9gOU7XaFgpm3PoaByWrQ/MhgyiBZIhfujzWy3p10ZgTvPsmaVuLZo/w3xB1yx+FIfNtyEwpiWPQY6lwvJkg5mV74lN8XHKXbOfsOzFY1MqwYdEv8C6NnmS7hRgm7KJebEFs2yDL6H9Xv3XNTluSR2fVVPgi/FrCnkQgoQDYwkT/ya23XwOL8TyL+ZgBXFUVN3jrKcn8Xu2BCYRVD+WxL6BVk0Z9K2V9+pDQVk0HUqOj4T39kybanJIeAmbOwM/rcyEZ1Kovub+EvFiJpr+OSJUgsjzeOFzL+XEeG0Nim5xu1kQEPOZYsQby5lmqbTB2/1qA9k+C0/lRb72L1sV1hs6sgIjQdrXMrDYRiASfiMwVZH73u3b2VQoi7pCbXHPa0m7YybOE+mzvCwR/7MgWdY6H1O58j1YJcapBJk+6TnV77XYfTPr42jf2m1qjZhBwlOfVnpSs3O9Gd4eJtLsSxVWzAiT+c6bjD8E6h5MBabpLPYI3na+F8vxGefLZ0pmbubofALyal3FIRD1zgoqcnL3hgQTSvczDffAECqnPN3a+hMb1BcjLlQGSbK2r6kAfpt2T2zICICh6D9Rm+waTIYGuSG4K4tHKqBJlYga16bD9mjovJ4vvj9ogbyTHXSMb/VU8484Rds/ZffhfoCJREKmDG4ihmBxB5t8FumsGGVXmmrFNVvUexWwoonVk+XE6q14v164ztOOoeGNRMTzmGdkj0lJ7DJgCDAxS/E6JG6VV/tlSXKUsmIwe3kg1NmUhqy8fdMvbWLgZypCEG9OgOm0rdBEKmDeHZeZSeJxYZrPm1Vmcb9vMw1uJMtw2WGvZCz/sxuNmZdcR1bik09Gc+cE9BGZTe5dhAu46+aQiLz8229GW+atgKKWjhZMbvai03u5B7bB9rI9eB0xJZ5WMsfB64d8vTkwa7rhUosjwwvgzGRtbxeSST2SvVRr40dK2YOVHKrQ1bQmotBuo7GTcWmMWUGDmnAj4wOiYS4B1p4g5ursFJxC8+oSpIt1lJV4PDneAr2V01gGCjoJEKiWnqvxMscYyWG+EXB7W3il48pKIVRoj8cPByYatjJsfHuMVUbjn+ef3iugTG+EMJVhS3hK2xRP6tynba0GIw/7OScl7QuMTvw4Bf6tesQzPktYIUk6RTYquKJfMGcpjwPqW2NdNY6BpmA4UxJVjNcSdFKsBmeVOhKzE5ROHxiPTy1IceywGSdOjTlktqAhvVcB9FLSlXWbWV8Z0WVQQG9n7O9YEfbwEhShDj9WEm3hq2dl9UGmNyKIIxacD7ogAV3RgatMBchhTH7pWsRVkeglcJucb5O4FTPAAgxUrmqiFPvs6TA0S/Sehz3ZCBgTH+GofDOfll8xhHcvY21aH2dnJmKv57kQUAg7PPCk2rbVICYpS5rnJXK5fKEOCxM3moa7UfjXkc2RfoEaEFzA0Gc8S2vRFFHzQLUSKd3i3Tl7wzAupQf6yvRefgCTxFGWXf3FFUcLF0Whx17UtXZ2NdhLGdHlB34etavb5hlvM13c2IPgZ9MFA0RHgrlaF19MzZJU3uRLFZSHQNJhzfYl2rtsuEDPhzYRK5ammT12Tqh1Y7VvgofjBqXhIdI4pS4b/XIJXf8suNl9Dit7LnN3S0akcHYoRF4XeH6FmHa1Vu7txCcAJoakF7aNCK4DKIIPxGJvANRREq6yf2iq4VJBfx77iKP8i4atfoS7UBRf+aaU9atHkQDVue+wsjRt/AdPvw2aJG1q41rqVCeJX3q1fQDNH88hsYNE43sTojJqqOgGHfkWpES+f2LsD4/fPwWAC8frS8FWnPS9ZxklW0ufwFMaTgTwRhWP7ZhHoRpiD/T+2iElsjScgCHNGFe6uUMQsz1J0NKWgSYPG4h9sNvnpA8+l0fotmCUJSMnNorVzZ0e6zJv6gceN5YBBfX2pW3nSqj7bYmvFaRDpLeQ6AJ3UfDXFp4GWZ+agS+L73dal6fVornhqatRxP6432n0T+s7qpyP3YsAZaPILFJoxd03q5HraCgz9WmGOMGEpnIIOa4EUsrYlx0touxeVSOxu6bAhXakWGFQMSGjtitPm5Qk42Fy7xnXg9W/WiyO51ci490BJM795g/LeJUkDOuANvVLgM4fr2eE+TumEWHBqWnvMqM5nakuhOVoONM4n9fKUxWdvpPnRH3LiMYuIOpO4OX2ydK5C1+oBwGovr91xrJdvpeq5OWaeHidLUW8SCezHXZnGAWF2z87KcFRSvkqLAHnIyro4iEHTraW3v10h49Ug1vhkQWCyDtrbJlbMnlxiFKHif/w0OvbTAfFPI4nMJVra3lkziNgh2gVjH60/OefoVhmFuhTd+FY81M/X+x82Ghb56ve2Sioq+4J+0UywHNG62kO2rPN7ltdq5RsvJdzmVgtqo4I31X1WYz7f/NjcdYzrvBEAMmyAoOGtycvGe5/FFflfwR7J7zi5KZtoDRQJ2c5ez9waTd2w7ah3eJe0iD5pa3cNUyxAEhSWoe76acwKJd4cGEUoCswx7KpVyn6tAgTegsEJUuFNyK/D1M6CtKbG40ycgw1bnutMhZoFMSWnL09AGDMNYq226+uyHRXVXcDwBa2ROmBzhjZrK5YVo7QiGb/k4cW3d2kPUYt8vJBQxhaodj1JLG0hPWCuIlv78LXoObjf2bCzSgnZUAPtqRECR10X7M1lVkNp7Y8/5LYTuggR6GQbfnKgW9QKFbmVDTaExhEKF6kOCbfPdeBwmI6g3TaEkZmXt4oZHkxLN5gbm0RqnR2hJ6aGAPnFtB+spsUrRWJW/pD9BA0t1xw9R8Y2Q2IyZHgic3li8ARJHoGvJYiomud0HqDsr/Wg/sfaxn3OSRpVfAMXDo2VMQdn9r1ElZtX5dNGiVirXrEj2fx/UrnvAj6E/XheHsycnz5imIPgPSCYoKgwCTufKT8d+eDCfkhLh4DluqBZB7EI1DqzpoHCiqW2pMdeFsKttxMm+OkEVv+kF0twUJKNqoRlz9zaC7+5XrRSSI36jCVnW8SUR0D4oxwidvpJ5VjddQP1i60kmjbk94ZUkRTiiul6b58zr9mVoBQ8W/VgKPvD3FvfHjin7cEBFB3fDECx6HQcAoM+L+3D4AoF69vlpbji4QZae6YcTU5RnCGRKImo+QlXuJPTvdKaQdhTk3ZlASEDf0f/C8t8UGJ1BkOSxy5LXoQz54udWil449TSeCTCjyEVSk9Umj+go23klCnb+5z6I+2TeL8A2wI/LXj05MC41PhyiVJWMZ2LTTGb/M3BflcwQK7vU9TGgqR8fLLdasCBgwCiQ==</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[17]"><TokenEntry><Name>SessionKey</Name><Value>NClgjLmaWhNCp3g735cG7OXvDE3LjqP0RnCkvOqcn/gnLiILP7ncHmAVRTxGWbOK2X/fCYkCtbOU1cCr4GLe0YvTiNZEJUUCH1KRtloRJHqpQJoV1HU5+M4zY5f0UHUxT4LZLrjFdmQBL0jbr/y+II1oiedZtPBKe2SX+6WIOvRFpgyAXDFCC2twHbVc8RyB6tn1wHwcUwCJbSVxePJdxOe0sSAbq2OIcvH1PJZW4LUHWQMnKuoBl0rZcmf4wIh8lfKzgpyA1mPrhnlUkwC1N9hCxIX9wqARUrqFSciuRa45tYN7P3S+/yAJozA4AOf4Qyj8fiveD4UQxC9BONgWWg==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>7hWrvsLQTXAXiEASbiGmdGCKpep9v0wiN8WVT+48UqA=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>43PMCW7NZ0IANBVycEmxctm4lE9kFBG101zWswIGWwYqhctfI6Tpg/LXTaK/BkN+tvWO7NaHgyJ3VSbc1OCGsWsZSV6lGLZLvSfcG49pnbc=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>aKG+SmJAiaBx7PdoVwsxQMPgN0kUICDc7suEF8TLfwM=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>7hWrvsLQTXAXiEASbiGmdEadq9X4Dk7tId7wSkTPZaQ=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>uyqUsVmkmLj5+n1PNF1OiBzwCW3NuzOPvgPnAxGpUwx+GfcrdcA485UvXZRuqgMQ7hDp8OQjMLRTA6SvodfBwN5bZmBHCwXeUkRj6IFzU3M=</Value></TokenEntry><TokenEntry><Name>SppSvcVersion</Name><Value>DCWwh2cpzOPk/QClJCNbgw==</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>HD8G6Jb6UXcjgQn7CCrzlypegYyg28KFzeMs2MxWv8s=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>HD8G6Jb6UXcjgQn7CCrzl4E4f/XkkriGvQIDazBGwBg=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>vZDAKa++cr2f3L0v4/aE+g==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>vZDAKa++cr2f3L0v4/aE+g==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>f9gUDJKSEs370Z3uEEF2IBcnZ0WgnFfC7GcOZmsdFx02sYPe7wUBZHi11Z1B4e3ADPgi+8M5tRidzks7emGIIw==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>Fla5GBzrE4pDNpqa5L+MzfLUnoxdZ9EFRU6RyxHnqaTlybQnNq8V2rowSs/U5H2NMt5mVaWhiON5Y+tYQ8D2Yg==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>gUjXAAB7Dz1x41puHBn3TaOKnfUsyrK1ND4Mub3ioUE=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>gUjXAAB7Dz1x41puHBn3TaOKnfUsyrK1ND4Mub3ioUE=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>Lt7pDrfMJueg/WZrTENCf3Sq/uac2+l0jjjja2puG6LUzN5Uj7Z6yJK5XH0de144</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>Lt7pDrfMJueg/WZrTENCf3Sq/uac2+l0jjjja2puG6LUzN5Uj7Z6yJK5XH0de144</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EFD, 20:40:52:822 - <NULL>)
00010003(0x80072EFD, 20:40:52:822)


==================== Memory info =========================== 

Processor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Percentage of memory in use: 23%
Total physical RAM: 8148.51 MB
Available physical RAM: 6251.19 MB
Total Pagefile: 16340.51 MB
Available Pagefile: 14168.9 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:916.15 GB) (Free:871.83 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: F0311444)

Partition: GPT Partition Type.

==================== End Of Log ============================

cosinus · 05.12.2014, 00:23

Logs sind unauffällig. Wenn dein Postfach mit Spam überfüllt wird, muss die ursache ja auch kein infizierter Rechner von dir sein.

Wundakynd · 05.12.2014, 13:13

Mein Postfach versendet die Spam Mails & wurde auch gestern wieder von GMX wegen Verdächtiger aktivitäten gesperrt.

Wenn meine Logs unauffällig sind werde ich mal den Rechner auf meiner Arbeit überprüfen müssen.
Ich werde dir gleich die Logs von Farbar's Recovery Scan Tool hier rein posten.

Schon mal vielen Dank

Hier die Anhänge von dem Rechner auf meiner Arbeit.

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-12-2014
Ran by o2 (administrator) on PC1 on 05-12-2014 12:18:28
Running from C:\Users\o2\Downloads
Loaded Profiles: o2 & 19000688SM & UpdatusUser (Available profiles: o2 & 19000688SM & UpdatusUser)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\ProgramData\MobileBrServ\mbbService.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Telefónica I+D) C:\Program Files\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\AutoDetector\Monitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\Hostless Modem\o2 Surfstick\CheckNDISPort_df.exe
() C:\Program Files\Hostless Modem\o2 Surfstick\CancelAutoPlay_df.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
() C:\Program Files\phonostar-Player\phonostarTimer.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Dropbox, Inc.) C:\Users\o2\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Ulead AutoDetector v2] => C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe [95504 2007-08-02] (Ulead Systems, Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [CheckNDISPortF0acA7] => C:\Program Files\Hostless Modem\o2 Surfstick\CheckNDISPort_df.exe [419072 2013-05-10] ()
HKLM\...\Run: [CancelAutoPlay_df] => C:\Program Files\Hostless Modem\o2 Surfstick\CancelAutoPlay_df.exe [446720 2013-05-10] ()
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [phonostarTimer] => C:\Program Files\phonostar-Player\phonostarTimer.exe [41472 2011-12-23] ()
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [Google Update] => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-18] (Google Inc.)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [BackgroundContainer] => "C:\Windows\system32\Rundll32.exe" "C:\Users\o2\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843568 2014-06-14] (Samsung)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1563440 2014-06-14] (Samsung)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [pslixowu.exe] => "C:\Windows\system32\config\systemprofile\AppData\Roaming\Identities\pslixowu.exe"
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: E - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: J - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: K - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {07d36bc2-9e5e-11e1-8975-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {10133dca-e607-11e2-8a53-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {1d32934b-6eca-11e3-a43f-4487fcd989c5} - J:\AUTORUN_o2Surfstick.exe /EjectCDROM
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {2bc9fc1f-9b5f-11e2-8ab7-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {2be2584c-139a-11e3-8aa5-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {56429826-b327-11e3-a7d2-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {70ce7966-45ed-11e3-84bf-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {70ce7987-45ed-11e3-84bf-4487fcd989c5} - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {750885b5-6ba4-11e3-ab30-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {750885b9-6ba4-11e3-ab30-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {78cab0c8-e475-11e2-8a59-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {7fa720a2-1dfd-11e4-a7f2-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {868b21af-3725-11e4-a50b-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {86aa55ae-a04b-11e3-a46f-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {8a6eb0dd-25ab-11e3-848a-4487fcd989c5} - J:\Startme.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {8b3aeab1-f846-11e3-a4de-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {94037d43-5024-11e3-ab09-4487fcd989c5} - K:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {94037d58-5024-11e3-ab09-4487fcd989c5} - K:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {9f5dd39b-1a0e-11e4-a7e4-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {9f5dd3a0-1a0e-11e4-a7e4-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {b2ca36ad-b969-11e3-a434-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {b703062b-69e5-11e2-8a79-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {c0cffde4-2ea6-11e0-ba17-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {d12fd14f-30aa-11e3-84e5-4487fcd989c5} - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {d96fb6b6-527f-11e3-ab0b-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {e2a536a1-6625-11e3-a41d-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {eeac8168-066a-11e4-a4a5-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {f35c23d4-c9ee-11e3-a409-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {f511b064-f130-11e3-a7f0-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {ff2d262d-f5ea-11e3-a412-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {ff2d2631-f5ea-11e3-a412-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-10-06] (Google Inc.)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\Run: [MobileDocuments] => C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe -update plugin
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-18\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-18\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\o2 NRW.URL -> hxxp://o2-nrw.de/forum/index.php
Startup: C:\Users\o2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\o2\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\o2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicyUsers\S-1-5-21-3852942515-1249084279-3882427996-1000\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.vertriebspartner.de.o2.com/login.aspx?ReturnUrl=%2fDefault.aspx
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6DB701735C98CB01
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCCE0F795D2D9CC01
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
URLSearchHook: HKLM - DivX Browser Bar DE Toolbar - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
URLSearchHook: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 - DivX Browser Bar DE Toolbar - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
SearchScopes: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=19950&mntrId=e25ff9f20000000000004487fcd989c5
SearchScopes: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> {41BEAB69-6A63-4027-B2EF-738AE3ABC8D4} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3297265&CUI=UN19045602301402823&UM=2
SearchScopes: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> {8A244612-A1F7-11E0-95C0-E71F4824019B} URL = hxxp://badoo.com/startpage/?source=bsb&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 
BHO: DivX Browser Bar DE Toolbar -> {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} -> C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - DivX Browser Bar DE Toolbar - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> DivX Browser Bar DE Toolbar - {6DAD39C6-F4AC-4984-8E9B-F666269B9EB1} - C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
Toolbar: HKU\S-1-5-21-3852942515-1249084279-3882427996-1005 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=e25ff9f20000000000004487fcd989c5&tlver=1.4.31.2&instlRef=sst&affID=19950&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3852942515-1249084279-3882427996-1000: @phonostar.de/phonostar -> C:\Program Files\phonostar-Player\npphonostarDetectNP.dll ( )
FF Plugin HKU\S-1-5-21-3852942515-1249084279-3882427996-1000: @tools.google.com/Google Update;version=3 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3852942515-1249084279-3882427996-1000: @tools.google.com/Google Update;version=9 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\searchplugins\badoo.xml
FF Extension: Avira Browser Safety - C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\Extensions\abs@avira.com [2014-11-20]
FF Extension: DB Browser Bar DE  - C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1} [2014-11-12]
FF Extension: Adblock Plus - C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-01-08]

Chrome: 
=======
CHR Profile: C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 11
CHR Extension: (DivX Browser Bar DE) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\hkoahcaobjbihehldfimhblmhgalcipm [2014-07-05]
CHR Extension: (Google Wallet) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-05]
CHR Profile: C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8
CHR Extension: (No Name) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-25]
CHR Extension: (YouTube) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-25]
CHR Extension: (Google Search) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-25]
CHR Extension: (AdBlock) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-09-26]
CHR Extension: (DivX Browser Bar DE) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\hkoahcaobjbihehldfimhblmhgalcipm [2014-01-18]
CHR Extension: (Google Wallet) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-26]
CHR Extension: (Gmail) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-25]
CHR Profile: C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9
CHR Extension: (Google Docs) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-26]
CHR Extension: (Google Drive) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-26]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-04]
CHR Extension: (YouTube) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-26]
CHR Extension: (Google-Suche) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-26]
CHR Extension: (DivX Browser Bar DE) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\hkoahcaobjbihehldfimhblmhgalcipm [2014-08-26]
CHR Extension: (Google Wallet) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-26]
CHR Extension: (Google Mail) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-26]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [hkoahcaobjbihehldfimhblmhgalcipm] - C:\Users\o2\AppData\Local\CRE\hkoahcaobjbihehldfimhblmhgalcipm.crx [2014-01-12]
CHR HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Chrome\Extension: [hkoahcaobjbihehldfimhblmhgalcipm] - C:\Users\o2\AppData\Local\CRE\hkoahcaobjbihehldfimhblmhgalcipm.crx [2014-01-12]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2014-04-30] (Teruten) [File not signed]
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2013-01-28] ()
R2 MotoHelper; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [214896 2011-12-06] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 TGCM_ImportWiFiSvc; C:\Program Files\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-10-23] (Avira Operations GmbH & Co. KG)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2014-04-30] () [File not signed]
S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9728 2010-06-19] (MBB Incorporated)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [9728 2009-02-03] (ZTE Incorporated)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 MpKsl2ae72d44; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6A3D025E-F863-40C2-9624-AEC3F5D5FAEF}\MpKsl2ae72d44.sys [39464 2014-12-05] (Microsoft Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-10-23] (Avira GmbH)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S1 dipyftsf; \??\C:\Windows\system32\drivers\dipyftsf.sys [X]
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [102784 2010-07-27] (Huawei Technologies Co., Ltd.)
S1 fczmkrwh; \??\C:\Windows\system32\drivers\fczmkrwh.sys [X]
S1 jsqeztep; \??\C:\Windows\system32\drivers\jsqeztep.sys [X]
S3 ssudobex; system32\DRIVERS\ssudobex.sys [X]
S1 uskjguod; \??\C:\Windows\system32\drivers\uskjguod.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-05 12:18 - 2014-12-05 12:19 - 00027365 _____ () C:\Users\o2\Downloads\FRST.txt
2014-12-05 12:18 - 2014-12-05 12:18 - 00000000 ____D () C:\FRST
2014-12-05 12:17 - 2014-12-05 12:18 - 01110016 _____ (Farbar) C:\Users\o2\Downloads\FRST.exe
2014-12-05 12:17 - 2014-12-05 12:17 - 02117632 _____ (Farbar) C:\Users\o2\Downloads\FRST64.exe
2014-12-02 13:23 - 2014-12-02 13:23 - 00057543 _____ () C:\Users\o2\Downloads\160 Auftragsbestätigung PK.HTML
2014-11-30 14:38 - 2014-11-30 14:38 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Musik
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Bilder
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 ____D () C:\Users\TEMP
2014-11-30 14:38 - 2014-04-25 11:29 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2014-11-30 14:38 - 2012-01-20 10:55 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2014-11-30 14:38 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-30 14:38 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-19 09:11 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 09:11 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-13 14:46 - 2014-11-13 14:45 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-11-13 11:04 - 2014-11-13 11:04 - 00000000 ____D () C:\Users\o2\Documents\OneNote-Notizbücher
2014-11-12 12:40 - 2014-11-12 12:40 - 00000000 __SHD () C:\Users\o2\AppData\Local\EmieBrowserModeList
2014-11-12 11:15 - 2014-11-12 11:15 - 00153290 _____ () C:\Windows\PFRO.log
2014-11-12 09:18 - 2014-11-17 08:48 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-12 09:18 - 2014-11-17 08:47 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-12 09:17 - 2014-11-17 08:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-12 09:17 - 2014-11-12 09:17 - 00000000 ____D () C:\Users\o2\AppData\Roaming\Avira
2014-11-12 09:16 - 2014-11-17 08:47 - 00000000 ____D () C:\Program Files\Avira
2014-11-12 09:16 - 2014-11-12 09:18 - 00000000 ____D () C:\ProgramData\Avira
2014-11-12 09:16 - 2014-10-23 14:02 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-11-12 09:16 - 2014-10-23 14:02 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2014-11-12 09:16 - 2014-10-23 14:01 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-11-12 09:16 - 2014-10-23 14:01 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-11-12 09:07 - 2014-11-12 09:14 - 151804352 _____ () C:\Users\o2\Downloads\avira_free_antivirus_de_14.0.7.342.exe
2014-11-12 08:51 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:51 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:51 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:51 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:51 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:51 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:51 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:51 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:51 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:51 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:51 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:51 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:51 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:51 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:51 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:51 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:51 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:51 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:51 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:51 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:51 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:51 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:51 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:51 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:51 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:51 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:51 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:51 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:51 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:51 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:51 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:51 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:51 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:51 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:51 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:51 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:51 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:51 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:51 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:51 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:51 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:51 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:51 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:51 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:51 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:51 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:51 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 09:47 - 2014-11-11 09:48 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-11 09:04 - 2014-12-05 08:36 - 00002657 _____ () C:\Windows\setupact.log
2014-11-11 09:04 - 2014-11-11 09:04 - 00000000 _____ () C:\Windows\setuperr.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-05 12:12 - 2013-02-18 12:59 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000UA.job
2014-12-05 11:56 - 2011-10-06 09:03 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-05 11:24 - 2012-04-01 11:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-05 09:10 - 2010-12-10 12:16 - 01536699 _____ () C:\Windows\WindowsUpdate.log
2014-12-05 08:44 - 2009-07-14 05:34 - 00017536 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-05 08:44 - 2009-07-14 05:34 - 00017536 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-05 08:39 - 2013-04-02 17:02 - 00000000 ____D () C:\Users\o2\AppData\Roaming\Dropbox
2014-12-05 08:38 - 2012-01-11 16:16 - 00000000 ____D () C:\Temp
2014-12-05 08:38 - 2011-10-06 09:03 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-05 08:36 - 2011-05-23 08:26 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-05 08:36 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-04 19:12 - 2013-02-18 12:59 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000Core.job
2014-12-03 11:35 - 2013-04-09 14:52 - 00000000 ____D () C:\Users\o2\Shop Ordner
2014-11-30 14:34 - 2009-07-14 05:46 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-11-26 12:24 - 2012-04-01 11:53 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-26 12:24 - 2011-05-16 08:37 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-25 08:55 - 2012-01-23 14:23 - 00001322 __RSH () C:\Users\o2\ntuser.pol
2014-11-25 08:55 - 2010-12-10 12:19 - 00000000 ____D () C:\Users\o2
2014-11-15 08:33 - 2013-04-02 17:07 - 00001003 _____ () C:\Users\o2\Desktop\Dropbox.lnk
2014-11-15 08:33 - 2013-04-02 17:05 - 00000000 ____D () C:\Users\o2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-14 08:48 - 2010-12-10 12:22 - 01629372 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-13 13:32 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-11-12 12:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-12 11:17 - 2009-07-14 05:33 - 00462024 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 11:16 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-12 11:11 - 2010-12-23 14:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 11:08 - 2013-08-14 19:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 11:03 - 2011-05-21 18:05 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 08:39 - 2012-05-05 16:28 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-10 09:52 - 2013-06-18 12:55 - 00000000 ____D () C:\Users\o2\AppData\Roaming\Media Player Classic
2014-11-10 09:52 - 2012-11-22 16:43 - 00000000 ____D () C:\Windows\Minidump
2014-11-10 09:52 - 2010-12-10 12:13 - 00000000 ____D () C:\Windows\Panther

Files to move or delete:
====================
C:\Users\World of Warcraft - Kopie\BlizzardError.exe
C:\Users\World of Warcraft - Kopie\dbghelp.dll
C:\Users\World of Warcraft - Kopie\divxdecoder.dll
C:\Users\World of Warcraft - Kopie\MovieProxy.exe
C:\Users\World of Warcraft - Kopie\Scan-64.dll
C:\Users\World of Warcraft - Kopie\Scan.dll
C:\Users\World of Warcraft - Kopie\SystemSurvey.exe
C:\Users\World of Warcraft - Kopie\World of Warcraft Launcher.exe
C:\Users\World of Warcraft - Kopie\Wow-64.exe
C:\Users\World of Warcraft - Kopie\Wow.exe


Some content of TEMP:
====================
C:\Users\19000688SM\AppData\Local\Temp\jre-6u38-windows-i586-iftw.exe
C:\Users\19000688SM\AppData\Local\Temp\nvStInst.exe
C:\Users\o2\AppData\Local\Temp\avgnt.exe
C:\Users\o2\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaaunty.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-26 18:23

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-12-2014
Ran by o2 at 2014-12-05 12:20:07
Running from C:\Users\o2\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.0.626 - Adobe Systems, Inc.)
Apple Application Support (HKLM\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E14ADE0E-75F3-4A46-87E5-26692DD626EC}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.11 - Piriform)
DHTML Editing Component (HKLM\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DivX Browser Bar DE Toolbar for IE (HKLM\...\IECT3297265) (Version: 6.17.2.8 - DivX Browser Bar DE) <==== ATTENTION
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.3.22 - DivX, LLC)
Dropbox (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
Google Chrome (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Helium (HKLM\...\{9A781940-AC41-4D5E-8E1E-76A04B916FB9}) (Version: 1.0.0 - ClockworkMod)
HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
HUAWEI DataCard Driver 4.20.12.00 (HKLM\...\HUAWEI DataCard Driver) (Version: 4.20.12.00 - Huawei technologies Co., Ltd.)
iCloud (HKLM\...\{20C6FF70-690B-4DF7-8F5D-269DD3A7FD23}) (Version: 3.0.2.163 - Apple Inc.)
iOS_Restore-Kit_DE_v6.4.1 (per user) (HKLM\...\{3C10B24D-B8EF-481A-867C-0A3BC03DCFCA}) (Version: 6.4.1 - Apple Inc.)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
iTunes (HKLM\...\{9B486871-27EB-49A5-8832-77176E63333C}) (Version: 11.0.5.5 - Apple Inc.)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Juniper Networks Setup Client (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Juniper_Setup_Client) (Version: 2.1.2.5973 - Juniper Networks)
Juniper Networks Setup Client Activex Control (HKLM\...\Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 - Juniper Networks)
K-Lite Mega Codec Pack 9.9.0 (HKLM\...\KLiteCodecPack_is1) (Version: 9.9.0 - )
LPS 2009v 3.0 USB (HKLM\...\{BDBA9828-200B-43A0-AB4F-82DABEE64F94}_is1) (Version: LPS 2009v 3.0 USB - VVR)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Access 2003 Runtime (HKLM\...\{901C0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM\...\Mobile Broadband HL Service) (Version: 22.001.20.00.03 - Huawei Technologies Co.,Ltd)
Mobile Connection Manager (HKLM\...\o2DE) (Version:  - Mobile Connection Manager)
Mobile Partner (HKLM\...\Mobile Partner) (Version: 11.300.05.03.40 - Huawei Technologies Co.,Ltd)
MobileMe Control Panel (HKLM\...\{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}) (Version: 3.1.8.0 - Apple Inc.)
MotoHelper 2.1.32 Driver 5.4.0 (HKLM\...\MotoHelper) (Version: 2.1.32 - Motorola)
MotoHelper MergeModules (Version: 1.2.0 - Motorola) Hidden
Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{A55747C1-4651-433D-B082-478874FF7516}) (Version: 6.3.0 - Motorola Mobility LLC)
Mozilla Firefox 33.1 (x86 de) (HKLM\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MyFreeCodec) (Version:  - )
NVIDIA 3D Vision Controller-Treiber 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 310.90 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.23 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9745 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
o2 Surfstick (HKLM\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)
phonostar-Player Version 3.02.4 (HKLM\...\phonostar3RadioPlayer_is1) (Version:  - )
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Safari (HKLM\...\{FA4C2D53-205F-4245-9717-F3761154824D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.43.0 - SAMSUNG Electronics Co., Ltd.)
signPOS (HKLM\...\{D39FEB34-A3DF-497C-B051-C96284AB3DBE}) (Version: 2.1.11 - POS.AG)
Sony PC Companion 2.10.174 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.174 - Sony)
SpeedCommander 14 (HKLM\...\SpeedCommander 14) (Version: 14.20.6800 - SWE Sven Ritter)
Spotify (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 7 (HKLM\...\TeamViewer 7) (Version: 7.0.12541 - TeamViewer)
translate plus 10 (HKLM\...\translate plus 10) (Version: 10.0 - Lingenio GmbH, Heidelberg)
Ulead PhotoImpact X3 (HKLM\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 1.00.0000 - Corel)
Ulead PhotoImpact X3 (Version: 1.00.0000 - Corel) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VLC media player 2.0.1 (HKLM\...\VLC media player) (Version: 2.0.1 - VideoLAN)
Widevine Media Optimizer Chrome 6.0.0 (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\optimizer_chrome) (Version: 6.0.0.12757 - Widevine Technologies)
Windows Phone app for desktop (HKLM\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
ZTE USB Driver (HKLM\...\ZTE USB Driver) (Version: 1.0.1.27_TME - ZTE Corporation)
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\o2\AppData\Local\Google\Chrome\Application\39.0.2171.71\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

17-11-2014 07:52:02 Windows Update
19-11-2014 19:01:50 Windows Update
24-11-2014 07:54:28 Windows Update
28-11-2014 07:56:45 Windows Update
03-12-2014 08:21:13 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {037917B4-3502-45A1-AF9E-B3F4EAAC1EA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
Task: {1CEACC8D-1E7C-42F3-9267-99CD365A7F66} - System32\Tasks\MotoHelper Update => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {3BD70CCB-D5EF-4FFE-AEA9-5381E910E148} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
Task: {4E7FB8E4-3CE5-4C5B-903C-C05032A7726F} - System32\Tasks\MotoHelper Initial Update => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {575D6EE9-741F-494F-BB56-8803D68A9B79} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26] (Adobe Systems Incorporated)
Task: {5A12E96C-7EDA-4219-B4AB-8669C8DED3D8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {867DCFAA-7D63-4FFB-97A0-AF49D6681360} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\o2\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION
Task: {AF5E3256-699C-4D07-AE75-FC4FCD2F3265} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000Core => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-18] (Google Inc.)
Task: {BCEC4B81-189C-41BB-A12E-89ED0BA04530} - System32\Tasks\MotoHelper Routing => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {D4E2F107-867D-4DFB-92AF-3E9E9EA792A6} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {E6D9E0A7-E7E0-42EA-BFDC-14B39D746380} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000UA => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-18] (Google Inc.)
Task: {EE26C656-1A04-4DE6-B791-0FB593CBBA0B} - System32\Tasks\MotoHelper MUM => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000Core.job => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000UA.job => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-05-23 10:59 - 2013-09-12 07:28 - 00088864 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2011-07-29 13:28 - 2010-06-17 20:56 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2011-09-09 13:41 - 2009-08-03 02:53 - 00475136 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\sso2mdu.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-02-28 12:50 - 2013-01-28 03:49 - 00239184 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2011-12-06 22:00 - 2011-12-06 22:00 - 00214896 _____ () C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
2014-04-25 11:29 - 2012-12-07 16:26 - 00167424 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
2012-04-13 09:16 - 2007-08-02 20:07 - 00034064 _____ () C:\Program Files\Common Files\Ulead Systems\AutoDetector\DetMethod.dll
2014-03-24 18:24 - 2013-05-10 12:03 - 00419072 _____ () C:\Program Files\Hostless Modem\o2 Surfstick\CheckNDISPort_df.exe
2014-03-24 18:24 - 2013-05-10 12:03 - 00446720 _____ () C:\Program Files\Hostless Modem\o2 Surfstick\CancelAutoPlay_df.exe
2011-12-06 22:00 - 2011-12-06 22:00 - 00784240 _____ () C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
2012-01-04 19:35 - 2011-12-23 15:28 - 00041472 _____ () C:\Program Files\phonostar-Player\phonostarTimer.exe
2012-01-04 19:35 - 2011-06-15 13:07 - 02293248 _____ () C:\Program Files\phonostar-Player\QtCore4.dll
2012-01-04 19:35 - 2011-03-30 07:16 - 08173568 _____ () C:\Program Files\phonostar-Player\QtGui4.dll
2012-01-04 19:35 - 2011-03-30 06:59 - 00191488 _____ () C:\Program Files\phonostar-Player\QtSql4.dll
2012-01-04 19:35 - 2011-03-30 10:46 - 00416256 _____ () C:\Program Files\phonostar-Player\plugins\sqldrivers\qsqlite4.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 00186368 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\9529c74be90e4d89b971133723a8f287\Kies.Common.DeviceServiceLib.Interface.ni.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 14993920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\e2d1188482af4b3a4facf149f6ce2c2f\Kies.Theme.ni.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 01865728 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\c5131e750218141d787e2b918725df67\Kies.UI.ni.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\7d4e97c2d114662ac2d3c1b7d7fb39cf\Kies.MVVM.ni.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\6815ff93472d008087880a6462931188\ASF_cSharpAPI.ni.dll
2014-12-05 08:39 - 2014-12-05 08:39 - 00043008 _____ () c:\users\o2\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaaunty.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\o2\AppData\Roaming\Dropbox\bin\libcef.dll
2014-11-11 09:47 - 2014-11-11 09:48 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-11-26 12:24 - 2014-11-26 12:24 - 16841392 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: AppleSyncNotifier => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KiesHelper => C:\Program Files\Samsung\Kies\KiesHelper.exe /s
MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: Spotify => "C:\Users\o2\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\o2\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"

========================= Accounts: ==========================

19000688SM (S-1-5-21-3852942515-1249084279-3882427996-1005 - Administrator - Enabled) => C:\Users\19000688SM
Administrator (S-1-5-21-3852942515-1249084279-3882427996-500 - Administrator - Disabled)
Gast (S-1-5-21-3852942515-1249084279-3882427996-501 - Limited - Enabled)
o2 (S-1-5-21-3852942515-1249084279-3882427996-1000 - Administrator - Enabled) => C:\Users\o2
UpdatusUser (S-1-5-21-3852942515-1249084279-3882427996-1006 - Limited - Enabled) => C:\Users\TEMP

==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/03/2014 01:23:07 PM) (Source: VSS) (EventID: 12298) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (12/03/2014 01:23:07 PM) (Source: VSS) (EventID: 12310) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{92a333dc-044e-11e0-ba18-806e6f6e6963} - 00000100,0x0053c010,00E21FF8,0,001CCFD0,4096,[0]).


Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (12/03/2014 09:21:14 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3852942515-1249084279-3882427996-1006.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.


Vorgang:
   OnIdentify-Ereignis
   Generatordaten werden gesammelt

Kontext:
   Ausführungskontext: Shadow Copy Optimization Writer
   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Generatorname: Shadow Copy Optimization Writer
   Generatorinstanz-ID: {2ba3533a-f323-4838-acb1-5c99a65f7b17}

Error: (11/30/2014 02:38:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: PC1)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (11/30/2014 02:38:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: PC1)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (11/30/2014 02:38:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: PC1)
Description: Das lokal gespeicherte Profil kann nicht geladen werden. Mögliche Fehlerursachen sind nicht ausreichende Sicherheitsrechte oder ein beschädigtes lokales Profil. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (11/30/2014 02:38:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 for C:\Users\UpdatusUser\ntuser.dat

Error: (11/30/2014 02:36:49 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
 DETAIL - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (11/30/2014 02:36:49 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 for C:\Users\o2\AppData\Local\Microsoft\Windows\\UsrClass.dat

Error: (11/30/2014 02:36:48 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
 DETAIL - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.


System errors:
=============
Error: (12/03/2014 01:23:17 PM) (Source: volsnap) (EventID: 8) (User: )
Description: Das Zeitlimit für den Lösch- und Speicherschreibvorgang für Volume "C:" wurde beim Warten auf eine Schreibvorgangfreigabe überschritten.

Error: (11/25/2014 08:58:04 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (11/24/2014 08:46:19 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (11/21/2014 11:16:44 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (11/20/2014 08:03:06 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (11/19/2014 09:04:24 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (11/15/2014 08:31:04 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (11/13/2014 08:43:42 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (11/12/2014 11:18:53 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SPEEDPORT.IP",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{47290901-2AAA-4AAB-827F-CF04A-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (11/10/2014 08:03:04 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}


Microsoft Office Sessions:
=========================
Error: (11/22/2014 02:23:27 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/22/2014 02:23:12 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/22/2014 02:01:22 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/22/2014 02:01:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/22/2014 11:38:27 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 20 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/15/2014 10:33:53 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/14/2014 05:17:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/13/2014 10:18:17 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/12/2011 00:03:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 12893 seconds with 1920 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Processor: Pentium(R) Dual-Core CPU E5700 @ 3.00GHz
Percentage of memory in use: 58%
Total physical RAM: 3071.24 MB
Available physical RAM: 1283.41 MB
Total Pagefile: 6140.77 MB
Available Pagefile: 3895.82 MB
Total Virtual: 2047.88 MB
Available Virtual: 1895.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:453.66 GB) (Free:314.35 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 572EBBD4)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=453.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

So also es ist definitiv der Rechner auf meiner Arbeit.
Mein Kollege hat ein mal Malwarebytes laufen lassen & dort kam erschreckendes raus.

Ich hoffe das ganze kann bereinigt werden da ich Angst um die Kunden-Daten habe.

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Scan Date: 05.12.2014
Scan Time: 12:58:07
Logfile: MWB.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.05.04
Rootkit Database: v2014.12.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: o2

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 442276
Time Elapsed: 12 min, 22 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 1
PUP.Optional.ClientConnect, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1}\Plugins\npFirefoxPlugin.dll, , [77c1a6b9abd17eb8697dedce7e831ee2], 

Registry Keys: 16
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\CLSID\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\CLSID\{F663448B-1B58-43EA-8EF6-A410B6E82DEA}, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\Toolbar.CT3297265, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{F663448B-1B58-43EA-8EF6-A410B6E82DEA}, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\CLSID\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}\INPROCSERVER32, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Babylon.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [d95fd48beb918ea85d0eb116a0626f91], 
PUP.Optional.DivXBrowserBar.A, HKLM\SOFTWARE\DivX_Browser_Bar_DE, , [85b3a5ba74081a1c3f705ef06b986898], 
PUP.Optional.DivXBrowserBar.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DivX_Browser_Bar_DE, , [f93f1e41c4b8270fcee3232b50b3a060], 
PUP.Optional.Conduit.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, , [9c9c5e0199e31e180fb4bfe2c143c040], 
PUP.Optional.ValueApps.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\ValueApps, , [7abe86d9205c90a6efb6b5d18083d42c], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [3602b4abc1bb71c51f353c6051b33ec2], 
PUP.Optional.Softonic.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [290f71ee522a9e989de5136246bd9967], 
PUP.Optional.Conduit.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IECT3297265, , [4eea61fef08c3ff77aa321f49073ad53], 

Registry Values: 7
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, Ã?9Â*mÂ¬Ã´â??IÅ½â?ºÃ¶f&â?ºÅ¾Â±, , [af8973ecbdbfef479a39bd72e11fb64a]
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, DivX Browser Bar DE Toolbar, , [af8973ecbdbfef479a39bd72e11fb64a]
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0I1L1MtGtCtH1N1N1Q0ZtGzr, , [3602b4abc1bb71c51f353c6051b33ec2]
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|BackgroundContainer, "C:\Windows\system32\Rundll32.exe" "C:\Users\o2\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun, , [ca6e4e119ae263d3b88e45650cf8ed13]
Trojan.Agent.IDGen, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|pslixowu.exe, "C:\Windows\system32\config\systemprofile\AppData\Roaming\Identities\pslixowu.exe", , [de5ae877f28a191dda51547026de5aa6]

Registry Data: 0
(No malicious items detected)

Folders: 41
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE, , [4eea61fef08c3ff77aa321f49073ad53], 
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3297265, , [4eea61fef08c3ff77aa321f49073ad53], 
PUP.Optional.ValueApps.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\valueApps, , [75c32c333b41a096243493875ba801ff], 
PUP.Optional.ValueApps.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\valueApps\CT3297265, , [75c32c333b41a096243493875ba801ff], 
PUP.Optional.Babylon.A, C:\Users\o2\AppData\LocalLow\BabylonToolbar, , [88b0df809ce04bebe23c3fe780836799], 
PUP.Optional.Babylon.A, C:\Users\o2\AppData\LocalLow\BabylonToolbar\BabylonToolbar, , [88b0df809ce04bebe23c3fe780836799], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\AddedAppDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DefualtImages, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DetectedAppDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\EngineFirstTimeDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\images, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\Images, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarUntrustedAppsApprovalDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAddedAppDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppApprovalDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppPendingDialog, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\EmailNotifier, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Logs, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\MyStuffApps, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\DynamicDialogs, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarHiddenLogin, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarHiddenSettings, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarLogin, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarSettings, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarTranslation, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\UserDefinedItems, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE, , [46f2550a91ebbb7bc813132b8380c040], 

Files: 151
PUP.Optional.ClientConnect, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1}\Plugins\npFirefoxPlugin.dll, , [77c1a6b9abd17eb8697dedce7e831ee2], 
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll, , [af8973ecbdbfef479a39bd72e11fb64a], 
PUP.Optional.Conduit.A, C:\Program Files\DivX_Browser_Bar_DE\DivX_Browser_Bar_DEToolbarHelper.exe, , [48f07de2651731058b02ab73df2135cb], 
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\hk64tbDivX.dll, , [f34591cef68689ad686b89a6b34d1ae6], 
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\hktbDivX.dll, , [3008f9660c70d363ebe854db966ad42c], 
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\ldrtbDivX.dll, , [1820db848defb77f24afd659bb457a86], 
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\tbDivX.dll, , [8aae5609017b9b9b5a79909f1ae69868], 
Trojan.Agent.ED, C:\Users\o2\AppData\Local\Temp\272.tmp, , [d266fc639ede7cbae6e8a24458a92cd4], 
Trojan.Agent.ED, C:\Users\o2\AppData\Local\Temp\8739.tmp, , [61d7c798d7a5a393c20c03e3966b3fc1], 
Trojan.Agent.ED, C:\Users\o2\AppData\Local\Temp\9270.tmp, , [49efd58afb815bdbc905499d42bf27d9], 
Trojan.Agent.ED, C:\Users\o2\AppData\Local\Temp\98E0.tmp, , [ff393926b2ca89ad309eebfbca37e917], 
Trojan.Downloader.EMT, C:\Windows\Temp\EE0.tmp, , [c96fb2ad126af6406e3fe074ab5a4db3], 
PUP.Optional.Conduit.A, C:\Users\o2\AppData\Local\Conduit\CT3297265\DivX_Browser_Bar_DEAutoUpdateHelper.exe, , [d662b4ab49333bfb8b02849a9070639d], 
PUP.Optional.Conduit, C:\Windows\System32\Tasks\BackgroundContainer Startup Task, , [49ef93ccd7a52511951b8125956f0cf4], 
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3297265\configutaion.json, , [4eea61fef08c3ff77aa321f49073ad53], 
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3297265\SetupIcon.ico, , [4eea61fef08c3ff77aa321f49073ad53], 
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3297265\UninstallerUI.exe, , [4eea61fef08c3ff77aa321f49073ad53], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\hk64tbDivX.dll, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\hktbDivX.dll, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ldrtbDivX.dll, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\tbDivX.dll, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ThirdPartyComponents.xml, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\toolbar.cfg, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014059404370718_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014059795938248_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014060384358956_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014060791997408_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014061070152540_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014061359383956_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014062864205252_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635013222629112125_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_eula_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_Menu_uninstall-icon_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_65_329_CT3297265_images_635028854493425733_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_65_329_CT3297265_images_635057862436686982_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_Images_635013209331683703_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635013215523152454_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635013221545682805_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635013222428649555_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\RoundedCornersIE9.css, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DialogsAPI.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\excanvas.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\generalDialogStyle.css, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\PIE.htc, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\RoundedCorners.css, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\settings.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\version.txt, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\AddedAppDialog\app-added.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\AddedAppDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DefualtImages\icon.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DetectedAppDialog\app-2go.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DetectedAppDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\EngineFirstTimeDialog\EngineFirstTimeDialog.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\EngineFirstTimeDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\EngineFirstTimeDialog\right-click.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\SearchProtector.css, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\SearchProtector.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\images\ok-button.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\images\separation-line.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\images\warning.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\bubble.css, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\bubble.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\information.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\x-default-LTR.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\x-default-RTL.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-LTR.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-RTL.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\SearchProtector.css, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\SearchProtector.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\Images\info.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\Images\ok-on.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\Images\ok.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.css, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images\Icon.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images\info.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images\ok-on.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images\ok.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.css, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\app-store-icon.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\arrow.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\divider.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\emailNotifier.gif, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\facebook.png, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\radio.GIF, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\Thumbs.db, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\truste_welcome.GIF, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\weather.GIF, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarUntrustedAppsApprovalDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarUntrustedAppsApprovalDialog\ToolbarUntrustedAppsApprovalDialog.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAddedAppDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAddedAppDialog\UT-app-dialog-added.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppApprovalDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppApprovalDialog\UT-app-dialog-needs-your-approval.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppPendingDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppPendingDialog\UT-app-dialog-is-waiting.js, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=de&ctid=CT3297265.xml, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=de&ctid=CT3297265.xml, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=de&ctid=CT3297265.xml, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=de&ctid=CT3297265&UM=2.xml, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\DynamicDialogs\data.txt, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarHiddenLogin\data.txt, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarHiddenSettings\data.txt, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarLogin\data.txt, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarSettings\data.txt, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarTranslation\data.txt, , [a1977de2b8c452e47565ef4ff70c728e], 
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\GottenAppsContextMenu.xml, , [46f2550a91ebbb7bc813132b8380c040], 
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\OtherAppsContextMenu.xml, , [46f2550a91ebbb7bc813132b8380c040], 
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\SharedAppsContextMenu.xml, , [46f2550a91ebbb7bc813132b8380c040], 
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\toolbar.cfg, , [46f2550a91ebbb7bc813132b8380c040], 
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\ToolbarContextMenu.xml, , [46f2550a91ebbb7bc813132b8380c040], 
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=e25ff9f20000000000004487fcd989c5&tlver=1.4.31.2&instlRef=sst&affID=19950&q=");), ,[e157025da0dca393a3d6217814f117e9]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.bbDpng", 9);), ,[78c0431cd0acde58fcaccfcac045a060]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (Preferences

/* Do not edit this file.
 *
 * If), ,[fe3a0a5594e846f0e3c5fe9b36cf56aa]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (eferences

/* Do not edit this file.
 *
 * If you m), ,[74c41d42532977bf099f099039ccb24e]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (ences

/* Do not edit this file.
 *
 * If you make changes to this file while ), ,[f93fc996027ab87ef8b0dbbea65f8d73]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (s file.
 *
 * If you make changes to this file whil), ,[ba7ec09f83f9fb3bedbbcbce07fe41bf]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (erences

/* Do not edit this file.
 *
 * If y), ,[5cdcdf804a32d36328808316dd28728e]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (Preferences

/* Do not edit this file.
 *
 * If you make changes t), ,[8aae9fc03a4222149810bbde9273ca36]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (not edit this file.
 *
 * If you make changes to t), ,[bf79005fbfbd2115099fd7c2c342e41c]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (ferences

/* Do not edit this file.
 *
 * If you make changes to this file while the app), ,[eb4d46199ddf3afc8d1b5c3d7b8aa957]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (*
 * If you make changes to this file while the application i), ,[06323b24403c0f27f2b6fc9dc0457e82]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
 *
 * If you make changes), ,[fc3cc29dd7a5f2442d7b42572cd9f709]
PUP.Optional.Conduit.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (user_pref("CT3297265.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3297265&octid=CT3297265&ISID=ISID_ID&SearchSource=15&CUI=UN23243815091916487&Lay=1&UM=2\"}");), ,[6ccca9b65f1d092dff14069433d26c94]

Physical Sectors: 0
(No malicious items detected)


(end)

cosinus · 05.12.2014, 21:51

Für dein Büro-PC ist normalerweise die IT-Abteilung deiner Firma zuständig...

Wundakynd · 05.12.2014, 22:27

Das ist unser Shop PC wir haben keine IT Abteilung so weit sind wir auch schon gewesen ;-)

cosinus · 05.12.2014, 23:33

Dann bitte jetzt Combofix ausführen:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

05.12.2014, 00:23	#5
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Neuer PC Spam Mails Logs sind unauffällig. Wenn dein Postfach mit Spam überfüllt wird, muss die ursache ja auch kein infizierter Rechner von dir sein. __________________ Logfiles bitte immer in CODE-Tags posten

05.12.2014, 21:51	#7
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Neuer PC Spam Mails Für dein Büro-PC ist normalerweise die IT-Abteilung deiner Firma zuständig... __________________ Logfiles bitte immer in CODE-Tags posten

Neuer PC Spam Mails

Plagegeister aller Art und deren Bekämpfung: Neuer PC Spam Mails