| |
| |||||||
Log-Analyse und Auswertung: Windows 7: DCOM Prozesstart unerwartet beendetWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
26.11.2016, 12:16
| #1 |
 |  Windows 7: DCOM Prozesstart unerwartet beendet Hallo liebes Team des Trojaner-Boards. Ich hatte heute während der normalen Betrieb meines PCs plötzlich die Fehlermeldung "DCOM Prozessstart unerwartet beendet, Windows wird in 1 Minute heruntergefahren." Danach habe ich den Neustart abgrebrochen und manuel hochgefahren, weil mir das spanisch vorkam, dabei gab es keine Probleme oder Unauffälligkeiten. (Das einzige was mir auffällt ist, dass ich in letzter Zeit mehr Spam-Mail bekomme, kA ob das damit zusammenhängt, da ich die immer ungeöffnet lösche) Habe diese Meldung noch nie gesehen und auf Nachgooglen hin könnte es sich um ein Rootkit o.äh. handeln, deswegen ging ich lieber auf Nummer sicher und hab diesen Thread hier erstellt. Ich kann Windows 7 in den nächsten 2 Tagen nicht neu aufsetzen (Clan-Spiele stehen an), sonst hätte ich das wohl in Betracht gezogen, da ich ein ziemlicher Laie bin, was über html hinausgeht. Bisher habe ich mir HijackThis v2.0.4 heruntergeladen und einen Scan durchgeführt. Beim Scan kam die Fehlermeldung "For some reason, your system denied write access to the hosts file..". Ich habe OK gedrückt und hab das Logfile gespeichert, falls es gewünscht ist (steht ja im Thread, dass ihr das nicht braucht) FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016
durchgeführt von Martin (Administrator) auf MYRMIX (26-11-2016 11:55:25)
Gestartet von C:\Users\Martin\Downloads
Geladene Profile: Martin (Verfügbare Profile: Martin)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 10 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Chip Digital GmbH) C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(The Privoxy team - www.privoxy.org) C:\Program Files (x86)\Privoxy\privoxy.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Drakonia Configurator\hid.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1354712 2016-08-30] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-09-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [GamingMouse] => C:\Program Files (x86)\Drakonia Configurator\hid.exe [248832 2013-10-29] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Run: [World of Warships] => K:\Games\WOWS_PublicTest\WargamingGameUpdater.exe [3134216 2016-11-07] (Wargaming.net)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Policies\Explorer: []
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\MountPoints2: {9dc55695-621f-11e2-8721-5404a66b46f9} - I:\setup_the_witcher_2_ee_3.0.1.17.exe
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\MountPoints2: {dd0371c7-0fa0-11e1-9384-806e6f6e6963} - D:\.\Bin\ASSETUP.exe
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\MountPoints2: {fdd5ecae-0fb0-11e1-a034-5404a66b46f9} - J:\AUTORUN.EXE
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Privoxy.lnk [2012-04-03]
ShortcutTarget: Privoxy.lnk -> C:\Program Files (x86)\Privoxy\privoxy.exe (The Privoxy team - www.privoxy.org)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter - Verknüpfung.lnk [2012-04-01]
ShortcutTarget: Rainmeter - Verknüpfung.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
CHR HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21
Tcpip\..\Interfaces\{AE141692-DE9B-4CC3-93A4-62B71E738879}: [DhcpNameServer] 195.34.133.21 212.186.211.21
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321848&octid=EB_ORIGINAL_CTID&ISID=MD012B8A5-8B55-4EDB-89ED-AABC7D6BB3D9&SearchSource=58&CUI=&UM=8&UP=SP60FFA5B6-C973-4FF2-A334-CD50DE2031E8&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {A0C59A24-F50F-433C-928B-8235295514F4} URL = hxxps://at.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-23] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-23] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> Kein Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - Keine Datei
FireFox:
========
FF DefaultProfile: a9urom3s.default-1384358611811
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 [2016-11-26]
FF user.js: detected! => C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\user.js [2014-05-21]
FF NewTab: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> Bing Powered Search
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> Bing Powered Search
FF Homepage: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> www.google.at
FF Keyword.URL: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> user_pref("keyword.URL", true);
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ftp", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.socks", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ssl", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ssl_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ftp", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> http", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> http_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> share_proxy_settings", true
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> socks", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ssl", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ssl_port", 8080
FF Extension: (General Crawler) - C:\Users\Martin\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com [2012-03-13] [ist nicht signiert]
FF Extension: (ADB Helper) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\adbhelper@mozilla.org [2016-11-03]
FF Extension: (Advanced Cookie Manager) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\cookiemgr@jayapal.com [2016-02-22]
FF Extension: (Valence) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\fxdevtools-adapters@mozilla.org [2016-02-23]
FF Extension: (ExHentai Easy) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid0-db0owQRjcx0mRj5LBNH2MHAwEkc@jetpack [2013-11-24] [ist nicht signiert]
FF Extension: (Search and New Tab by Yahoo) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid1-16aeif9OQIRKxA@jetpack.xpi [2016-11-18]
FF Extension: (YouTube Center) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid1-cwbvBTE216jjpg@jetpack.xpi [2016-04-28]
FF Extension: (Shumway) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\shumway@research.mozilla.org [2015-10-15] [ist nicht signiert]
FF Extension: (ProxTube - Gesperrte YouTube Videos entsperren) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2016-10-10]
FF Extension: (NoScript) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-11-22]
FF Extension: (Adblock Plus) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\searchplugins\bing powered search.xml [2016-08-18]
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\searchplugins\trovi-search.xml [2014-12-31]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @hola.org/vlc,version=1.8.649 -> C:\Users\Martin\AppData\Local\Hola\firefox\app\vlc [2015-07-15] ()
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @my.com/Games -> C:\Users\Martin\AppData\Local\MyComGames\NPMyComDetector.dll [2016-06-11] (MY.COM B.V.)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [dednnpigldgdbpgcdpfppmlcnnbjciel] - C:\Users\Martin\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.crx [2012-03-13]
CHR HKLM-x32\...\Chrome\Extension: [lpmkgpnbiojfaoklbkpfneikocaobfai] - C:\Users\Martin\AppData\Roaming\Media Finder\Extensions\mf_plugin_gc.crx <nicht gefunden>
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-08-21] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-01-02] (BitRaider, LLC)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-07-19] (BitRaider, LLC)
R2 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [120888 2016-08-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-08-30] (Microsoft Corporation)
S3 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-08-08] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-27] ()
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-31] (Disc Soft Ltd)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-04-27] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S0 mv91xx; system32\DRIVERS\mv91xx.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-26 11:52 - 2016-11-26 11:53 - 00000000 ____D C:\Users\Martin\rootkit
2016-11-26 11:51 - 2016-11-26 11:52 - 00063581 _____ C:\Users\Martin\Downloads\Addition.txt
2016-11-26 11:50 - 2016-11-26 11:55 - 00019731 _____ C:\Users\Martin\Downloads\FRST.txt
2016-11-26 11:48 - 2016-11-26 11:55 - 00000000 ____D C:\FRST
2016-11-26 11:44 - 2016-11-26 11:44 - 02412032 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2016-11-26 11:20 - 2016-11-26 11:20 - 00388608 _____ (Trend Micro Inc.) C:\Users\Martin\Downloads\HijackThis.exe
2016-11-20 19:17 - 2016-11-20 19:45 - 00000890 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2016-11-20 19:17 - 2016-11-20 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2016-11-20 19:16 - 2016-11-20 19:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2016-11-20 19:15 - 2016-11-20 19:15 - 00000000 ____D C:\Program Files (x86)\Chip Digital GmbH
2016-11-20 18:45 - 2016-11-22 14:13 - 00000000 ____D C:\Users\Martin\FALL4mods
2016-11-18 17:22 - 2016-11-18 17:22 - 00276696 _____ C:\Windows\Minidump\111816-21699-01.dmp
2016-11-18 01:57 - 2016-11-26 11:05 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\Mozilla
2016-11-18 01:33 - 2016-11-18 09:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-11-11 14:05 - 2016-11-11 14:05 - 00000781 _____ C:\Users\Public\Desktop\WOWS_PublicTest.lnk
2016-11-10 22:06 - 2016-11-11 13:38 - 03186048 _____ (Wargaming ) C:\Users\Martin\Downloads\WoWS_PublicTest.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-26 11:52 - 2011-11-15 16:52 - 00000000 ____D C:\Users\Martin
2016-11-26 11:44 - 2013-07-28 12:16 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-26 11:44 - 2011-11-15 21:17 - 00000000 ____D C:\Program Files (x86)\JDownloader
2016-11-26 11:43 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-11-26 11:40 - 2011-12-19 22:22 - 00000000 ____D C:\Users\Martin\AppData\Roaming\TS3Client
2016-11-26 11:20 - 2011-11-15 21:03 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\Temp
2016-11-26 11:12 - 2009-07-14 05:45 - 00022208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-26 11:12 - 2009-07-14 05:45 - 00022208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-26 11:09 - 2010-11-21 07:50 - 00713806 _____ C:\Windows\system32\perfh007.dat
2016-11-26 11:09 - 2010-11-21 07:50 - 00153922 _____ C:\Windows\system32\perfc007.dat
2016-11-26 11:09 - 2009-07-14 06:13 - 01648056 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-26 11:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-26 11:04 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-26 11:02 - 2016-08-05 12:03 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-11-26 02:49 - 2016-08-18 19:08 - 00000000 ____D C:\Users\Martin\AppData\Local\JDownloader v2.0
2016-11-25 19:17 - 2012-07-14 13:43 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2016-11-21 20:07 - 2015-08-11 22:48 - 00000000 ___RD C:\Users\Martin\wows
2016-11-21 16:36 - 2015-10-29 13:29 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2016-11-20 20:07 - 2012-04-25 16:00 - 00218112 ___SH C:\Users\Martin\Thumbs.db
2016-11-20 19:45 - 2015-11-11 12:42 - 00000000 ____D C:\Users\Martin\AppData\Local\Fallout4
2016-11-20 19:17 - 2012-01-07 19:18 - 00000000 ____D C:\Users\Martin\Documents\Nexus Mod Manager
2016-11-20 19:17 - 2012-01-07 19:18 - 00000000 ____D C:\Users\Martin\AppData\Local\Black_Tree_Gaming
2016-11-20 19:15 - 2016-02-12 14:34 - 00000000 ____D C:\Users\Martin\AppData\Local\Downloaded Installations
2016-11-18 17:22 - 2016-08-06 11:05 - 715835735 _____ C:\Windows\MEMORY.DMP
2016-11-18 17:22 - 2012-08-15 14:01 - 00000000 ____D C:\Windows\Minidump
2016-11-18 09:37 - 2012-04-25 21:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-11-12 18:59 - 2015-12-18 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2016-11-11 14:05 - 2012-07-28 22:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2016-11-11 14:05 - 2012-07-28 22:00 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-11-11 14:05 - 2011-11-21 16:17 - 00000000 ____D C:\Games
2016-11-08 10:42 - 2014-02-20 16:15 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-08 10:42 - 2014-02-20 16:15 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-08 10:42 - 2011-11-16 20:36 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2016-11-08 10:42 - 2011-11-15 18:31 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-08 10:42 - 2011-11-15 18:31 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-28 02:22 - 2010-11-21 04:27 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-09-15 14:05 - 2016-05-02 18:56 - 0000132 _____ () C:\Users\Martin\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-09-15 15:59 - 2015-09-15 15:59 - 0006682 _____ () C:\Users\Martin\AppData\Local\recently-used.xbel
2012-05-11 13:46 - 2012-05-11 18:13 - 0007596 _____ () C:\Users\Martin\AppData\Local\Resmon.ResmonCfg
2014-10-27 10:08 - 2014-10-27 10:08 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Martin\Drakonia Configurator.exe
C:\Users\Martin\dscaler4115.exe
C:\Users\Martin\jre-7u40-windows-x64.exe
C:\Users\Martin\Steam-reg.reg
C:\Users\Martin\SWTOR_setup.exe
Einige Dateien in TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\131160172703141616.exe
C:\Users\Martin\AppData\Local\Temp\13116017278986657690.exe
C:\Users\Martin\AppData\Local\Temp\i4jdel0.exe
C:\Users\Martin\AppData\Local\Temp\jre-8u101-windows-au.exe
C:\Users\Martin\AppData\Local\Temp\jre-8u111-windows-au.exe
C:\Users\Martin\AppData\Local\Temp\proxy_vole396814014492711021.dll
C:\Users\Martin\AppData\Local\Temp\proxy_vole6858318936037624723.dll
C:\Users\Martin\AppData\Local\Temp\proxy_vole7448061099384327288.dll
C:\Users\Martin\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Martin\AppData\Local\Temp\Uninstall.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-10-27 13:47
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016
durchgeführt von Martin (26-11-2016 11:55:40)
Gestartet von C:\Users\Martin\Downloads
Windows 7 Professional Service Pack 1 (X64) (2011-11-15 15:52:25)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1031562343-2424694273-2990312000-500 - Administrator - Disabled)
Gast (S-1-5-21-1031562343-2424694273-2990312000-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1031562343-2424694273-2990312000-1002 - Limited - Enabled)
Martin (S-1-5-21-1031562343-2424694273-2990312000-1000 - Administrator - Enabled) => C:\Users\Martin
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
7-Zip 9.38 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0938-000001000000}) (Version: 9.38.00.0 - Igor Pavlov)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
AFPL Ghostscript 8.54 (HKLM-x32\...\AFPL Ghostscript 8.54) (Version: - )
AFPL Ghostscript Fonts (HKLM-x32\...\AFPL Ghostscript Fonts) (Version: - )
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
Armored Warfare MyCom (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Armored Warfare MyCom) (Version: 1.62 - My.com B.V.)
Armored Warfare MyCom Beta (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Armored Warfare MyCom Beta) (Version: 1.59 - My.com B.V.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.0.0 - Asmedia Technology)
AutoCAD 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack - English (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 3.0.159.0 - Autodesk)
Autodesk AutoCAD 2015 - English (HKLM\...\AutoCAD 2015 - English) (Version: 20.0.51.0 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
AutoIt v3.3.8.1 (HKLM-x32\...\AutoItv3) (Version: - AutoIt Team)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Bing Powered Search (HKLM-x32\...\BingPoweredSearch) (Version: - )
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH)
Cisco Systems VPN Client 5.0.07.0440 (HKLM\...\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}) (Version: 5.0.7 - Cisco Systems, Inc.)
CPUID HWMonitor 1.22 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
Crossfire 1.9 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Crossfire 1.9) (Version: 1.90.00.00 - SWAT-Portal)
Crossfire 2.0 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Crossfire 2.0) (Version: 2.00.00.00 - SWAT-Portal)
Curse Client (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dragon Age Redesigned Oghren© (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned Oghren©) (Version: - )
Dragon Age Redesigned© Zevran (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Zevran) (Version: - )
Dragon Age Redesigned© (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned©) (Version: - )
Dragon Age Redesigned© Leliana (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Leliana) (Version: - )
Dragon Age Redesigned© Sten (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Sten) (Version: - )
Dragon Age Redesigned© Wynne (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Wynne) (Version: - )
Drakonia Configurator (HKLM-x32\...\{2EAD3327-2F92-455F-A675-E5CC4980B67A}}_is1) (Version: - )
Explorer Suite III (HKLM\...\Explorer Suite_is1) (Version: - )
FAM 1.0.0.0 (HKLM-x32\...\FAM) (Version: 1.0.0.0 - Korrd)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Free CBR Reader (HKLM-x32\...\{B9240DAE-EFA1-4A0E-824F-17B3F99194F8}) (Version: 1.0.0 - Free Picture Solutions)
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Freelancer (HKLM-x32\...\Freelancer 1.0) (Version: - )
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
gmax (HKLM-x32\...\{3FA7A919-87DA-42B1-814B-86DE8DCA17C2}) (Version: 4.4.0.125 - Discreet)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
HardCMP v1.0.0.23 (HKLM-x32\...\HardCMP_is1) (Version: 1.0.0.23 - )
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
IsoBuster 3.0 (HKLM-x32\...\IsoBuster_is1) (Version: 3.0 - Smart Projects)
Java 3D 1.5.1 (HKLM-x32\...\{32A9C5B3-D166-4C6D-A11E-A54473151000}) (Version: 1.5.1 - Sun Microsystems, Inc.)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 1.61.0.1400 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.61.0.1400 - Malwarebytes Corporation)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Minion (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{Minion}}_is1) (Version: 2.0 - ZAM Network LLC)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 50.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0 (x86 de)) (Version: 50.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.0.6152 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mumble 1.2.3 (HKLM-x32\...\{C3E9887A-23BA-4777-8080-191A5AFCAB74}) (Version: 1.2.3 - Thorvald Natvig)
My.com Game Center (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\MyComGames) (Version: 3.162 - My.com B.V.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.9 - Black Tree Gaming)
Nitro Reader 3 (HKLM\...\{9EA981E5-EE67-4662-86F1-58937D31FE07}) (Version: 3.5.6.5 - Nitro)
NVIDIA PhysX (HKLM-x32\...\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}) (Version: 9.09.0814 - NVIDIA Corporation)
OMC ModPack Client Version 1.1.11.6 (HKLM-x32\...\{E2F3187C-2B94-486F-8914-E69211487FB6}_is1) (Version: 1.1.11.6 - Odem Mortis)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
paint.net (HKLM\...\{A1D05314-DC32-4668-A97E-51060EC8BCCE}) (Version: 4.0.12 - dotPDN LLC)
Parsec (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\a53dc3b81e52c50e) (Version: 1.0.0.42 - Parsec)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games)
paw·ned‹4›2 – Die Antwort auf alle Buildfragen (HKLM-x32\...\pawned42) (Version: - JN-GAMES Software)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
Pdfedit (HKLM-x32\...\{6C11089A-E23F-4E9B-B12C-316BF1A4376B}) (Version: 4.5.0.0 - PdfEdit team)
Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.6 - )
PlanetSide 2 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\DG0-PlanetSide 2) (Version: - Sony Online Entertainment)
PlanetSide 2 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\DGC-PlanetSide 2) (Version: 1.0.3.191 - Daybreak Game Company)
PowerDVD (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: - )
Privoxy (remove only) (HKLM-x32\...\Privoxy) (Version: - )
RAD Video Tools (HKLM-x32\...\RADVideo) (Version: - )
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 2.2 r1116 - )
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6235 - Realtek Semiconductor Corp.)
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)
Skype™ 7.23 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.23.105 - Skype Technologies S.A.)
Slime Rancher (HKLM-x32\...\Slime Rancher0.2.4b) (Version: 0.2.4b - TheRaven1)
Space Engineers (HKLM\...\Steam App 244850) (Version: - Keen Software House)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.05.0001 - Electronic Arts)
sTabLauncher (HKLM-x32\...\{9E5A4758-0189-419B-A6ED-FE4CBD255F05}) (Version: 2.2.3 - Sergio Santos)
Star Citizen Launcher (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Star Citizen Launcher) (Version: 00.01.00.00 - Cloud Imperium Games)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab (HKLM-x32\...\{F89CDED6-B1F1-489F-BA44-698BF6A737C2}) (Version: 6.1.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Witcher Enhanced Edition (HKLM-x32\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.00.0000 - CD Projekt Red)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.)
VLC media player 2.0.2 (HKLM-x32\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
War Thunder Launcher 1.0.1.386 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: 0.0.0.0 - Blizzard Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WindowsAndroid version 4.0.3 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{7E07052F-A4CE-4932-B066-B9203888439F}_is1) (Version: 4.0.3 - SocketeQ, Inc.)
WinRAR 5.30 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
World of Warships (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net)
YACReader 8.5.0 (HKLM-x32\...\YACReader_is1) (Version: - )
Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version: - Yahoo Inc.)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{06d45639-4c61-4cab-be15-52f5e6e72d31}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{27e52464-33a3-42ab-a482-c84fab56362a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{4e9b62d8-f542-423b-8e8e-2007daeac423}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{7acd7f3b-8bb8-430f-8499-dd8077c7af97}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{7d430c4d-1b80-464c-8f5d-2d99d4ff9c85}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{8059b7ca-030b-489d-b211-5b961893bedf}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{b8be70ea-432e-4a55-ba5c-a83cd1e376b6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{b9540fcf-2d9b-4e81-8557-2c9592685a9a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{e26b586f-8643-46af-a2fc-bc81c5389766}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\en-US\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{e85372c0-2724-41f4-a715-0806ee361bb0}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {305492CB-4722-4BA3-BF71-A11429E75A10} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)
Task: {34E68465-F12F-4565-AE91-3E1D2412865B} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-08-30] (Microsoft Corporation)
Task: {35419A1B-98CE-4D48-91FD-1FBF82A10B24} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-09-16] (Advanced Micro Devices, Inc.)
Task: {7C2E9BA2-0CBF-4889-8C83-7DFA5A4056E8} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-08-30] (Microsoft Corporation)
Task: {AAE2BC6B-1119-4222-B6C7-017DDD173F9B} - System32\Tasks\{652BC46E-1D96-4931-B893-AE3A21457C8E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.158/de/eula
Task: {B3F91BB8-7CC1-4BE6-B368-4204269BAFB6} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-09-22] (Oracle Corporation)
Task: {EF75F260-60A6-4F74-882C-2A4CF98BD56F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-11-24 20:35 - 2005-03-12 01:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2013-03-22 17:18 - 2015-08-08 17:04 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2016-09-13 01:01 - 2016-09-13 01:01 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2012-01-08 14:32 - 2012-01-08 14:32 - 00107720 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2012-01-08 14:32 - 2012-01-08 14:32 - 00809672 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2012-01-08 14:31 - 2012-01-08 14:31 - 00034304 _____ () C:\Program Files\Rainmeter\Plugins\QuotePlugin.dll
2012-01-08 14:31 - 2012-01-08 14:31 - 00028160 _____ () C:\Program Files\Rainmeter\Plugins\SpeedFanPlugin.dll
2012-01-08 14:31 - 2012-01-08 14:31 - 00023552 _____ () C:\Program Files\Rainmeter\Plugins\PerfMon.dll
2012-01-08 14:32 - 2012-01-08 14:32 - 00167424 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2012-01-08 14:31 - 2012-01-08 14:31 - 00025600 _____ () C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
2015-11-22 18:53 - 2013-10-29 13:43 - 00248832 _____ () C:\Program Files (x86)\Drakonia Configurator\hid.exe
2015-11-22 18:53 - 2012-12-11 11:14 - 00240640 _____ () C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
2011-03-04 12:49 - 2011-03-04 12:49 - 00202752 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2011-12-27 08:40 - 2011-12-27 08:40 - 00086528 _____ () C:\Program Files (x86)\Privoxy\mgwz.dll
2015-11-22 18:53 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Drakonia Configurator\HidDevice.dll
2015-11-22 18:53 - 2011-11-22 14:18 - 00249856 _____ () C:\Program Files (x86)\Drakonia Configurator\language.dll
2016-10-16 11:54 - 2016-10-16 11:54 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f91bd970f20123a46b575cf6e92bc441\IsdiInterop.ni.dll
2011-11-15 17:06 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\sony.com -> sony.com
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 195.34.133.21 - 212.186.211.21
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^vpngui.exe.lnk => C:\Windows\pss\vpngui.exe.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: GamingMouse => C:\Program Files (x86)\Drakonia Configurator\hid.exe
MSCONFIG\startupreg: Remote Control Editor => "C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe"
MSCONFIG\startupreg: RemoteControl => "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
MSCONFIG\startupreg: RGSC => K:\Games\GTA4\Rockstar Games Social Club\RGSCLauncher.exe /silent
MSCONFIG\startupreg: Smart File Advisor => "C:\Program Files (x86)\Smart File Advisor\sfa.exe" /checkassoc
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SweetIM => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{DA14B3E4-1977-4874-9BC8-8D78BDEFA0FD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{D45D251F-9F78-419B-B3FB-CC129056CC7C}C:\games\call of duty black ops\blackops.exe] => (Block) C:\games\call of duty black ops\blackops.exe
FirewallRules: [UDP Query User{115987AB-3EE6-42AB-81E0-B6C843F4B95B}C:\games\call of duty black ops\blackops.exe] => (Block) C:\games\call of duty black ops\blackops.exe
FirewallRules: [{D023DD3D-B9E3-4FD4-A706-20EA6612D3D3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{10F598B7-6248-4641-A32C-7B8FAAB3B384}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [TCP Query User{15CF0E2B-A339-4B42-99D5-37CA542D4ABD}K:\games\gw2\gw2.exe] => (Allow) K:\games\gw2\gw2.exe
FirewallRules: [UDP Query User{32719093-8BD2-44A4-856C-49B1EA2D33BE}K:\games\gw2\gw2.exe] => (Allow) K:\games\gw2\gw2.exe
FirewallRules: [{254B1476-B09C-4F89-A9F6-82A0F56FD0B5}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{D5872796-7876-49F7-A2D8-8FF6D5A53523}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{CA94F41A-DD1B-4A72-86DE-1032FE2B366D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6FD7189D-1EBA-47A4-A5EB-BF06EC520BBC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DBFEB9BB-2B08-494C-8C03-EE196D5B1F96}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B0ECFFA5-FCEA-4F5E-BDB7-F52E27F0C431}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2D37DAE8-DD97-4929-8CD2-F5A8E96A2A74}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{14E6B066-CB4B-4F42-8C65-A30BD8CB40EA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B5E570ED-F1A3-4F9D-B837-FF53434C629B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{32EF9C71-C0A9-4FC5-9335-654F2485208E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{95F75607-BD3A-4130-849D-35460CDFFF67}] => (Allow) LPort=80
FirewallRules: [{D5CA12CD-BD78-4A0D-8C42-96AC5B89A8DB}] => (Allow) LPort=443
FirewallRules: [{6971AD85-B1AE-4DFB-B505-CA0FBA19DF34}] => (Allow) LPort=20010
FirewallRules: [{A0FD53BC-5301-453D-9458-D8690DA6BB3A}] => (Allow) LPort=3478
FirewallRules: [{C9B4DDF2-352C-4876-9231-4759D64BD32A}] => (Allow) LPort=7850
FirewallRules: [{6BE2B612-FEC8-44EA-8511-E6821D6D8B95}] => (Allow) LPort=7852
FirewallRules: [{126E1A5D-D8E5-4B2E-A48C-35CF5EE98F8C}] => (Allow) LPort=7853
FirewallRules: [{01208F69-21AE-4235-B5EF-F23299D59698}] => (Allow) LPort=27022
FirewallRules: [{9406B5A7-ED28-45B9-9945-DB2D0112F1B1}] => (Allow) LPort=6881
FirewallRules: [{A30E663C-AF63-402A-961B-4FAB7B8F6295}] => (Allow) LPort=33333
FirewallRules: [{F8B8FA6D-E5C6-4F82-9F61-EEF5831AB045}] => (Allow) LPort=20443
FirewallRules: [{197DC96A-400A-4B7F-BF17-096C617FDC52}] => (Allow) LPort=8090
FirewallRules: [{315A91A7-50CD-4AA0-9DA4-7B3EA5AF4E41}] => (Allow) LPort=50248
FirewallRules: [{647CF977-885E-487B-AECF-0D0BCFE394FB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{BFF7822D-29BB-435E-B0CC-E6FB6386D6B7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [{19C193B3-0E36-4FC9-B776-EF594F2E06D7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CCFA21AF-6946-4394-9393-A7914C1EAB6A}] => (Allow) LPort=2869
FirewallRules: [{69AD3371-0624-45F5-B3F4-EDF4EB7B9AEA}] => (Allow) LPort=1900
FirewallRules: [{24E4719D-875C-4164-92CD-2358293AF128}] => (Allow) C:\Program Files (x86)\OMC ModPack Client\OMC ModPack Client.exe
FirewallRules: [{65BDC62F-A6D0-4638-B54B-1A5E9635D7D4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{17401A7C-6DB7-40CD-8447-D6B647F506C6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4DD8C035-CD15-442C-BCBB-FDC26E1DE05D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{377EDF59-81A6-4C6E-9217-72E77BF00BAC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{E0998469-C626-45BA-9023-75797B0D51F7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{F4B02B17-DF19-4690-B6A3-67F46E14107D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{7FE67A19-1C7C-47AF-886D-E639BF16019C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{897D2F00-3723-4C6C-B2E3-F9E10B22A695}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{E63EFA4F-52DD-4E50-98F4-C64486DE5FFA}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{C5BA1463-92BA-436F-AC64-9C92FFF45D03}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{2630B555-48AF-4038-B00E-B7D7FE02BF8E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{32C8E90C-6216-433E-9875-8ACACA120F19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [{08AD94ED-4C34-474D-A3E2-63105AB508F1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8BA530C5-C118-43C2-BA5F-846FEBCC7E1D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E05AE212-44BA-4CA4-BCB3-06BDF2683ADA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D230EB6-8F4E-46C7-A4EF-DA3C02267FE5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{05FF1BE1-D9EA-4086-BAF0-54F754F95969}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{62F7182C-FD69-434C-8A3A-2C2BF7AE516A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{5EAD725D-4F20-4D72-8883-11872479E347}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{9A3D1993-D693-465A-A1CD-CE941E320268}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{ABE41180-295F-42A5-97F5-96096DE702EF}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{692AD4BF-5BA0-414C-9421-6D95E92989C5}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{6E847FBB-0774-4493-A233-2174541C47DE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{FE1762B0-077E-4E00-BF76-23E75A326709}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1A163A24-C1B9-43BE-9A54-BD8DC369BE08}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3C4E0A4-631F-494A-BF04-4442AF1A7E45}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{189D7710-D8B9-4F62-9A90-D41D995B9F6C}C:\users\martin\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\martin\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{6711ABB2-D72E-4416-B773-CD004256953C}C:\users\martin\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\martin\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{96861C9B-1464-4C4C-B036-84D8033746A3}K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{F0C2660F-3934-4181-8948-81663C7B4FAB}K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [TCP Query User{F1E2D9C4-30A9-44DC-9BB6-E63650A9A8CB}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [UDP Query User{F7AB5B48-81C1-4362-9BB9-3785D2587A4A}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [TCP Query User{94D18C8F-86D3-4AC4-98A3-2145FE0C6DCE}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [UDP Query User{732EAB2F-453C-4DF1-9872-F7CBAD021540}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [TCP Query User{A56EEAA9-67C5-4219-87F8-9BDE6D1AF9C6}K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{705B4100-C489-4C32-8B09-0449A4B51187}K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [{BD12A005-5430-4622-9F42-99B38B26F5F8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{033717DE-391B-4088-95DF-E6BE2102BD1B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [TCP Query User{107DFFE1-EC96-4538-90EB-483687386B28}K:\games\wows_publictest\wowslauncher.exe] => (Allow) K:\games\wows_publictest\wowslauncher.exe
FirewallRules: [UDP Query User{98C38A1F-A0D5-4A4A-AFB4-85EBEA8AA13B}K:\games\wows_publictest\wowslauncher.exe] => (Allow) K:\games\wows_publictest\wowslauncher.exe
FirewallRules: [{2B51E7DB-C122-42CD-BBE0-4AE609DC6D32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{BB518C50-7E28-4A63-A098-742922983C7D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{A6035418-4970-479E-9EA4-85749B68085E}] => (Allow) K:\Games\ESTU\Launcher\GameConsultant.exe
FirewallRules: [{1F20723E-7CE5-464E-8542-72EC791C4AC8}] => (Allow) K:\Games\ESTU\Launcher\Bethesda.net_Launcher.exe
FirewallRules: [TCP Query User{D4FDF617-63A5-46BE-A60E-960B2E4F1E2E}K:\games\warship\wowslauncher.exe] => (Allow) K:\games\warship\wowslauncher.exe
FirewallRules: [UDP Query User{D7E165A1-902B-4F4B-B2A9-D3AD6A00AD50}K:\games\warship\wowslauncher.exe] => (Allow) K:\games\warship\wowslauncher.exe
FirewallRules: [{D627856E-3ACF-4865-AFEA-ACF0EFFADBC0}] => (Allow) K:\Games\WT\WarThunder\launcher.exe
FirewallRules: [{C0806AFA-854B-4D6A-B5E6-96548D732351}] => (Allow) K:\Games\WT\WarThunder\launcher.exe
FirewallRules: [{A3F76B1A-5757-4FAF-9B82-9C9E68966F07}] => (Allow) K:\Games\WT\WarThunder\aces.exe
FirewallRules: [{D7BF61B9-24DB-47C1-AD5A-A1CC0346C734}] => (Allow) K:\Games\WT\WarThunder\aces.exe
FirewallRules: [TCP Query User{2FD75038-0456-428B-8104-7BBDAB2E2D71}K:\games\wt\warthunder\win64\aces.exe] => (Allow) K:\games\wt\warthunder\win64\aces.exe
FirewallRules: [UDP Query User{A82A83EA-8EB2-4583-B15C-60CEEA771357}K:\games\wt\warthunder\win64\aces.exe] => (Allow) K:\games\wt\warthunder\win64\aces.exe
FirewallRules: [TCP Query User{F905E323-B4DF-4C40-9231-941118005F79}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{3B08B716-9064-4E1C-B210-D840F0041E08}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{E60A25E8-D512-4DEF-998C-C98D84AF8B5A}C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [UDP Query User{6C728D7F-4FB7-44B4-ACA6-00ECAEBA1BBD}C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [TCP Query User{F0570CD4-A0DD-4F17-A6D8-EF1564F8BF3D}C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe
FirewallRules: [UDP Query User{A38A26FB-4783-48AC-A954-8934A8A6B9E0}C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe
FirewallRules: [{9455FA43-B14A-4CA0-8904-3CC6F639720B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{F153E4D7-8DD4-4D5B-80E8-087C75626B6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [TCP Query User{491CFD22-984D-4134-8D92-A3F1F5B6F4A5}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{99640C1F-820D-42F7-BEE2-EE224A842DCB}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [{D25E39C0-0429-4FA7-B241-549A93469372}] => (Allow) C:\Games\WOWS_PublicTest\WoWsLauncher.exe
FirewallRules: [{04239541-694A-4378-8948-1C13D266D278}] => (Allow) C:\Games\WOWS_PublicTest\WoWsLauncher.exe
FirewallRules: [{68A16BAF-1A67-478C-AA18-8C42C3613E2F}] => (Allow) C:\Games\WOWS_PublicTest\worldofwarships.exe
FirewallRules: [{C934DB75-C881-48FF-919A-C1E86685AFCF}] => (Allow) C:\Games\WOWS_PublicTest\worldofwarships.exe
==================== Wiederherstellungspunkte =========================
05-11-2016 14:49:22 Windows Update
08-11-2016 14:53:28 Windows Update
16-11-2016 10:18:26 Windows Update
18-11-2016 15:28:11 DirectX wurde installiert
24-11-2016 13:22:52 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/26/2016 11:06:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/26/2016 11:01:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.23543, Zeitstempel: 0x57d2fde1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000019c59
ID des fehlerhaften Prozesses: 0x314
Startzeit der fehlerhaften Anwendung: 0x01d247c350ff0acd
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll
Berichtskennung: 5687ee9c-b3bf-11e6-9641-5404a66b46f9
Error: (11/26/2016 10:00:40 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/25/2016 10:12:28 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/24/2016 01:12:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/23/2016 10:20:14 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/22/2016 10:29:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/21/2016 04:36:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WorldOfWarships.exe, Version: 0.5.14.1, Zeitstempel: 0x5829a280
Name des fehlerhaften Moduls: MSVCR110.dll, Version: 11.0.51106.1, Zeitstempel: 0x5098858e
Ausnahmecode: 0x40000015
Fehleroffset: 0x000a327c
ID des fehlerhaften Prozesses: 0x10f0
Startzeit der fehlerhaften Anwendung: 0x01d24405427262ce
Pfad der fehlerhaften Anwendung: K:\Games\Warship\WorldOfWarships.exe
Pfad des fehlerhaften Moduls: K:\Games\Warship\MSVCR110.dll
Berichtskennung: 3a78a344-b000-11e6-907f-5404a66b46f9
Error: (11/21/2016 10:04:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/20/2016 09:40:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Systemfehler:
=============
Error: (11/26/2016 11:04:42 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mv91xx
Error: (11/26/2016 11:04:34 AM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/26/2016 11:04:34 AM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/26/2016 11:02:50 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von Microsoft-Antischadsoftware ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.233.501.0
Aktualisierungsquelle: Microsoft Update Server
Aktualisierungsphase: Herunterladen
Quellpfad: hxxp://www.microsoft.com
Signaturtyp: AntiVirus
Aktualisierungstyp: Vollständig
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
Vorherige Modulversion: 1.1.13303.0
Fehlercode: 0x8024001e
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".
Error: (11/26/2016 11:02:50 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von Microsoft-Antischadsoftware ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.233.501.0
Aktualisierungsquelle: Microsoft Update Server
Aktualisierungsphase: Herunterladen
Quellpfad: hxxp://www.microsoft.com
Signaturtyp: AntiVirus
Aktualisierungstyp: Vollständig
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
Vorherige Modulversion: 1.1.13303.0
Fehlercode: 0x8024001e
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".
Error: (11/26/2016 11:01:47 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Plug & Play" Korrekturmaßnahmen (Neustart des Computers) durchzuführen, ist fehlgeschlagen. Fehler:
Das Herunterfahren des Systems wurde bereits geplant.
Error: (11/26/2016 11:01:47 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Stromversorgung" Korrekturmaßnahmen (Neustart des Computers) durchzuführen, ist fehlgeschlagen. Fehler:
Das Herunterfahren des Systems wurde bereits geplant.
Error: (11/26/2016 11:01:47 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Stromversorgung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Computers.
Error: (11/26/2016 11:01:47 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Plug & Play" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Computers.
Error: (11/26/2016 11:01:47 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "DCOM-Server-Prozessstart" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Computers.
CodeIntegrity:
===================================
Date: 2014-11-16 20:00:39.437
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-16 20:00:39.367
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-15 21:57:34.851
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-15 21:57:34.774
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.833
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Martin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.785
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Martin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.719
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.672
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-03-23 19:12:17.629
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-03-23 19:12:17.566
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 33%
Installierter physikalischer RAM: 8168.77 MB
Verfügbarer physikalischer RAM: 5416.36 MB
Summe virtueller Speicher: 16335.71 MB
Verfügbarer virtueller Speicher: 13412.6 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:491.96 GB) (Free:114.4 GB) NTFS
Drive k: (Volume) (Fixed) (Total:439.45 GB) (Free:197.85 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0D7E7020)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=492 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=439.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
Geändert von Myrmix (26.11.2016 um 12:19 Uhr) Grund: Edit |
|
27.11.2016, 14:14
| #2 | |
| /// TB-Ausbilder   | Windows 7: DCOM Prozesstart unerwartet beendet Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! bitte beachten: Zitat:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind. Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen. Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter. Scan mit Combofix
|
|
27.11.2016, 15:14
| #3 |
| | Windows 7: DCOM Prozesstart unerwartet beendet Hallo Matthias und schonmal danke für die Hilfe.
__________________Ich habe Microsoft Security Essentials deaktiviert und ComboFix vom Desktop aus ausgeführt. Es gab keine Fehlermeldungen während das Programm gelaufen ist. Code:
ATTFilter ComboFix 16-11-13.01 - Martin 27.11.2016 14:49:58.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.43.1031.18.8169.6038 [GMT 1:00]
ausgeführt von:: c:\users\Martin\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {71A27EC9-3DA6-45FC-60A7-004F623C6189}
SP: Microsoft Security Essentials *Disabled/Updated* {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1887373585
c:\users\Martin\AppData\Roaming\Bc
c:\users\Martin\AppData\Roaming\Bc\console.log
c:\users\Martin\AppData\Roaming\Bc\game\client\prefs.cs
c:\users\Martin\AppData\Roaming\Bc\game\server\prefs.cs
c:\users\Martin\AppData\Roaming\Bc\savegames\Spank.sgf
c:\users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk
c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\searchplugins\trovi-search.xml
c:\users\Martin\SWTOR_setup.exe
c:\windows\msdownld.tmp
c:\windows\SysWow64\SET9E05.tmp
c:\windows\SysWow64\SETB72B.tmp
.
.
((((((((((((((((((((((( Dateien erstellt von 2016-10-27 bis 2016-11-27 ))))))))))))))))))))))))))))))
.
.
2016-11-27 13:58 . 2016-11-27 13:58 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-11-27 10:08 . 2016-11-27 10:08 75888 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{089F4904-D22D-45D8-B87F-392786873861}\offreg.1004.dll
2016-11-26 23:30 . 2016-11-10 07:44 11781064 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{089F4904-D22D-45D8-B87F-392786873861}\mpengine.dll
2016-11-26 10:52 . 2016-11-26 10:53 -------- d-----w- c:\users\Martin\rootkit
2016-11-26 10:48 . 2016-11-26 10:55 -------- d-----w- C:\FRST
2016-11-24 12:24 . 2016-05-11 10:48 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AAF9D2D0-ADA5-477A-9999-FBFEEBD1B0DA}\gapaengine.dll
2016-11-21 09:20 . 2016-11-10 07:44 11781064 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2016-11-20 18:16 . 2016-11-20 18:45 -------- d-----w- c:\program files\Nexus Mod Manager
2016-11-20 18:15 . 2016-11-20 18:15 -------- d-----w- c:\program files (x86)\Chip Digital GmbH
2016-11-20 17:45 . 2016-11-22 13:13 -------- d-----w- c:\users\Martin\FALL4mods
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-11-27 01:28 . 2016-08-05 11:03 65536 ----a-w- c:\windows\system32\spu_storage.bin
2016-11-08 09:42 . 2014-02-20 15:15 796352 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2016-11-08 09:42 . 2014-02-20 15:15 142528 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-10-28 01:22 . 2010-11-21 03:27 485032 ------w- c:\windows\system32\MpSigStub.exe
2016-10-23 09:23 . 2015-03-03 09:42 97856 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2016-10-19 17:48 . 2011-11-23 10:20 143495576 -c--a-w- c:\windows\system32\MRT.exe
2016-09-30 15:37 . 2016-10-14 07:12 5548264 ----a-w- c:\windows\system32\ntoskrnl.exe
2016-09-30 15:20 . 2016-10-14 07:12 4000488 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2016-09-30 15:20 . 2016-10-14 07:12 3944680 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2016-09-16 19:42 . 2016-09-16 19:42 139720 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2016-09-16 19:42 . 2016-09-16 19:42 170072 ----a-w- c:\windows\system32\atiuxp64.dll
2016-09-16 19:42 . 2016-09-16 19:42 7213248 ----a-w- c:\windows\SysWow64\atiumdag.dll
2016-09-16 19:42 . 2016-09-16 19:42 8847888 ----a-w- c:\windows\system32\atiumd64.dll
2016-09-16 19:42 . 2016-09-16 19:42 123776 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2016-09-16 19:42 . 2016-09-16 19:42 151056 ----a-w- c:\windows\system32\atiu9p64.dll
2016-09-16 19:41 . 2016-09-16 19:41 275336 ----a-w- c:\windows\system32\GameManager64.dll
2016-09-16 19:41 . 2016-09-16 19:41 240008 ----a-w- c:\windows\SysWow64\GameManager32.dll
2016-09-16 19:41 . 2016-09-16 19:41 292744 ----a-w- c:\windows\system32\dgtrayicon.exe
2016-09-16 19:41 . 2016-09-16 19:41 20360 ----a-w- c:\windows\system32\detoured.dll
2016-09-16 19:41 . 2016-09-16 19:41 20360 ----a-w- c:\windows\SysWow64\detoured.dll
2016-09-16 19:41 . 2016-09-16 19:41 286600 ----a-w- c:\windows\system32\atitmm64.dll
2016-09-16 19:41 . 2016-09-16 19:41 110472 ----a-w- c:\windows\system32\atimuixx.dll
2016-09-16 19:41 . 2016-09-16 19:41 518536 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2016-09-16 19:41 . 2016-09-16 19:41 107400 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2016-09-16 19:41 . 2016-09-16 19:41 107400 ----a-w- c:\windows\system32\atiglpxx.dll
2016-09-16 19:41 . 2016-09-16 19:41 175496 ----a-w- c:\windows\SysWow64\atigktxx.dll
2016-09-16 19:41 . 2016-09-16 19:41 201608 ----a-w- c:\windows\system32\atig6txx.dll
2016-09-16 19:41 . 2016-09-16 19:41 122760 ----a-w- c:\windows\system32\atig6pxx.dll
2016-09-16 19:41 . 2016-09-16 19:41 287112 ----a-w- c:\windows\system32\atiesrxx.exe
2016-09-16 19:41 . 2016-09-16 19:41 523144 ----a-w- c:\windows\system32\atieclxx.exe
2016-09-16 19:41 . 2016-09-16 19:41 230280 ----a-w- c:\windows\system32\atieah64.exe
2016-09-16 19:41 . 2016-09-16 19:41 208264 ----a-w- c:\windows\SysWow64\atieah32.exe
2016-09-16 19:41 . 2016-09-16 19:41 458632 ----a-w- c:\windows\system32\atidemgy.dll
2016-09-16 19:41 . 2016-09-16 19:41 10936704 ----a-w- c:\windows\system32\atidxx64.dll
2016-09-16 19:41 . 2016-09-16 19:41 78728 ----a-w- c:\windows\system32\aticalrt64.dll
2016-09-16 19:41 . 2016-09-16 19:41 68488 ----a-w- c:\windows\SysWow64\aticalrt.dll
2016-09-16 19:41 . 2016-09-16 19:41 9093504 ----a-w- c:\windows\SysWow64\atidxx32.dll
2016-09-16 19:41 . 2016-09-16 19:41 9983912 ----a-w- c:\windows\SysWow64\atiumdva.dll
2016-09-16 19:41 . 2016-09-16 19:41 15728008 ----a-w- c:\windows\system32\aticaldd64.dll
2016-09-16 19:41 . 2016-09-16 19:41 1549272 ----a-w- c:\windows\system32\aticfx64.dll
2016-09-16 19:40 . 2016-09-16 19:40 1272184 ----a-w- c:\windows\SysWow64\aticfx32.dll
2016-09-16 19:40 . 2016-09-16 19:40 10981024 ----a-w- c:\windows\system32\atiumd6a.dll
2016-09-16 19:40 . 2016-09-16 19:40 92328 ----a-w- c:\windows\SysWow64\atimpc32.dll
2016-09-16 19:40 . 2016-09-16 19:40 92328 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2016-09-16 19:40 . 2016-09-16 19:40 14318984 ----a-w- c:\windows\SysWow64\aticaldd.dll
2016-09-16 19:40 . 2016-09-16 19:40 109856 ----a-w- c:\windows\system32\atimpc64.dll
2016-09-16 19:40 . 2016-09-16 19:40 109856 ----a-w- c:\windows\system32\amdpcom64.dll
2016-09-16 19:40 . 2016-09-16 19:40 72072 ----a-w- c:\windows\system32\aticalcl64.dll
2016-09-16 19:40 . 2016-09-16 19:40 65416 ----a-w- c:\windows\SysWow64\aticalcl.dll
2016-09-16 19:40 . 2016-09-16 19:40 402312 ----a-w- c:\windows\system32\atiapfxx.exe
2016-09-16 19:40 . 2016-09-16 19:40 141280 ----a-w- c:\windows\system32\amdhcp64.dll
2016-09-16 19:40 . 2016-09-16 19:40 125288 ----a-w- c:\windows\SysWow64\amdhcp32.dll
2016-09-16 19:40 . 2016-09-16 19:40 997768 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2016-09-16 19:40 . 2016-09-16 19:40 997768 ----a-w- c:\windows\SysWow64\atiadlxx.dll
2016-09-16 19:40 . 2016-09-16 19:40 145400 ----a-w- c:\windows\system32\amdave64.dll
2016-09-16 19:40 . 2016-09-16 19:40 1333128 ----a-w- c:\windows\system32\atiadlxx.dll
2016-09-16 19:40 . 2016-09-16 19:40 129416 ----a-w- c:\windows\system32\mantleaxl64.dll
2016-09-16 19:40 . 2016-09-16 19:40 59784 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2016-09-16 19:40 . 2016-09-16 19:40 124776 ----a-w- c:\windows\SysWow64\amdave32.dll
2016-09-16 19:40 . 2016-09-16 19:40 108424 ----a-w- c:\windows\SysWow64\mantleaxl32.dll
2016-09-16 19:40 . 2016-09-16 19:40 160136 ----a-w- c:\windows\system32\mantle64.dll
2016-09-16 19:40 . 2016-09-16 19:40 135048 ----a-w- c:\windows\SysWow64\mantle32.dll
2016-09-16 19:40 . 2016-09-16 19:40 349064 ----a-w- c:\windows\system32\ATIODE.exe
2016-09-16 19:40 . 2016-09-16 19:40 67464 ----a-w- c:\windows\system32\ATIODCLI.exe
2016-09-16 19:40 . 2016-09-16 19:40 136584 ----a-w- c:\windows\system32\atisamu64.dll
2016-09-16 19:40 . 2016-09-16 19:40 117640 ----a-w- c:\windows\SysWow64\atisamu32.dll
2016-09-16 19:40 . 2016-09-16 19:40 2445192 ----a-w- c:\windows\system32\amfrt64.dll
2016-09-16 19:40 . 2016-09-16 19:40 2132872 ----a-w- c:\windows\SysWow64\amfrt32.dll
2016-09-16 19:40 . 2016-09-16 19:40 248200 ----a-w- c:\windows\system32\amdgfxinfo64.dll
2016-09-16 19:40 . 2016-09-16 19:40 9387400 ----a-w- c:\windows\system32\amdvlk64.dll
2016-09-16 19:40 . 2016-09-16 19:40 221064 ----a-w- c:\windows\SysWow64\amdgfxinfo32.dll
2016-09-16 19:40 . 2016-09-16 19:40 7571336 ----a-w- c:\windows\SysWow64\amdvlk32.dll
2016-09-16 19:40 . 2016-09-16 19:40 305544 ----a-w- c:\windows\system32\drivers\amdacpksd.sys
2016-09-16 19:40 . 2016-09-16 19:40 891272 ----a-w- c:\windows\system32\coinst_16.40.dll
2016-09-16 19:40 . 2016-09-16 19:40 8741256 ----a-w- c:\windows\system32\amdmantle64.dll
2016-09-16 19:40 . 2016-09-16 19:40 155016 ----a-w- c:\windows\system32\amduve64.dll
2016-09-16 19:39 . 2016-09-16 19:39 134536 ----a-w- c:\windows\SysWow64\amduve32.dll
2016-09-16 19:39 . 2016-09-16 19:39 7062920 ----a-w- c:\windows\SysWow64\amdmantle32.dll
2016-09-16 19:39 . 2016-09-16 19:39 66952 ----a-w- c:\windows\system32\amdmmcl6.dll
2016-09-16 19:39 . 2016-09-16 19:39 267656 ----a-w- c:\windows\system32\hsa-thunk64.dll
2016-09-16 19:39 . 2016-09-16 19:39 749960 ----a-w- c:\windows\system32\amdlvr64.dll
2016-09-16 19:39 . 2016-09-16 19:39 233352 ----a-w- c:\windows\SysWow64\hsa-thunk.dll
2016-09-16 19:39 . 2016-09-16 19:39 269192 ----a-w- c:\windows\system32\clinfo.exe
2016-09-16 19:39 . 2016-09-16 19:39 625032 ----a-w- c:\windows\SysWow64\amdlvr32.dll
2016-09-16 19:39 . 2016-09-16 19:39 54664 ----a-w- c:\windows\SysWow64\amdmmcl.dll
2016-09-16 19:39 . 2016-09-16 19:39 112520 ----a-w- c:\windows\system32\OpenCL.dll
2016-09-16 19:39 . 2016-09-16 19:39 82824 ----a-w- c:\windows\system32\amdmcl64.dll
2016-09-16 19:39 . 2016-09-16 19:39 66440 ----a-w- c:\windows\SysWow64\amdmcl32.dll
2016-09-16 19:39 . 2016-09-16 19:39 103304 ----a-w- c:\windows\SysWow64\OpenCL.dll
2016-09-16 19:39 . 2016-09-16 19:39 48824200 ----a-w- c:\windows\system32\amdocl64.dll
2016-09-16 19:39 . 2016-09-16 19:39 27489672 ----a-w- c:\windows\system32\amdocl12cl64.dll
2016-09-16 19:39 . 2016-09-16 19:39 21640584 ----a-w- c:\windows\SysWow64\amdocl12cl.dll
2016-09-16 19:38 . 2016-09-16 19:38 38268808 ----a-w- c:\windows\SysWow64\amdocl.dll
2016-09-16 19:38 . 2016-09-16 19:38 27287944 ----a-w- c:\windows\SysWow64\atioglxx.dll
2016-09-16 19:38 . 2016-09-16 19:38 33239432 ----a-w- c:\windows\system32\atio6axx.dll
2016-09-16 19:37 . 2016-09-16 19:37 26550784 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2016-09-15 15:30 . 2016-10-14 07:12 976896 ----a-w- c:\windows\system32\inetcomm.dll
2016-09-15 15:30 . 2016-10-14 07:12 84480 ----a-w- c:\windows\system32\INETRES.dll
2016-09-15 15:15 . 2016-10-14 07:12 741888 ----a-w- c:\windows\SysWow64\inetcomm.dll
2016-09-15 15:15 . 2016-10-14 07:12 84480 ----a-w- c:\windows\SysWow64\INETRES.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"World of Warships"="k:\games\WOWS_PublicTest\WargamingGameUpdater.exe" [2016-11-07 3134216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-04-29 284440]
"GamingMouse"="c:\program files (x86)\Drakonia Configurator\hid.exe" [2013-10-29 248832]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2016-09-22 587288]
.
c:\users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter - Verknüpfung.lnk - c:\program files\Rainmeter\Rainmeter.exe [2012-1-8 107720]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Privoxy.lnk - c:\program files (x86)\Privoxy\privoxy.exe [2011-12-27 359936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
"Raptr"="c:\program files (x86)\Raptr\raptrstub.exe" --startup
.
R0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 BRDriver64;BRDriver64;c:\programdata\BitRaider\BRDriver64.sys;c:\programdata\BitRaider\BRDriver64.sys [x]
R3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [x]
R3 BRSptStub;BitRaider Mini-Support Service Stub Loader;c:\programdata\BitRaider\BRSptStub.exe;c:\programdata\BitRaider\BRSptStub.exe [x]
R3 BRSptSvc;BitRaider Mini-Support Service;c:\programdata\BitRaider\BRSptSvc.exe;c:\programdata\BitRaider\BRSptSvc.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3;c:\program files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe;c:\program files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bbus.sys [x]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdfl.sys [x]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdm.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 chip1click;chip 1-click download service;c:\program files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe;c:\program files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-02 11545192]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2016-08-30 1354712]
"StartCN"="c:\program files\AMD\CNext\CNext\RadeonSettings.exe" [2016-09-16 8027016]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
mStart Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: Download with &Media Finder - c:\program files (x86)\Media Finder\hook.html
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Web-Suche - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 195.34.133.21 212.186.211.21
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\
FF - prefs.js: browser.search.selectedEngine - Bing Powered Search
FF - prefs.js: browser.startup.homepage - www.google.at
FF - prefs.js: keyword.URL - true
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-Rockstar Games Social Club - c:\program files\Rockstar Games\Social Club\uninstallRGSCRedistributable.exe
AddRemove-Slime Rancher0.2.4b - k:\games\Slime\uninstall.exe
AddRemove-Yahoo! SearchSet - c:\program files (x86)\Yahoo!\yset\{AA923BA4-7A7F-6E4B-B49F-93B543965920}\unset.exe
AddRemove-Crossfire 1.9 - k:\games\Freelancer Mod Manager\uninstall.exe
AddRemove-DG0-PlanetSide 2 - k:\games\PS2\Uninstaller.exe
AddRemove-DGC-PlanetSide 2 - k:\games\PS2\Uninstaller.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\SecuROM\License information*]
"datasecu"=hex:dc,16,05,15,2f,b1,37,8f,51,0f,02,79,88,c2,cf,fd,dd,dc,7f,19,c9,
b9,c0,b0,ef,b7,5e,8c,39,b4,aa,88,14,6e,9e,ca,78,5b,c6,6a,83,b0,96,7d,8d,4a,\
"rkeysecu"=hex:64,b6,bd,e1,3e,80,9e,c4,40,b4,90,83,87,8e,33,49
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.18"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2016-11-27 15:00:19
ComboFix-quarantined-files.txt 2016-11-27 14:00
.
Vor Suchlauf: 16 Verzeichnis(se), 123.243.560.960 Bytes frei
Nach Suchlauf: 24 Verzeichnis(se), 123.575.955.456 Bytes frei
.
- - End Of File - - F248B412E6E18E592727B2195FBAA985
|
|
28.11.2016, 16:02
| #4 |
| /// TB-Ausbilder | Windows 7: DCOM Prozesstart unerwartet beendet Servus, du kannst dein AV-Programm immer aktivieren, nur nicht wenn Tools laufen (weil es sonst nur stört).  Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
|
28.11.2016, 17:24
| #5 |
| | Windows 7: DCOM Prozesstart unerwartet beendet Habe alles so durchgeführt wie gewünscht war und bei MBAM und JRT den AV deaktiviert. MBAM hat insgesamt 16 Dateien gefunden und 8 selbstständig ausgewählt. Ich habe dennoch alle 16 entfernen (Quarantäne) lassen, da es entweder Dateien sind, die ich nicht mehr brauche oder die mir unbekannt sind. AdwCleaner: Code:
ATTFilter # AdwCleaner v6.030 - Bericht erstellt am 28/11/2016 um 16:22:58
# Aktualisiert am 19/10/2016 von Malwarebytes
# Datenbank : 2016-11-28.2 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (X64)
# Benutzername : Martin - MYRMIX
# Gestartet von : C:\Users\Martin\Desktop\AdwCleaner_6.030.exe
# Modus: Löschen
# Unterstützung : hxxps://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
[-] Ordner gelöscht: C:\Users\Martin\AppData\Local\28050
[-] Ordner gelöscht: C:\Users\Martin\AppData\Local\Hola
[-] Ordner gelöscht: C:\Users\Martin\AppData\Local\YSearchUtil
[-] Ordner gelöscht: C:\Users\Martin\AppData\Roaming\Babylon
[-] Ordner gelöscht: C:\Users\Martin\AppData\Roaming\Media Finder
[-] Ordner gelöscht: C:\Users\Martin\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
[-] Ordner gelöscht: C:\Users\Martin\AppData\Roaming\OpenCandy
[-] Ordner gelöscht: C:\ProgramData\Babylon
[#] Ordner mit Neustart gelöscht: C:\ProgramData\Application Data\Babylon
[-] Ordner gelöscht: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
[-] Ordner gelöscht: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
***** [ Dateien ] *****
[-] Datei gelöscht: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\extensions\jid1-16aeif9OQIRKxA@jetpack.xpi
[-] Datei gelöscht: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\invalidprefs.js
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Prod.cap
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\Prod.cap
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\APN PIP
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\BabylonToolbar
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Hola
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\InstallCore
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\MediaFinder
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\PRODUCTSETUP
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Softonic
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\SweetIM
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\UpToDown
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\csastats
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\SweetIM
[#] Schlüssel mit Neustart gelöscht: HKU\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\APN PIP
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\BabylonToolbar
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Hola
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\InstallCore
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\MediaFinder
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Softonic
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\SweetIM
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\UpToDown
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\csastats
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Babylon
[-] Schlüssel gelöscht: HKLM\SOFTWARE\PIP
[-] Schlüssel gelöscht: HKLM\SOFTWARE\SweetIM
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\SweetIM
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\APN PIP
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\BabylonToolbar
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Hola
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\InstallCore
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\MediaFinder
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Softonic
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\SweetIM
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\UpToDown
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\csastats
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Schlüssel gelöscht: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\SweetIM
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Web-Suche
***** [ Browser ] *****
[-] Firefox Einstellungen bereinigt: "extensions.xpiState" - "{\"app-profile\":{\"adbhelper@mozilla.org\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\adbhelper@mozilla.org\",\"e\":true,\"v\":\"0.9.0\",\"st\":1478203126949,\"mt\":1478203126537},\"cookiemgr@jayapal.com\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\cookiemgr@jayapal.com\",\"e\":true,\"v\":\"5.12\",\"st\":1456178632200,\"mt\":1456177354427},\"fxdevtools-adapters@mozilla.org\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\fxdevtools-adapters@mozilla.org\",\"e\":true,\"v\":\"0.3.5\",\"st\":1456265518401,\"mt\":1456265515811},\"jid0-db0owQRjcx0mRj5LBNH2MHAwEkc@jetpack\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\jid0-db0owQRjcx0mRj5LBNH2MHAwEkc@jetpack\",\"e\":false,\"v\":\"0.1.0\",\"st\":1385254904393,\"mt\":1385254904114},\"jid1-16aeif9OQIRKxA@jetpack\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\jid1-16aeif9OQIRKxA@jetpack.xpi\",\"e\":false,\"v\":\"1.1.4\",\"st\":1479507149594},\"jid1-cwbvBTE216jjpg@jetpack\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\jid1-cwbvBTE216jjpg@jetpack.xpi\",\"e\":false,\"v\":\"2.1.0.1-signed.1-signed\",\"st\":1461838801658},\"shumway@research.mozilla.org\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\shumway@research.mozilla.org\",\"e\":false,\"v\":\"0.11.617\",\"st\":1444942524779,\"mt\":1444942524577},\"{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi\",\"e\":true,\"v\":\"2.3.4\",\"st\":1476129358056},\"{73a6fe31-595d-460b-a920-fcc0f8843232}\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi\",\"e\":false,\"v\":\"2.9.5.1\",\"st\":1479854327980},\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a9urom3s.default-1384358611811\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\",\"e\":true,\"v\":\"2.8.2\",\"st\":1479940727790}},\"app-system-defaults\":{\"aushelper@mozilla.org\":{\"d\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\features\\\\aushelper@mozilla.org.xpi\",\"e\":true,\"v\":\"1.0\",\"st\":1479429191774},\"e10srollout@mozilla.org\":{\"d\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\features\\\\e10srollout@mozilla.org.xpi\",\"e\":true,\"v\":\"1.5\",\"st\":1479429191583},\"firefox@getpocket.com\":{\"d\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\features\\\\firefox@getpocket.com.xpi\",\"e\":true,\"v\":\"1.0.5\",\"st\":1479429191560},\"webcompat@mozilla.org\":{\"d\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\features\\\\webcompat@mozilla.org.xpi\",\"e\":true,\"v\":\"1.0\",\"st\":1479429191549}},\"app-system-user\":{\"gencrawler@some.com\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming\\\\Mozilla\\\\Extensions\\\\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\\\\gencrawler@some.com\",\"e\":false,\"v\":\"2.5\",\"st\":1331599059968,\"mt\":1331044702000}},\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi\",\"e\":true,\"v\":\"50.0\",\"st\":1479429191601}}}"
[-] Firefox Einstellungen bereinigt:
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [10992 Bytes] - [28/11/2016 16:22:58]
C:\AdwCleaner\AdwCleaner[S0].txt - [6862 Bytes] - [28/11/2016 16:20:22]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [11139 Bytes] ##########
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 28.11.2016 Suchlaufzeit: 16:31 Protokolldatei: mbam.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.02.16.06 Rootkit-Datenbank: v2016.02.08.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Martin Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 398942 Abgelaufene Zeit: 13 Min., 15 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 2 PUP.Optional.Generalcrawler, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dednnpigldgdbpgcdpfppmlcnnbjciel, In Quarantäne, [353179e88c0d96a0280e8066fc07c23e], PUP.Optional.MediaFinder, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\lpmkgpnbiojfaoklbkpfneikocaobfai, In Quarantäne, [f571da879dfca88efe090be5f21117e9], Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 2 PUP.Optional.OptimizerPro, C:\Users\Martin\Documents\Optimizer Pro, In Quarantäne, [481e2e3398013ef89b0753a4de2531cf], Ransom.Agent.FGen, C:\Users\Martin\AppData\Roaming\hellomoto, In Quarantäne, [1b4b95cc6237201666539baaee162ed2], Dateien: 14 PUP.Optional.InstallCore, C:\Users\Martin\Siemens\Siemens_Logo_Font_Installer.exe, In Quarantäne, [5610e37ef9a078bec2eb53e62ad7ef11], PUP.Optional.InstallCore, C:\Users\Martin\Siemens\Siemens_Sans_Black_Font_Installer.exe, In Quarantäne, [006629381a7f02343d700e2b46bb02fe], PUP.Optional.InstallCore, C:\Users\Martin\Siemens\Siemens_Slab_Black_Font_Installer.exe, In Quarantäne, [5214d38ef0a91521357883b6639e51af], PUP.Optional.SofTonic, C:\Users\Martin\Skyrim\SoftonicDownloader_fuer_skyrim-performance-mod.exe, In Quarantäne, [3135b4adc9d0290db207ec5020e142be], PUP.Optional.OpenCandy, C:\Users\Martin\DAI\CheatEngine64.exe, In Quarantäne, [2343233e267372c4c86ec7145aa7ed13], HackTool.CheatEngine, C:\Users\Martin\Downloads\DBX_V1.01trn11.zip, In Quarantäne, [5b0b590832678fa70fc3fa2ec63a31cf], PUP.Optional.OpenCandy, C:\Users\Martin\Downloads\DTLite4451-0236.exe, In Quarantäne, [2145e87930695cda558ad62733d1bf41], HackTool.GamesCheat.Gen, C:\Users\Martin\Downloads\ROTWK_Trainer.rar, In Quarantäne, [0f57530ec9d0043297fb54a39371b947], PUP.Optional.ChipDigital, C:\Users\Martin\Downloads\Everest Home Edition - CHIP-Installer.exe, In Quarantäne, [c99dc79a3f5a4fe72ca1f2e0c63eaf51], Backdoor.Bot, C:\Users\Martin\Downloads\Cheat Engine 5.1.rar, In Quarantäne, [0d5900610d8c81b504bcb65306fc916f], PUP.Optional.SofTonic, C:\Users\Martin\MC\SoftonicDownloader_fuer_minecraft-skinedit.exe, In Quarantäne, [8cda263b7029f3430d5691a534cd06fa], PUP.Optional.OptimizerPro, C:\Users\Martin\Documents\Optimizer Pro\CookiesException.txt, In Quarantäne, [481e2e3398013ef89b0753a4de2531cf], Ransom.Agent.FGen, C:\Users\Martin\AppData\Roaming\hellomoto\TujP.dat, In Quarantäne, [1b4b95cc6237201666539baaee162ed2], Ransom.Agent.FGen, C:\Users\Martin\AppData\Roaming\hellomoto\BukF.dat, In Quarantäne, [1b4b95cc6237201666539baaee162ed2], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016
durchgeführt von Martin (Administrator) auf MYRMIX (28-11-2016 17:09:24)
Gestartet von C:\Users\Martin\Desktop
Geladene Profile: Martin (Verfügbare Profile: Martin)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 10 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Chip Digital GmbH) C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1354712 2016-08-30] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-09-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [GamingMouse] => C:\Program Files (x86)\Drakonia Configurator\hid.exe [248832 2013-10-29] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Run: [World of Warships] => K:\Games\WOWS_PublicTest\WargamingGameUpdater.exe [3134216 2016-11-07] (Wargaming.net)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Policies\Explorer: []
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Privoxy.lnk [2012-04-03]
ShortcutTarget: Privoxy.lnk -> C:\Program Files (x86)\Privoxy\privoxy.exe (The Privoxy team - www.privoxy.org)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter - Verknüpfung.lnk [2012-04-01]
ShortcutTarget: Rainmeter - Verknüpfung.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21
Tcpip\..\Interfaces\{AE141692-DE9B-4CC3-93A4-62B71E738879}: [DhcpNameServer] 195.34.133.21 212.186.211.21
Internet Explorer:
==================
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {A0C59A24-F50F-433C-928B-8235295514F4} URL = hxxps://at.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-23] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-23] (Oracle Corporation)
FireFox:
========
FF DefaultProfile: a9urom3s.default-1384358611811
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 [2016-11-28]
FF NewTab: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> Bing Powered Search
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> Bing Powered Search
FF Homepage: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> www.google.at
FF Keyword.URL: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> user_pref("keyword.URL", true);
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ftp", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.socks", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ssl", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ssl_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ftp", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> http", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> http_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> share_proxy_settings", true
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> socks", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ssl", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ssl_port", 8080
FF Extension: (ADB Helper) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\adbhelper@mozilla.org [2016-11-03]
FF Extension: (Advanced Cookie Manager) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\cookiemgr@jayapal.com [2016-02-22]
FF Extension: (Valence) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\fxdevtools-adapters@mozilla.org [2016-02-23]
FF Extension: (ExHentai Easy) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid0-db0owQRjcx0mRj5LBNH2MHAwEkc@jetpack [2013-11-24] [ist nicht signiert]
FF Extension: (YouTube Center) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid1-cwbvBTE216jjpg@jetpack.xpi [2016-04-28]
FF Extension: (Shumway) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\shumway@research.mozilla.org [2015-10-15] [ist nicht signiert]
FF Extension: (ProxTube - Gesperrte YouTube Videos entsperren) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2016-10-10]
FF Extension: (NoScript) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-11-22]
FF Extension: (Adblock Plus) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @hola.org/vlc,version=1.8.649 -> C:\Users\Martin\AppData\Local\Hola\firefox\app\vlc [Keine Datei]
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @my.com/Games -> C:\Users\Martin\AppData\Local\MyComGames\NPMyComDetector.dll [2016-06-11] (MY.COM B.V.)
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-08-21] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-01-02] (BitRaider, LLC)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-07-19] (BitRaider, LLC)
R2 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [120888 2016-08-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-08-30] (Microsoft Corporation)
S3 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-08-08] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-27] ()
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-31] (Disc Soft Ltd)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-04-27] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S0 mv91xx; system32\DRIVERS\mv91xx.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-28 17:09 - 2016-11-28 17:10 - 00017394 _____ C:\Users\Martin\Desktop\FRST.txt
2016-11-28 17:00 - 2016-11-28 17:00 - 00131659 _____ C:\Users\Martin\Desktop\JRT.txt
2016-11-28 16:57 - 2016-11-28 16:57 - 01631928 _____ (Malwarebytes) C:\Users\Martin\Desktop\JRT.exe
2016-11-28 16:55 - 2016-11-28 16:55 - 00003516 _____ C:\Users\Martin\Desktop\mbam.txt
2016-11-28 16:30 - 2016-11-28 16:54 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-28 16:30 - 2016-11-28 16:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-11-28 16:30 - 2016-11-28 16:30 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-11-28 16:30 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-11-28 16:30 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-11-28 16:29 - 2016-11-28 16:29 - 22851472 _____ (Malwarebytes ) C:\Users\Martin\Desktop\mbam-setup-2.2.1.1043.exe
2016-11-28 16:18 - 2016-11-28 16:22 - 00000000 ____D C:\AdwCleaner
2016-11-28 16:14 - 2016-11-28 16:14 - 03910208 _____ C:\Users\Martin\Desktop\AdwCleaner_6.030.exe
2016-11-27 20:36 - 2016-11-27 20:36 - 00276696 _____ C:\Windows\Minidump\112716-17487-01.dmp
2016-11-27 15:00 - 2016-11-27 15:00 - 00026564 _____ C:\ComboFix.txt
2016-11-27 14:48 - 2016-11-27 15:00 - 00000000 ____D C:\Qoobox
2016-11-27 14:48 - 2016-11-27 14:59 - 00000000 ____D C:\Windows\erdnt
2016-11-27 14:48 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2016-11-27 14:48 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2016-11-27 14:48 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2016-11-27 14:46 - 2016-11-27 14:46 - 05659307 ____R (Swearware) C:\Users\Martin\Desktop\ComboFix.exe
2016-11-26 11:52 - 2016-11-28 17:07 - 00000000 ____D C:\Users\Martin\rootkit
2016-11-26 11:51 - 2016-11-26 11:55 - 00063263 _____ C:\Users\Martin\Downloads\Addition.txt
2016-11-26 11:50 - 2016-11-26 11:56 - 00027727 _____ C:\Users\Martin\Downloads\FRST.txt
2016-11-26 11:48 - 2016-11-28 17:09 - 00000000 ____D C:\FRST
2016-11-26 11:44 - 2016-11-26 11:44 - 02412032 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2016-11-26 11:20 - 2016-11-26 11:20 - 00388608 _____ (Trend Micro Inc.) C:\Users\Martin\Downloads\HijackThis.exe
2016-11-20 19:17 - 2016-11-20 19:45 - 00000890 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2016-11-20 19:17 - 2016-11-20 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2016-11-20 19:16 - 2016-11-20 19:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2016-11-20 19:15 - 2016-11-20 19:15 - 00000000 ____D C:\Program Files (x86)\Chip Digital GmbH
2016-11-20 18:45 - 2016-11-22 14:13 - 00000000 ____D C:\Users\Martin\FALL4mods
2016-11-18 17:22 - 2016-11-18 17:22 - 00276696 _____ C:\Windows\Minidump\111816-21699-01.dmp
2016-11-18 01:57 - 2016-11-28 17:07 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\Mozilla
2016-11-18 01:33 - 2016-11-18 09:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-11-11 14:05 - 2016-11-11 14:05 - 00000781 _____ C:\Users\Public\Desktop\WOWS_PublicTest.lnk
2016-11-10 22:06 - 2016-11-11 13:38 - 03186048 _____ (Wargaming ) C:\Users\Martin\Downloads\WoWS_PublicTest.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-28 17:00 - 2009-07-14 05:45 - 00022208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-28 17:00 - 2009-07-14 05:45 - 00022208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-28 16:56 - 2010-11-21 07:50 - 00713806 _____ C:\Windows\system32\perfh007.dat
2016-11-28 16:56 - 2010-11-21 07:50 - 00153922 _____ C:\Windows\system32\perfc007.dat
2016-11-28 16:56 - 2009-07-14 06:13 - 01648056 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-28 16:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-28 16:51 - 2016-08-05 12:03 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-11-28 16:51 - 2015-02-19 19:26 - 00000000 ____D C:\Users\Martin\DAI
2016-11-28 16:51 - 2014-04-01 15:41 - 00000000 ____D C:\Users\Martin\Siemens
2016-11-28 16:51 - 2013-04-18 10:33 - 00000000 ____D C:\Users\Martin\MC
2016-11-28 16:51 - 2012-05-12 09:53 - 00000000 ____D C:\Users\Martin\Skyrim
2016-11-28 16:51 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-28 16:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SchCache
2016-11-28 16:30 - 2012-04-20 09:49 - 00001106 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-11-28 16:30 - 2012-04-20 09:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2016-11-28 16:30 - 2012-04-20 09:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-11-28 14:34 - 2011-11-15 21:03 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\Temp
2016-11-27 22:39 - 2011-12-19 22:22 - 00000000 ____D C:\Users\Martin\AppData\Roaming\TS3Client
2016-11-27 20:36 - 2016-08-06 11:05 - 673605975 _____ C:\Windows\MEMORY.DMP
2016-11-27 20:36 - 2012-08-15 14:01 - 00000000 ____D C:\Windows\Minidump
2016-11-27 15:00 - 2012-01-17 16:42 - 00000000 ____D C:\Users\Martin\AppData\Local\Apps\2.0
2016-11-27 14:58 - 2011-11-15 16:52 - 00000000 ____D C:\Users\Martin
2016-11-27 14:58 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2016-11-26 11:44 - 2013-07-28 12:16 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-26 11:44 - 2011-11-15 21:17 - 00000000 ____D C:\Program Files (x86)\JDownloader
2016-11-26 11:43 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-11-26 02:49 - 2016-08-18 19:08 - 00000000 ____D C:\Users\Martin\AppData\Local\JDownloader v2.0
2016-11-25 19:17 - 2012-07-14 13:43 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2016-11-21 20:07 - 2015-08-11 22:48 - 00000000 ___RD C:\Users\Martin\wows
2016-11-21 16:36 - 2015-10-29 13:29 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2016-11-20 20:07 - 2012-04-25 16:00 - 00218112 ___SH C:\Users\Martin\Thumbs.db
2016-11-20 19:45 - 2015-11-11 12:42 - 00000000 ____D C:\Users\Martin\AppData\Local\Fallout4
2016-11-20 19:17 - 2012-01-07 19:18 - 00000000 ____D C:\Users\Martin\Documents\Nexus Mod Manager
2016-11-20 19:17 - 2012-01-07 19:18 - 00000000 ____D C:\Users\Martin\AppData\Local\Black_Tree_Gaming
2016-11-20 19:15 - 2016-02-12 14:34 - 00000000 ____D C:\Users\Martin\AppData\Local\Downloaded Installations
2016-11-18 09:37 - 2012-04-25 21:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-11-12 18:59 - 2015-12-18 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2016-11-11 14:05 - 2012-07-28 22:00 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-11-11 14:05 - 2011-11-21 16:17 - 00000000 ____D C:\Games
2016-11-08 10:42 - 2014-02-20 16:15 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-08 10:42 - 2014-02-20 16:15 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-08 10:42 - 2011-11-16 20:36 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2016-11-08 10:42 - 2011-11-15 18:31 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-08 10:42 - 2011-11-15 18:31 - 00000000 ____D C:\Windows\system32\Macromed
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-09-15 14:05 - 2016-05-02 18:56 - 0000132 _____ () C:\Users\Martin\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-09-15 15:59 - 2015-09-15 15:59 - 0006682 _____ () C:\Users\Martin\AppData\Local\recently-used.xbel
2012-05-11 13:46 - 2012-05-11 18:13 - 0007596 _____ () C:\Users\Martin\AppData\Local\Resmon.ResmonCfg
2014-10-27 10:08 - 2014-10-27 10:08 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Martin\Drakonia Configurator.exe
C:\Users\Martin\dscaler4115.exe
C:\Users\Martin\jre-7u40-windows-x64.exe
C:\Users\Martin\Steam-reg.reg
Einige Dateien in TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\libeay32.dll
C:\Users\Martin\AppData\Local\Temp\msvcr120.dll
C:\Users\Martin\AppData\Local\Temp\sqlite3.dll
C:\Users\Martin\AppData\Local\Temp\Uninstall.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-10-27 13:47
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016
durchgeführt von Martin (28-11-2016 17:10:42)
Gestartet von C:\Users\Martin\Desktop
Windows 7 Professional Service Pack 1 (X64) (2011-11-15 15:52:25)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1031562343-2424694273-2990312000-500 - Administrator - Disabled)
Gast (S-1-5-21-1031562343-2424694273-2990312000-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1031562343-2424694273-2990312000-1002 - Limited - Enabled)
Martin (S-1-5-21-1031562343-2424694273-2990312000-1000 - Administrator - Enabled) => C:\Users\Martin
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
7-Zip 9.38 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0938-000001000000}) (Version: 9.38.00.0 - Igor Pavlov)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
AFPL Ghostscript 8.54 (HKLM-x32\...\AFPL Ghostscript 8.54) (Version: - )
AFPL Ghostscript Fonts (HKLM-x32\...\AFPL Ghostscript Fonts) (Version: - )
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
Armored Warfare MyCom (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Armored Warfare MyCom) (Version: 1.62 - My.com B.V.)
Armored Warfare MyCom Beta (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Armored Warfare MyCom Beta) (Version: 1.59 - My.com B.V.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.0.0 - Asmedia Technology)
AutoCAD 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack - English (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 3.0.159.0 - Autodesk)
Autodesk AutoCAD 2015 - English (HKLM\...\AutoCAD 2015 - English) (Version: 20.0.51.0 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
AutoIt v3.3.8.1 (HKLM-x32\...\AutoItv3) (Version: - AutoIt Team)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Bing Powered Search (HKLM-x32\...\BingPoweredSearch) (Version: - )
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH)
Cisco Systems VPN Client 5.0.07.0440 (HKLM\...\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}) (Version: 5.0.7 - Cisco Systems, Inc.)
CPUID HWMonitor 1.22 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
Crossfire 2.0 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Crossfire 2.0) (Version: 2.00.00.00 - SWAT-Portal)
Curse Client (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dragon Age Redesigned Oghren© (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned Oghren©) (Version: - )
Dragon Age Redesigned© Zevran (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Zevran) (Version: - )
Dragon Age Redesigned© (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned©) (Version: - )
Dragon Age Redesigned© Leliana (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Leliana) (Version: - )
Dragon Age Redesigned© Sten (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Sten) (Version: - )
Dragon Age Redesigned© Wynne (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Wynne) (Version: - )
Drakonia Configurator (HKLM-x32\...\{2EAD3327-2F92-455F-A675-E5CC4980B67A}}_is1) (Version: - )
Explorer Suite III (HKLM\...\Explorer Suite_is1) (Version: - )
FAM 1.0.0.0 (HKLM-x32\...\FAM) (Version: 1.0.0.0 - Korrd)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Free CBR Reader (HKLM-x32\...\{B9240DAE-EFA1-4A0E-824F-17B3F99194F8}) (Version: 1.0.0 - Free Picture Solutions)
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Freelancer (HKLM-x32\...\Freelancer 1.0) (Version: - )
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
gmax (HKLM-x32\...\{3FA7A919-87DA-42B1-814B-86DE8DCA17C2}) (Version: 4.4.0.125 - Discreet)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
HardCMP v1.0.0.23 (HKLM-x32\...\HardCMP_is1) (Version: 1.0.0.23 - )
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
IsoBuster 3.0 (HKLM-x32\...\IsoBuster_is1) (Version: 3.0 - Smart Projects)
Java 3D 1.5.1 (HKLM-x32\...\{32A9C5B3-D166-4C6D-A11E-A54473151000}) (Version: 1.5.1 - Sun Microsystems, Inc.)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Minion (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{Minion}}_is1) (Version: 2.0 - ZAM Network LLC)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 50.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0 (x86 de)) (Version: 50.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.0.6152 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mumble 1.2.3 (HKLM-x32\...\{C3E9887A-23BA-4777-8080-191A5AFCAB74}) (Version: 1.2.3 - Thorvald Natvig)
My.com Game Center (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\MyComGames) (Version: 3.162 - My.com B.V.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.9 - Black Tree Gaming)
Nitro Reader 3 (HKLM\...\{9EA981E5-EE67-4662-86F1-58937D31FE07}) (Version: 3.5.6.5 - Nitro)
NVIDIA PhysX (HKLM-x32\...\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}) (Version: 9.09.0814 - NVIDIA Corporation)
OMC ModPack Client Version 1.1.11.6 (HKLM-x32\...\{E2F3187C-2B94-486F-8914-E69211487FB6}_is1) (Version: 1.1.11.6 - Odem Mortis)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
paint.net (HKLM\...\{A1D05314-DC32-4668-A97E-51060EC8BCCE}) (Version: 4.0.12 - dotPDN LLC)
Parsec (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\a53dc3b81e52c50e) (Version: 1.0.0.42 - Parsec)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games)
paw·ned‹4›2 – Die Antwort auf alle Buildfragen (HKLM-x32\...\pawned42) (Version: - JN-GAMES Software)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
Pdfedit (HKLM-x32\...\{6C11089A-E23F-4E9B-B12C-316BF1A4376B}) (Version: 4.5.0.0 - PdfEdit team)
Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.6 - )
PowerDVD (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: - )
Privoxy (remove only) (HKLM-x32\...\Privoxy) (Version: - )
RAD Video Tools (HKLM-x32\...\RADVideo) (Version: - )
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 2.2 r1116 - )
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6235 - Realtek Semiconductor Corp.)
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)
Skype™ 7.23 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.23.105 - Skype Technologies S.A.)
Slime Rancher (HKLM-x32\...\Slime Rancher0.2.4b) (Version: 0.2.4b - TheRaven1)
Space Engineers (HKLM\...\Steam App 244850) (Version: - Keen Software House)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.05.0001 - Electronic Arts)
sTabLauncher (HKLM-x32\...\{9E5A4758-0189-419B-A6ED-FE4CBD255F05}) (Version: 2.2.3 - Sergio Santos)
Star Citizen Launcher (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Star Citizen Launcher) (Version: 00.01.00.00 - Cloud Imperium Games)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab (HKLM-x32\...\{F89CDED6-B1F1-489F-BA44-698BF6A737C2}) (Version: 6.1.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Witcher Enhanced Edition (HKLM-x32\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.00.0000 - CD Projekt Red)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.)
VLC media player 2.0.2 (HKLM-x32\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
War Thunder Launcher 1.0.1.386 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: 0.0.0.0 - Blizzard Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WindowsAndroid version 4.0.3 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{7E07052F-A4CE-4932-B066-B9203888439F}_is1) (Version: 4.0.3 - SocketeQ, Inc.)
WinRAR 5.30 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
World of Warships (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net)
YACReader 8.5.0 (HKLM-x32\...\YACReader_is1) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{06d45639-4c61-4cab-be15-52f5e6e72d31}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{27e52464-33a3-42ab-a482-c84fab56362a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{4e9b62d8-f542-423b-8e8e-2007daeac423}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{7acd7f3b-8bb8-430f-8499-dd8077c7af97}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{7d430c4d-1b80-464c-8f5d-2d99d4ff9c85}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{8059b7ca-030b-489d-b211-5b961893bedf}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{b8be70ea-432e-4a55-ba5c-a83cd1e376b6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{b9540fcf-2d9b-4e81-8557-2c9592685a9a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{e26b586f-8643-46af-a2fc-bc81c5389766}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\en-US\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{e85372c0-2724-41f4-a715-0806ee361bb0}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1A6475D2-A64E-4899-8D82-B7A306F8C911} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-08-30] (Microsoft Corporation)
Task: {305492CB-4722-4BA3-BF71-A11429E75A10} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)
Task: {35419A1B-98CE-4D48-91FD-1FBF82A10B24} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-09-16] (Advanced Micro Devices, Inc.)
Task: {AAE2BC6B-1119-4222-B6C7-017DDD173F9B} - System32\Tasks\{652BC46E-1D96-4931-B893-AE3A21457C8E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.158/de/eula
Task: {B3F91BB8-7CC1-4BE6-B368-4204269BAFB6} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-09-22] (Oracle Corporation)
Task: {DE94F380-FC6D-4FCB-A615-8AB3EA0AAF16} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-08-30] (Microsoft Corporation)
Task: {EF75F260-60A6-4F74-882C-2A4CF98BD56F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-11-24 20:35 - 2005-03-12 01:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2013-03-22 17:18 - 2015-08-08 17:04 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2011-03-04 12:49 - 2011-03-04 12:49 - 00202752 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2016-10-16 11:54 - 2016-10-16 11:54 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f91bd970f20123a46b575cf6e92bc441\IsdiInterop.ni.dll
2011-11-15 17:06 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\sony.com -> sony.com
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2016-11-27 14:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 195.34.133.21 - 212.186.211.21
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^vpngui.exe.lnk => C:\Windows\pss\vpngui.exe.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: GamingMouse => C:\Program Files (x86)\Drakonia Configurator\hid.exe
MSCONFIG\startupreg: Remote Control Editor => "C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe"
MSCONFIG\startupreg: RemoteControl => "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
MSCONFIG\startupreg: RGSC => K:\Games\GTA4\Rockstar Games Social Club\RGSCLauncher.exe /silent
MSCONFIG\startupreg: Smart File Advisor => "C:\Program Files (x86)\Smart File Advisor\sfa.exe" /checkassoc
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{DA14B3E4-1977-4874-9BC8-8D78BDEFA0FD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{D45D251F-9F78-419B-B3FB-CC129056CC7C}C:\games\call of duty black ops\blackops.exe] => (Block) C:\games\call of duty black ops\blackops.exe
FirewallRules: [UDP Query User{115987AB-3EE6-42AB-81E0-B6C843F4B95B}C:\games\call of duty black ops\blackops.exe] => (Block) C:\games\call of duty black ops\blackops.exe
FirewallRules: [{D023DD3D-B9E3-4FD4-A706-20EA6612D3D3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{10F598B7-6248-4641-A32C-7B8FAAB3B384}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [TCP Query User{15CF0E2B-A339-4B42-99D5-37CA542D4ABD}K:\games\gw2\gw2.exe] => (Allow) K:\games\gw2\gw2.exe
FirewallRules: [UDP Query User{32719093-8BD2-44A4-856C-49B1EA2D33BE}K:\games\gw2\gw2.exe] => (Allow) K:\games\gw2\gw2.exe
FirewallRules: [{254B1476-B09C-4F89-A9F6-82A0F56FD0B5}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{D5872796-7876-49F7-A2D8-8FF6D5A53523}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{CA94F41A-DD1B-4A72-86DE-1032FE2B366D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6FD7189D-1EBA-47A4-A5EB-BF06EC520BBC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DBFEB9BB-2B08-494C-8C03-EE196D5B1F96}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B0ECFFA5-FCEA-4F5E-BDB7-F52E27F0C431}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2D37DAE8-DD97-4929-8CD2-F5A8E96A2A74}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{14E6B066-CB4B-4F42-8C65-A30BD8CB40EA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B5E570ED-F1A3-4F9D-B837-FF53434C629B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{32EF9C71-C0A9-4FC5-9335-654F2485208E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{95F75607-BD3A-4130-849D-35460CDFFF67}] => (Allow) LPort=80
FirewallRules: [{D5CA12CD-BD78-4A0D-8C42-96AC5B89A8DB}] => (Allow) LPort=443
FirewallRules: [{6971AD85-B1AE-4DFB-B505-CA0FBA19DF34}] => (Allow) LPort=20010
FirewallRules: [{A0FD53BC-5301-453D-9458-D8690DA6BB3A}] => (Allow) LPort=3478
FirewallRules: [{C9B4DDF2-352C-4876-9231-4759D64BD32A}] => (Allow) LPort=7850
FirewallRules: [{6BE2B612-FEC8-44EA-8511-E6821D6D8B95}] => (Allow) LPort=7852
FirewallRules: [{126E1A5D-D8E5-4B2E-A48C-35CF5EE98F8C}] => (Allow) LPort=7853
FirewallRules: [{01208F69-21AE-4235-B5EF-F23299D59698}] => (Allow) LPort=27022
FirewallRules: [{9406B5A7-ED28-45B9-9945-DB2D0112F1B1}] => (Allow) LPort=6881
FirewallRules: [{A30E663C-AF63-402A-961B-4FAB7B8F6295}] => (Allow) LPort=33333
FirewallRules: [{F8B8FA6D-E5C6-4F82-9F61-EEF5831AB045}] => (Allow) LPort=20443
FirewallRules: [{197DC96A-400A-4B7F-BF17-096C617FDC52}] => (Allow) LPort=8090
FirewallRules: [{315A91A7-50CD-4AA0-9DA4-7B3EA5AF4E41}] => (Allow) LPort=50248
FirewallRules: [{647CF977-885E-487B-AECF-0D0BCFE394FB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{BFF7822D-29BB-435E-B0CC-E6FB6386D6B7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [{19C193B3-0E36-4FC9-B776-EF594F2E06D7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CCFA21AF-6946-4394-9393-A7914C1EAB6A}] => (Allow) LPort=2869
FirewallRules: [{69AD3371-0624-45F5-B3F4-EDF4EB7B9AEA}] => (Allow) LPort=1900
FirewallRules: [{24E4719D-875C-4164-92CD-2358293AF128}] => (Allow) C:\Program Files (x86)\OMC ModPack Client\OMC ModPack Client.exe
FirewallRules: [{65BDC62F-A6D0-4638-B54B-1A5E9635D7D4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{17401A7C-6DB7-40CD-8447-D6B647F506C6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4DD8C035-CD15-442C-BCBB-FDC26E1DE05D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{377EDF59-81A6-4C6E-9217-72E77BF00BAC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{E0998469-C626-45BA-9023-75797B0D51F7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{F4B02B17-DF19-4690-B6A3-67F46E14107D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{7FE67A19-1C7C-47AF-886D-E639BF16019C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{897D2F00-3723-4C6C-B2E3-F9E10B22A695}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{E63EFA4F-52DD-4E50-98F4-C64486DE5FFA}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{C5BA1463-92BA-436F-AC64-9C92FFF45D03}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{2630B555-48AF-4038-B00E-B7D7FE02BF8E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{32C8E90C-6216-433E-9875-8ACACA120F19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [{08AD94ED-4C34-474D-A3E2-63105AB508F1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8BA530C5-C118-43C2-BA5F-846FEBCC7E1D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E05AE212-44BA-4CA4-BCB3-06BDF2683ADA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D230EB6-8F4E-46C7-A4EF-DA3C02267FE5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{05FF1BE1-D9EA-4086-BAF0-54F754F95969}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{62F7182C-FD69-434C-8A3A-2C2BF7AE516A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{5EAD725D-4F20-4D72-8883-11872479E347}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{9A3D1993-D693-465A-A1CD-CE941E320268}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{ABE41180-295F-42A5-97F5-96096DE702EF}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{692AD4BF-5BA0-414C-9421-6D95E92989C5}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{6E847FBB-0774-4493-A233-2174541C47DE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{FE1762B0-077E-4E00-BF76-23E75A326709}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1A163A24-C1B9-43BE-9A54-BD8DC369BE08}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3C4E0A4-631F-494A-BF04-4442AF1A7E45}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{189D7710-D8B9-4F62-9A90-D41D995B9F6C}C:\users\martin\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\martin\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{6711ABB2-D72E-4416-B773-CD004256953C}C:\users\martin\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\martin\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{96861C9B-1464-4C4C-B036-84D8033746A3}K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{F0C2660F-3934-4181-8948-81663C7B4FAB}K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [TCP Query User{F1E2D9C4-30A9-44DC-9BB6-E63650A9A8CB}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [UDP Query User{F7AB5B48-81C1-4362-9BB9-3785D2587A4A}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [TCP Query User{94D18C8F-86D3-4AC4-98A3-2145FE0C6DCE}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [UDP Query User{732EAB2F-453C-4DF1-9872-F7CBAD021540}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [TCP Query User{A56EEAA9-67C5-4219-87F8-9BDE6D1AF9C6}K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{705B4100-C489-4C32-8B09-0449A4B51187}K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [{BD12A005-5430-4622-9F42-99B38B26F5F8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{033717DE-391B-4088-95DF-E6BE2102BD1B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [TCP Query User{107DFFE1-EC96-4538-90EB-483687386B28}K:\games\wows_publictest\wowslauncher.exe] => (Allow) K:\games\wows_publictest\wowslauncher.exe
FirewallRules: [UDP Query User{98C38A1F-A0D5-4A4A-AFB4-85EBEA8AA13B}K:\games\wows_publictest\wowslauncher.exe] => (Allow) K:\games\wows_publictest\wowslauncher.exe
FirewallRules: [{2B51E7DB-C122-42CD-BBE0-4AE609DC6D32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{BB518C50-7E28-4A63-A098-742922983C7D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{A6035418-4970-479E-9EA4-85749B68085E}] => (Allow) K:\Games\ESTU\Launcher\GameConsultant.exe
FirewallRules: [{1F20723E-7CE5-464E-8542-72EC791C4AC8}] => (Allow) K:\Games\ESTU\Launcher\Bethesda.net_Launcher.exe
FirewallRules: [TCP Query User{D4FDF617-63A5-46BE-A60E-960B2E4F1E2E}K:\games\warship\wowslauncher.exe] => (Allow) K:\games\warship\wowslauncher.exe
FirewallRules: [UDP Query User{D7E165A1-902B-4F4B-B2A9-D3AD6A00AD50}K:\games\warship\wowslauncher.exe] => (Allow) K:\games\warship\wowslauncher.exe
FirewallRules: [{D627856E-3ACF-4865-AFEA-ACF0EFFADBC0}] => (Allow) K:\Games\WT\WarThunder\launcher.exe
FirewallRules: [{C0806AFA-854B-4D6A-B5E6-96548D732351}] => (Allow) K:\Games\WT\WarThunder\launcher.exe
FirewallRules: [{A3F76B1A-5757-4FAF-9B82-9C9E68966F07}] => (Allow) K:\Games\WT\WarThunder\aces.exe
FirewallRules: [{D7BF61B9-24DB-47C1-AD5A-A1CC0346C734}] => (Allow) K:\Games\WT\WarThunder\aces.exe
FirewallRules: [TCP Query User{2FD75038-0456-428B-8104-7BBDAB2E2D71}K:\games\wt\warthunder\win64\aces.exe] => (Allow) K:\games\wt\warthunder\win64\aces.exe
FirewallRules: [UDP Query User{A82A83EA-8EB2-4583-B15C-60CEEA771357}K:\games\wt\warthunder\win64\aces.exe] => (Allow) K:\games\wt\warthunder\win64\aces.exe
FirewallRules: [TCP Query User{F905E323-B4DF-4C40-9231-941118005F79}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{3B08B716-9064-4E1C-B210-D840F0041E08}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{E60A25E8-D512-4DEF-998C-C98D84AF8B5A}C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [UDP Query User{6C728D7F-4FB7-44B4-ACA6-00ECAEBA1BBD}C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [TCP Query User{F0570CD4-A0DD-4F17-A6D8-EF1564F8BF3D}C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe
FirewallRules: [UDP Query User{A38A26FB-4783-48AC-A954-8934A8A6B9E0}C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe
FirewallRules: [{9455FA43-B14A-4CA0-8904-3CC6F639720B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{F153E4D7-8DD4-4D5B-80E8-087C75626B6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [TCP Query User{491CFD22-984D-4134-8D92-A3F1F5B6F4A5}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{99640C1F-820D-42F7-BEE2-EE224A842DCB}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [{D25E39C0-0429-4FA7-B241-549A93469372}] => (Allow) C:\Games\WOWS_PublicTest\WoWsLauncher.exe
FirewallRules: [{04239541-694A-4378-8948-1C13D266D278}] => (Allow) C:\Games\WOWS_PublicTest\WoWsLauncher.exe
FirewallRules: [{68A16BAF-1A67-478C-AA18-8C42C3613E2F}] => (Allow) C:\Games\WOWS_PublicTest\worldofwarships.exe
FirewallRules: [{C934DB75-C881-48FF-919A-C1E86685AFCF}] => (Allow) C:\Games\WOWS_PublicTest\worldofwarships.exe
==================== Wiederherstellungspunkte =========================
16-11-2016 10:18:26 Windows Update
18-11-2016 15:28:11 DirectX wurde installiert
24-11-2016 13:22:52 Windows Update
27-11-2016 00:28:35 DirectX wurde installiert
28-11-2016 16:58:19 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/28/2016 05:07:39 PM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (11/28/2016 04:59:00 PM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (11/28/2016 04:53:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/28/2016 04:26:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/28/2016 12:24:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/27/2016 08:54:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/27/2016 08:38:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/27/2016 11:08:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/26/2016 11:06:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/26/2016 11:01:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.23543, Zeitstempel: 0x57d2fde1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000019c59
ID des fehlerhaften Prozesses: 0x314
Startzeit der fehlerhaften Anwendung: 0x01d247c350ff0acd
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll
Berichtskennung: 5687ee9c-b3bf-11e6-9641-5404a66b46f9
Systemfehler:
=============
Error: (11/28/2016 04:52:10 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mv91xx
Error: (11/28/2016 04:52:02 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/28/2016 04:52:02 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/28/2016 04:51:05 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von Microsoft-Antischadsoftware ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.233.501.0
Aktualisierungsquelle: Microsoft Update Server
Aktualisierungsphase: Suchen
Quellpfad: hxxp://www.microsoft.com
Signaturtyp: AntiVirus
Aktualisierungstyp: Vollständig
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
Vorherige Modulversion: 1.1.13303.0
Fehlercode: 0x8024001e
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".
Error: (11/28/2016 04:24:57 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mv91xx
Error: (11/28/2016 04:24:51 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/28/2016 04:24:51 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/28/2016 04:20:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/28/2016 04:20:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/28/2016 04:20:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2016-11-27 14:58:08.488
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2016-11-27 14:58:08.426
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-16 20:00:39.437
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-16 20:00:39.367
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-15 21:57:34.851
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-15 21:57:34.774
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.833
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Martin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.785
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Martin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.719
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.672
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 28%
Installierter physikalischer RAM: 8168.77 MB
Verfügbarer physikalischer RAM: 5868.38 MB
Summe virtueller Speicher: 16335.71 MB
Verfügbarer virtueller Speicher: 13931.24 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:491.96 GB) (Free:117.33 GB) NTFS
Drive k: (Volume) (Fixed) (Total:439.45 GB) (Free:197.82 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0D7E7020)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=492 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=439.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
28.11.2016, 17:26
| #6 |
| | Windows 7: DCOM Prozesstart unerwartet beendet Und noch das JRT, weils so groß war: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Professional x64
Ran by Martin (Administrator) on 28.11.2016 at 16:58:16,80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 1212
Successfully deleted: C:\Users\Martin\AppData\Local\{000B31CB-C31C-4FC5-BCFD-485B525DBA9A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0034C181-8315-4D1B-829B-710719F224EB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{007D005E-CC65-4E8B-B656-BB13FAAC9834} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{00A7D233-58AA-414A-AF40-26B8A1769217} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{00AC60F5-E67D-42F3-9300-73345E83F6BC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{013BDD48-42D9-4F95-BADD-BA485ACB4C57} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0153CCE7-EE12-4BF8-9E6D-7810147E4ACB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{018B549D-5966-4618-94A8-580AC7E0892D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{01B28C2A-AF35-4907-8F68-592D56DCB5C7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{01BF3E92-3252-49DC-944C-62CE103EB5D9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{02409382-4504-4BD6-ADF1-6013854849A9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{02695631-2CA4-4C87-BDDA-001903036D87} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{02C0E17B-3270-4A5E-BD67-3BB376732B04} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{031D310A-C7BE-450E-AE14-E816A6D6FA6E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0346DBED-B490-4AF1-A598-1957B6151D8F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0352C47C-8DF9-4731-8CAC-F484D1682513} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{03B77682-61F1-470F-AA1C-AF44A3BB38A3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{03D9BCCA-2C8E-436B-BE9A-8609E6886653} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{04396C4B-0AAB-4714-82DB-C44112A2AEB4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{04751BE8-C34C-4EEE-8BED-032C0907E036} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{04A5234A-A52A-4590-AF59-234A7D3072AB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{04DB7676-350E-4A88-B4E1-C90E6E15E688} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{04E1C26E-555D-4AAA-8E77-4F0FE308B2D2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{04F5918E-5738-4756-8D44-CDE5709098AF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{050C8364-9B9A-46BB-8A6D-E7E3D3646510} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{057E861A-F8DA-4C59-956B-D634097773E0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0589F8F2-84B5-4331-9584-5888A5D89F7C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{05A5D3F6-1082-46B2-81C4-4BF724A0CCBC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{066214F6-0994-4526-B74A-7F22B2C84E24} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{067C345D-A92D-428B-A221-15A3E8F0687B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{06CDAAA3-1EE0-4846-9219-4E1A08DE063B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{06E2B93B-C7A6-4032-A152-625AC44FF718} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{07841DC1-B615-4C0C-A5B4-9ACF289C19EA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{07E33DB9-DA5D-4972-8D0E-4CA6939120CD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{07ECA4C6-B0EB-47DD-81B9-FEB2C260F327} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{07F74123-28BA-48D8-81D6-C59D300F92A8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0845F36B-9791-4E56-96F4-99F6F429FBBF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{089126EA-3755-433F-954D-26BA40FC941B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{08996A25-7C5F-412E-B09F-CCECBE25193C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{08BD4DB6-353F-4E39-B7C8-E05F1B853FC7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{08C618D2-8C85-443C-8727-FA802B396DAF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{09154FA7-5E27-4932-92C6-117026D24C87} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{094FB62E-AEDF-4CCF-BC18-F7666A319BCD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0A41AF11-A733-4C57-8B38-301DD25AEBA2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0AB91D9F-9C5E-49A6-80B2-894C835B8894} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0B861FD7-B28F-40CE-9449-9026855AD342} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0D567F19-0CDA-4F97-87E2-3B05E92FAB33} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0DA6BE17-2C45-48B6-89F4-5D703B648ADB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0E31E19C-B6D6-4EE2-BC5C-26D097B56DB8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0E384122-802C-438A-8BD4-8D1C1C7663D2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0E3C6A82-71C0-4D64-A50D-7705CFDDBA7B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0E557971-2CF3-4D2C-B9B3-5A76AAF690AB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0EB6EDEA-7C1A-4739-AACB-3B7A5893055E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0F24A565-A4FD-4BE9-8096-F8D4ADA73764} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0F6FF062-BFFA-415F-AA23-B7D1A5654B7E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0F8A030E-E853-4C2D-81E5-DC2499BDF27A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0F94A1EF-24F9-44E4-A049-E2C53843547E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{0FE03E40-4DA9-4D18-9181-4A94AA5ED637} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{104950BE-312C-4EB8-A90F-132F5F7ECD5B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{10903EB1-1BD3-4C7D-A8EF-87254CAD66F2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{10A11DB8-4040-4131-A4FE-42CD3905304F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1128881F-4AE0-4514-A38D-8D59BA7CBB3D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1135A18D-0867-4F33-8D61-19E55D94A07E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1138FEF2-BA2C-4B15-8CEF-3DC332C3039E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1139332D-E034-40FA-B628-B453297873C0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1186923D-F156-4146-A753-3DF0B83D1A83} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{11BAD7FC-DAF1-49E4-80E1-58DA4931E64A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{11D48B19-332F-49CB-A054-22538DD51F88} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{11D4DEB1-2AA5-4386-AA97-EF1CF388008E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1223E6F9-77AB-4159-A8DC-D8BB08AA30A6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{12578B9E-FF3B-45CE-A763-50ACDF711C01} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{129A28C1-DB74-4D64-B9BF-B289225EB934} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{12FEE215-C7AE-4AFB-A4C3-749FAD130679} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{134122C0-E7C0-48EC-883C-067B2935114F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1345AD79-1000-4FA7-946C-B52FF8D8EA4A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1364125C-41C0-43A5-A529-F2851A485B84} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{136AAF26-5ADC-4901-8F07-150D6B253531} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1412BD2C-8ED4-409F-971B-3EF250C9FB83} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1457110C-80C5-408F-A6DC-0BB3AB1453A0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{14DBE96C-CC40-43F1-9E83-0E4E9CBF24E4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{152C7A88-7BC7-4AEC-83EC-1D2DE282C892} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{15D9CA3E-328E-4209-B3F5-F1F2917AACE2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{15EDF657-FC9B-4CA8-95A8-BD4D5E1436C5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{15F0C3E7-A84A-4D8A-898E-D1D3A72921CC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{161CE0FF-5A34-44F5-B1BB-A620CE11407A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{163C1760-CBC0-484E-8EC6-AF9E5B376536} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{16B991D3-336C-498E-BCAA-69AD5FC4ABD0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1737E6B2-54D6-42A8-8B2B-86260445E817} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{17656F3D-EA04-4BDD-9327-F64530D10F97} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{17663F30-89D3-46B1-9351-231B014FEBE5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{17E3F93D-5683-46C1-86F5-4260804129E3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{18758855-AF0A-4F6D-B542-A3F22B4A052E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{18A12AF2-2B7F-40F6-802F-2B304B564321} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{18B8F0AF-D7FF-4637-841A-975955A40BA7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{18C7C19E-21D3-4418-8F34-3D9DA0157D60} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{18D01CEB-6C86-4236-9DC1-CBBC6F77EC2B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{18E70338-01EC-4715-845A-00CE65CF3117} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{196200D5-0CC0-414E-99A5-7E89A8253CD2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{19E95C3A-1279-4C24-AC78-B4F8483F31D5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1A2670B8-A6CB-41D4-A7A2-5D8DC62FA55D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1AB3BD79-1546-43A9-8709-321C46336225} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1ACB2B4A-B71D-4084-9DE4-2B097B5F7AE5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1AD2FA6E-1F59-485A-8FB7-D39A1981F654} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1ADB5AAF-AE1C-49F5-A05B-88198E736260} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1B13E5BF-2DE9-4421-B9B9-816E87D61DA7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1B86917D-2B2B-4DC4-9CFA-24F2DA5CAE26} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1B87BC9B-AF4A-48F7-A493-F27703559826} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1BA8C966-0AFD-4C7F-A773-7B4FB36E7BCA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1C5E9195-4DA8-4231-8E9F-49FD79A83B1D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1CA7E48A-26D7-45CF-9A9D-68A3C71D7FDC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1CBC3656-5DB8-40D6-B7E8-CAAD68E97A07} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1CCC8871-EC75-486C-9432-914AB9405422} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1D1808D6-02F0-4E77-B404-0D15AC0651DE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1D67CC1B-FE27-406B-8EED-63702C9F7A68} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1D723BB9-DF6D-420A-9969-8AF2034B5761} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1D8E4FEA-2136-4969-9BE6-EF2288F11F78} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1DC41BD8-99F9-4CD7-B7C3-97370E43620D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1E44A78E-FC2C-4990-BF95-FE0D68E85153} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1E47F428-1875-4D08-A188-82187A9F64CF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1E8B9ACE-4137-48DB-978F-38C34E75D798} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1EDB9E2F-AA95-4F55-B4F3-AE93FE348CBD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1EE76600-8868-4C50-87C6-7C8866190AA4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1EF784C5-613E-4185-8F6A-14DB39B4B545} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1EF96011-7AD4-4E92-A551-844D717993C1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1F2798A5-99E1-4E3E-9DD1-AEBAFDC94472} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1F33223C-9750-4A5E-BC1B-990C6C6ECE5A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1F538EFC-9D1A-4CD9-81F3-7CD2E3A92589} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{1F7A2592-381A-4654-8A01-0403DF13ADC7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{208B69B3-C4E0-49CB-BC7E-9C1EB692BAF8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{20DA3C6A-8369-419B-856B-2AD35EBC9948} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{20EAE84E-6672-43C8-AAB4-7C0A81047B32} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{20F38F9F-DD73-47B3-9D62-CCB02CB27AF8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{21C125C4-C3EE-4B44-AD36-CDC516121A43} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{21FFCF8E-DCC1-462E-97F4-92469066D506} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{22DB01A0-67E9-42AB-8F09-A6A26D26979B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{22F0064D-7E89-4A30-AA66-A629CB2B44E5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{22FAA344-AFBE-435B-9222-F6ADD2FBA8ED} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{235A738F-4137-4DC1-8347-422BF09CF04E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{23685802-7A33-489A-B25E-42FBE474DE2F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{24518D06-3022-463B-BB58-2C3455C30873} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{24C3E1F8-42C5-4471-BCF1-539E726B5325} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{24CDA841-3C37-464E-9A7F-458B954363AE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{24E70763-8C25-4307-8750-435C17515377} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2518E18A-FAC0-4750-92FF-DF39CB3A30CE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2599A90D-AC0F-434B-AE63-C3F5B9A94808} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{25DA4F3C-A28F-4BFB-BDB5-1CB3493A9CE5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{25FD4209-A3C2-4258-AA44-E5806401C4B4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2601F4AB-1177-48B1-B113-CCF9755DA221} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{263AA877-5168-4F44-92C8-2DA19B96D0A0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{264BFABA-735A-4973-AB48-49897BBC709C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{26617F07-04A2-46D7-883F-D562E9494EDD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{266A07B6-C38B-4B45-B2F3-22D995B26750} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{267C565A-9F93-4AD0-91EF-DFC3EE7BF7EE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{268056D8-DB77-4AC6-8741-FD4B7F897227} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2694076B-0521-42C1-98BB-DDE0F54A5F6F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{26B59C9D-6E97-4CB3-9FF9-49B8C6D00947} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{26DC4353-B049-4090-A21D-7A8375DAF0AB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{26F27F5C-752E-46E3-97E7-0198DA80A7AE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2722490D-0C66-4F6B-8C61-4DB24B8659AD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{272B7631-4845-405D-8714-CC72CC4E5E7C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{27535979-C937-4639-9339-8047643E7D89} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{27A47374-B804-4068-9D2B-6B5F4AAEB274} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{27C556AA-4D91-4DFB-90CC-49D2B1824BFF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{27C59B5B-C4D7-454F-9C6C-FA5224A67348} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{27CFBA5F-9DA1-4BE4-97E2-FB6DF991D595} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{27D4379C-48D9-4929-B86E-042F35285B41} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{27E23788-F28A-4A52-8EF0-EBE5761742FA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{282EB3A6-BE77-4894-B796-077E119E92BA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2875A9E3-A910-46C0-92BC-EB9D1B391D7A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{28B9A9CE-010C-4E0E-BF99-4183521403D7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{295EED5B-5A9C-4DDD-A550-91F97DE4D7F2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2962B923-341D-45DF-A839-E72163F9311E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{29B4407F-0A97-4029-9321-AFE6BCC3FFA3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{29B4DEFE-7649-453C-897F-E36FA776A74E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{29F51532-C40E-48C7-B901-DBD103B35C8B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2A7E73D5-B3EB-4A0C-87BF-58941B8B378A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2A9131EA-1086-43BB-BFA9-8464F8D36315} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2AFCC413-EE18-48AA-90D4-2A1AE38F64D2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2B292608-2189-4D20-B68E-BAC7648B2482} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2B725083-0544-48FA-AEA5-97918B85FB10} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2B7C5B10-FDD7-46DF-AC4D-41458FD39E8D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2B8D2825-0751-462F-BEB1-B5D4A16A743E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2BFA8B9E-5923-4178-9F6D-28211FD1FF75} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2C677352-11ED-46D1-9074-A66071979050} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2D4D2448-0BFB-4961-8E38-D3D02F9FEEE5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2D55842A-FAAE-4423-8E29-5034864DBAED} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2DB998C1-2E8F-455A-A7E3-A59BCAF64C8C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2E4CE54A-7CF3-4661-AD38-E68837215EDB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2EC82056-FCEE-4B09-BA0F-A7D63E98578E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2ED95518-9434-4937-81C9-10CFDF041A80} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2F005C58-CF6B-453B-BB9E-79F1C7E26127} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2F95B968-79D6-49EE-ADE4-3FCA6DA86499} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2FE55A6D-8A98-4EC7-8827-3C12EA964295} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{2FF07BA3-1C89-4B95-AAB7-D8A69302F6F3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{30342C8C-4ED3-4F05-86A2-C6D6A17AE80A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3037EB69-5B4A-4CDF-BBAE-E8A1D8282DBD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{304916BD-D243-4AD3-8FD2-3ABB597A52C1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{305E4453-60E8-4748-9319-68D3600BF651} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{30AF5E0F-C26F-4930-9B80-7701E30A467B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{30CC0E6E-2C6C-437C-B1F6-90972CF05EE1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{30E58393-0693-4927-87F2-60B18F257EBD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{30EF0CA7-7241-40B7-B230-E007B52DACC0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{310BCEBC-E8C0-449B-B17E-D48EB5AB53E3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{31222592-7599-481F-8C37-718A7CEFCE5B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3153AC72-8C82-47DF-9172-A4E3305F3CD5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{31583623-4C2F-403B-BCEE-1C1988AC30D7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{31B8D695-C51D-4B52-914F-53CCB36BD96C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{31F3EB51-EB24-4BAC-A3DE-F44AC7F2334B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3210D83E-87AB-43DA-AFAA-E1E5BD7C4DEC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{323381B4-BFF6-412E-9429-71100261C07A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3285024D-5E79-4781-B6CC-C1B071D06B0D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{32A98C9F-C72E-4B1B-B4C5-C64459A49895} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{32BFFD5D-6A76-4988-BC5B-A753D7D9C702} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{32CD6056-595D-4561-8CA5-DB3102A11272} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{32DE49DB-7A44-4AF1-B8F0-E6C783694448} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{32F9DDCF-5089-42B4-A67F-ED88DD10A7DA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{332653B1-B505-4642-AD9A-CA2F28A3F5A5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3334169F-CF5F-4FA6-9772-20F6362D35A9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{334D3DA9-3369-4FDB-9757-C8BC437C40AB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{334E6389-E7A7-45C4-BE64-3E4F27A83A4B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{33FA2600-1C1C-4BCE-AC9F-EEE82D9B8949} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3416A556-23E7-4A8B-986F-84088C7B91E7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{34307A12-5026-4C29-8F06-4BFFD18E0AE6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{34427191-E77E-4010-9D19-C3C9E7458F57} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3495FAD6-E9FF-4123-9359-1B3E0C0B2A1E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{34D16305-AA75-451B-99CE-AE747C501823} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{34FEF2E4-6EEC-4E7C-A90D-7A298646CF08} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{352AB9E5-6B7B-4553-9B37-EE59C6A205B6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{355F5D4D-7901-4949-A4BB-17D5041282F9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3565A8A8-C0C7-4BF7-B3EF-480AA468630E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{35CE83D5-90DE-404B-B0F7-FD42FDF302C3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{35EE446F-0B9F-4CB3-8181-DEF2B551F9E3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{360EB073-906B-407B-A597-087D1C0CB245} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{361B58A0-9DCC-4593-8EB8-BED2FA931FE9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{365DF36B-2463-4ADF-A322-638E2CD528F0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{36A53634-7DD4-4A0F-AD56-EB9DFE19CEA4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{36BA5839-66EF-43D0-8403-AD377A8C3A1A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{36CD00C6-3FEC-4F06-8299-8E492E587082} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{36D1671C-2B4A-448E-AC7A-4FF950D3AA0F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3713E6E7-8C66-4311-B3DF-4A3DC26D99ED} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3780CA3E-FDF1-487B-9C29-3BB99EFC2877} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{378E8338-81BC-47F6-9937-3F6BE46CCCAF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{37A142A8-EE23-4899-960F-880EBFC445ED} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{37BADD49-74FD-4A67-A095-7603F94F9CE2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{37D40460-FEE6-433C-ADC0-EC8BFEA38A60} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{37F2D834-B1D5-4297-8E63-3AB327F2ECDE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{37F4954F-9BA9-4463-9223-63FC0A1518FB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3848C3C4-DA43-480C-A5E1-54CA344D66C5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3856EF54-1802-43EA-881E-9EE56B8D0F47} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{38642C8B-BDA1-411A-BA8C-1E88BF706948} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3881563F-C79D-49DC-89AF-3B3F6B8ECE2A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{38E34B7B-21E7-4000-9C4D-9725FEDB9033} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{38E865E2-C359-419B-8600-F7FDF206867D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{38ECCDCB-4BBD-445E-BEF1-CA0E53B993E4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{391EB286-9C94-4792-8DDF-C088C43BFC43} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{39E44073-49B9-4F21-BF26-91F4EACA219C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{39E976E7-C83B-40C6-B0F1-D29906251576} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3A810125-A3E5-4130-A7AC-4580DECFFED9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3A978F89-D247-42CD-9747-849DCC499139} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3AA75E1D-3B1F-4A25-AB23-F6AC571475D6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3B24C93B-31D7-4670-90BB-4BB250CE15D4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3B2F46AE-A28D-4590-ADD2-B12A6718ADAE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3BBC9793-A5F2-42FE-AFD8-259599EEFCEF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3BF65477-2936-40C2-B393-9795891FCAF9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3C206BC4-D38D-44CD-83E4-E4625A3A4957} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3C61647A-4FEA-47F9-A7C3-4B30B14BDDA9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3C9DFB9A-A8C7-4793-ACFD-794E7D1E7BB9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3D380DCA-A0B2-4449-9492-390E8357E7BC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3D595BED-8D39-464B-A320-5A70B07D45BC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3D712744-BAF5-4398-8F1A-2658811570B5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3D7B686F-F3B5-4F06-B80E-39C95ABC8115} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3DE86FBE-DDC7-443E-9443-87E56819588C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3E18CDB4-9E7B-4DFE-B363-15CB6B6B46C3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3E3077B4-4E0D-4D16-994D-5FCEF2C684A2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3E588BC7-D8A8-413D-BEC4-0716A81C845B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3E7996EE-7D3D-4443-8336-30D070D24A0C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3EB3DEEA-8CFB-4486-B2F8-CE7DEFD6CC49} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3F002EAC-FF38-49CF-A7AF-B32A357CF45A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3FC4B6D7-0CF9-4757-90C2-FD354E1C371D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{3FF62BD6-F56C-496C-AC73-20F16AD8317E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{402D8A31-06C7-4132-B52E-07274A76F503} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{40F483C1-3826-4314-9251-459A1AAC68C8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4188DBD3-164D-44A3-8D93-6A2E0532AAD9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{41FB24D3-A013-44DE-AC6F-2BFC57609CCB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{42313BE8-55E8-4C92-901E-E8B823EC7BBD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{42409DE1-6FC8-4066-B4EC-EDE0B0B36AA6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{42F3F683-1D39-42FD-A874-86E7251BF202} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4354E69A-0427-4565-8F71-F949F500ACC9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{436957D1-8BC0-45CC-A5FF-E669246AE110} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{438EE00E-DFCC-466E-A2E6-7BB3B4892A39} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{43CA640E-61F8-4216-9E36-6A7BBF4BF178} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4430BEA7-B782-4030-A192-4404925B25AA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4446AE8E-D54F-474A-88EC-9FA1613AD8C5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{444FFD60-E07F-427D-A0F7-3DF1C38F8626} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{44BDD544-34C4-4D3A-944A-A18C5D332249} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{452D69A8-E367-4571-8A67-9FC8AE8CAC90} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4554A331-FDBA-48F6-89A0-BA62412B5D1A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4572322C-6E69-4B1F-B0A6-A8A0C357B570} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{45EA8072-82C8-44E1-8DDD-821B162E6DA4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{45F45B20-90CD-4AC6-9E43-82CF25306A36} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{45FFC44C-462D-4AD4-9F0D-A631BBC85D55} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{46052587-1D2E-491F-9DAE-E7F51CA1666D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{465A4B8C-7F0C-4AC8-8C67-4DE995D7A330} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{467025CD-9FA2-44D3-8E89-33683A34A8B0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{467CA869-AF76-4756-BE86-C09B9EAF4026} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{46E287EF-FEDF-41F0-A70B-77C0A1E0149D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{475C6D2D-448D-4DE5-BC10-E22FD9C4964E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4761C87D-5C65-4D33-8FB5-C3D5FF782EF9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{47870587-7240-40ED-9DFD-E1021CE9F576} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{47997938-EE6E-4EE1-947C-85727CA530DF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{47BCD694-EF15-4441-A5CB-55E8EF031063} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{47E727A1-6E2F-47A1-A33D-EAB43B478830} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{48553D49-C6FB-4AA3-A98D-93EF2D445993} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4860F191-7FB6-4FF1-99D6-A268C5619FF1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{488CE1B5-B62A-4096-A789-5B41E872B6A1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{48B6D0E3-622A-4D0C-84CF-2B6BBA4A7EE1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{48CD356E-DB9D-47E0-9ADD-23738014C3B7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{48E13158-EC82-4209-B936-6393CDD6EA83} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{48E72788-E851-42D0-ADE3-80043E5C62DE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{493C017D-8384-4700-B707-396D21287FB2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{495D0B93-5A3B-465F-974F-D4C786E34FB8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{49A839E7-6988-4F79-977E-076499F001D6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4A35CDB9-D469-4D68-A0B7-03C78EF6D0E7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4A36EFEB-319B-4B53-921E-AE220BCFBBFF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4AB23E83-2E42-48C8-AB3C-A3D87BEBB7A8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4AC506C8-CBF9-4A06-B399-223A0DC2BF2E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4AFF4433-A584-411B-ACDF-85E79C906E69} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4B01371D-4B06-43A1-A6C1-872EDD27EE76} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4B163AB6-179E-4838-A35A-DE7770D5A489} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4B1D2C8C-811A-4A4D-B98F-60DC9395E501} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4B7E7BE1-45C6-4779-BAD8-EF784FC3A521} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4B8A890D-3898-448D-9C12-CCBBFA4D8D12} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4BC4CB8A-1599-4257-B7EF-75E5CF9C9597} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4BC7EBD5-7DC4-469C-A3CB-8710B85B91BA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4C49CF44-32DF-4154-A377-92B5CAB3F9B7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4C9ABBF8-FC40-4248-B15C-C92934A6EB85} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4CB7A21E-A7BD-4CA8-A821-2B4966F8E3C3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4CC27C92-528C-4F91-9C40-26F26DFA11F1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4CC5CDA9-BE9C-461E-950C-5CBF111933BB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4CEB0657-7A68-4555-88ED-69AE53C74017} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4D1DFBD9-D186-4809-A731-6C58A32B0E60} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4DE2EC76-FE24-452D-B972-99524485A62B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4E324972-E3BD-4573-B4C4-F28D0DD58165} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4E4CAA94-83A2-4B29-9FE5-A5414B504751} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4ED4DB78-F6E7-488C-9E85-3AA955ACF59E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4EDB0F12-F643-40BC-977F-46ABF2548F0D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4EFAC163-8769-4C94-9FFB-B2329393A8CE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4F9DA9E0-CE9B-41C8-A702-D3EAD82FF6F3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4FCB0548-A54D-43F4-8E28-7571BCEB8FA2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{4FE1CA3F-ACF5-476B-9E04-F4AAEDC8B3FB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{500D69A4-41F2-4158-8A14-D28619BDB084} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{504276FD-B685-4DC7-AEAA-CA82AB829FA4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{50E976B9-240D-4FFD-B8DE-B6A5763A1049} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{50F1E5DC-52E5-4E48-B630-09B73B4CD971} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5121CD4D-81EE-4572-83BB-19493931DB16} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5130E6AC-575F-496A-B5C4-DA7986B91C4D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{51AECDCB-3764-4411-8256-408F94649344} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{51B7CC56-6F6A-4903-AF67-4F1D067E43E8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{52131A9F-C1B3-472D-8AAD-6D0ABE0C0649} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{52423797-CBA5-4F04-BF2C-69E6BB24DC65} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5287C2C2-FEFE-46C9-8C07-8B0E477B3330} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{52988980-42BB-475B-81B2-DC6BAC5C3907} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{52B5C38C-F081-445A-B35A-2C05CAD13EB8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{52D477DB-C4C4-46B7-9FDF-96A96B69BEA5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5330A4BB-9EE9-49F0-9CC8-CFEA13323C4B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5353B5AA-E48C-4CBD-A568-5459D4DEAF6D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{536DAC9B-A31A-4BBA-A973-04E1235F0194} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{536E504B-FD1E-4DBB-A65E-A6EE3DC906BE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{537DFD68-1C60-4E05-B209-45DC963ECA20} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{541FB1BF-8B1B-45B2-849C-F8B0190DC035} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{54AA8F25-BD2D-4F84-B4AF-90DE1867D15D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{551BEF48-E694-459A-B639-8FFACA080776} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5553798A-1FE6-418F-9D0E-5431C7F852A8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5620AA2E-F3CB-465B-91C1-0C6358BBDB8B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5625D141-A5A9-4363-9026-DA00B59EC264} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{564AE3C2-ADA7-4F10-AD4B-DB819022187D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5659E813-3506-4CE3-804D-21BFFE2B1DEE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{56AA0F74-C423-43A3-A70A-7E940D3F5C00} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{56AF3771-6FA0-46EE-AD41-C35C1B804222} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{57474B89-30FF-49EB-95DF-D4FCFD687305} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{57CD8E06-BBB3-4B74-BAA8-E6CCB43933F6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{57D4D575-E624-4549-A373-D847FD33051B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{57D67C15-546C-4ADF-928B-50A3E859FCF8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{57EEF2E4-B04D-4777-AFF9-180FBF908AF2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5863041D-3B0F-4DC4-98E2-FC38EB4D4B37} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5899E174-4234-40AF-A485-9DE848755704} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{58CB67F1-E38D-4D77-9C2E-6C4E111835BD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{58D6795C-488A-424C-BA0F-65455EF3A5A9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{591A0E61-B444-4FB5-AF35-A49BFA403D37} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{599420F4-DB81-401B-9D6B-1EEE8DB1A9AC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{59DEB896-299C-446B-B702-0F0DDD08BF92} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5A159E57-FFB6-4728-B3CA-96D3DD494CC0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5A47D9D7-59BE-4DA4-9888-0D984443427E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5A62EDAE-38E2-4219-A582-1DA77AF4BC43} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5AD559EE-D743-49F1-94C5-4342636924C5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5B6B6656-BFA5-4F32-85B6-D0B9918441C5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5B91E5D6-E3B8-4A91-930F-AC4B686B0DC8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5B93CBEE-BB6F-47B8-B801-C214D1B94172} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5C0D9E7F-ED82-4F02-84CB-4F91BFD44E1A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5C1A8CE2-2820-4961-88E6-7B3D4ED058F6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5C23C83E-E1E0-4B8A-B5E2-BD249B5C46C7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5C3BD337-D768-4D9C-8C3A-49E7F39A77CC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5C900C07-315D-4F0F-9484-730F509CE137} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5C9ACCE7-877F-495D-B970-90C0E551E84C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5D0DCE5D-2CB1-4C7E-B9C1-5C93698210BE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5D2EF2A6-5538-4C2A-AD4E-F86AE5ADC841} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5D3B0974-41B6-4B54-9714-21A1E69EC749} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5D6858F6-9EDC-428E-B30D-500A7054EA1D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5D6A7097-9F88-47EB-86F7-FC4EB1068F74} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5DC669C6-456E-49EF-868F-92DA5FCFFE58} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5E014152-FA5A-4246-9BCD-486AE1D99B9E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5E45B08A-67D0-4149-9499-332F0C0851B7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5E6A6F61-A441-4443-B3AF-119DD6132997} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5EF7A356-47E1-4F0E-941A-999CDA8183A4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5F220270-7A52-4E9D-A4D8-040FE95D8957} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5F46F3EA-A055-4FDF-872E-26673E0BB1E3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5F56E38A-7871-4F95-85AD-521C0C59290C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{5FC7024E-7C9F-4592-8513-81C3257D6898} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{606C8D7D-F6E1-495E-BEF3-93031EA7BEA5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{607824A2-F02F-42A9-BF19-EDCB9FAE4E1D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{60ADD141-7FE3-40CF-B122-89ACCCDA7D29} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{60E9CF3E-8BA0-4C8A-825A-0F2555AA3F44} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{61ABEFD3-D52B-4D85-B1F3-D30DC06485DE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{61F91A56-6767-470D-A8E0-EA057957D536} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{624ED759-FCA6-4347-B058-A7A905FCD0BA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{627DBFD9-7FCE-4263-83BE-869F657242A1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{629D41E4-2E4E-4251-9A34-91786EF743F3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{62AA9F09-C5D1-459B-AEF7-63DF2EF4131D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{62DFF534-49F1-4585-96BF-4A93C3C00216} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{634F37D4-FB72-4897-8903-F6E42B43C931} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6366572B-0247-4AB2-8931-22DFD7D91F95} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{637A28C2-2271-474A-B747-8B13ECF9E6B8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{63C4789B-1B1B-4F3B-BA1C-4112C7D0AE79} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6417CB92-0C89-4501-BFF1-6F0AEE65A7CF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{64442DE5-70F5-4DBA-B5CB-97EC53635529} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{649EE24C-9CE3-4F96-8056-F6A83FFE4B39} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{64EA5F3A-C8C9-4D4A-BE68-03C24D0FAB71} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{64ECFA3F-719B-4687-98AE-4A339C943667} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6555A21E-8146-4A10-BD05-EA05F898A17D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{65A6807E-87EA-4517-B101-DAB45096D554} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{65C381E1-A1D4-4046-A656-7935FD026099} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{65E9016A-9628-4E71-B9F1-5BD0BC08214A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{66018F1A-D6AA-454B-838C-03B380106E18} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6612D43F-D069-4CD9-8EDD-8F537C734193} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6616A2E9-3AB3-4FC3-A9F6-FC1225382B98} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{66389A3D-E4F9-46A0-AD80-53D44560ABA4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{663D4BD8-4FCE-4208-99C5-E4E9502ECA9D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{66AF62AD-04F5-47C5-8239-145902254DE7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{66BA755A-488A-4A19-9F39-781F37974CF8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{671C992B-8E34-4C09-9C44-E71BBC1C386D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6720A78D-2638-4626-86FD-F2A354A4A531} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{67A1159A-F009-464F-88F1-6695A34A2C2D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{67BC5810-2CDB-4F1F-919C-CE6A3E547CB0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{67D6D6B8-276C-430D-9B19-C33906478A5B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6812FDAB-9DF3-4FCC-A681-D828EBB4EE1B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{68259C67-A75B-4BBF-99D2-4D3E2A1DDDBE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{687070B6-6AC4-4287-8356-24BB12744490} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{688115D3-9C05-4A32-8944-03E70FD2A28B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{68B2B961-F483-4406-8485-7EE5FD57A4A0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6926A613-F146-4C0A-9879-BF256EFBCEAC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6941F571-4265-4C09-BB05-561240CD5802} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{69C93A81-4D73-44A8-BD73-91F1CA43E615} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6A075458-4750-4480-88A8-36EC3C25E2E2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6A442C43-5E04-4844-BBF9-3B94270C25F7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6A7D0F1D-B362-489E-8747-DE381A5A65B4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6AA8A960-1A93-4369-9F1D-68E903A2D736} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6AE90111-EAD7-4424-946D-F68D2137B480} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6B01F964-1E71-476C-95DF-DDC20C349770} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6B24AA30-F8DF-405E-80E2-2D461D6BAB5F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6B932A6F-9FB3-41EC-A1F9-6CA744179B2F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6B93E231-469E-4105-B95C-5BFCF3C24F06} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6B99AFB0-A304-4F0A-B2AB-137750991CBB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6C0C39B8-94AB-4E71-B962-A6E94313BCD0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6C6AE8CD-1C88-4D30-8B7E-34CB9D7EFF62} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6CEA3DC1-8001-4801-AB3A-0B7E694EF5ED} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6CF3C409-46E7-420F-ADB3-5E47CFE6312E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6D09EA9D-E8E4-4257-84C2-7E4E94BC5090} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6D8095D6-4F89-4BEC-BD04-BBAED6ACC648} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6DBA09F0-49D1-47CB-B3F6-D1AC8140F95E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6DC43885-6A45-4B63-89C5-59CA2EFF6E4C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6E0D3D55-5D30-4A66-932D-ACAE4E8D2273} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6E606FB0-CF96-4EF6-960C-49CE26A1BACD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6E8D216B-4D67-4C3E-8FEB-7D3443C9AF09} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6E8E8BE9-FA86-47A3-BE2D-1059134C414D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6ECA53AC-B668-4FF8-9632-5EB74020D751} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6EE39C0D-3A7A-4F28-A34C-49B00A189657} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6EE981BC-231B-445F-A210-93832EF87F82} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6EF55A49-F111-48B1-9CA1-BD93A3D9C5DC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6F1162EB-070B-4359-8B3B-515999A7D140} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6F22FF2B-D2B2-4A8F-98A6-BCCB695D4A18} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6F230631-94B7-4D53-A2B9-C686C20C7ECC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6F9BFE79-6CE2-4221-B5CB-A73393F103F5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{6FAC4321-E6CA-4E39-AFBB-23C5E461CECD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{700F5AAA-FE40-433E-80AD-B454FDDC7857} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{704DEC85-BFC7-4091-9A60-BF6B7EF94A97} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{706D42A2-4B77-4EC4-8082-AC9EC3FFC60C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{709F6517-C591-4F31-900C-989F185D763D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{70E8055B-D32F-4D60-BB51-8B7F6F965B06} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{712AAF72-7163-48E0-BC82-53FCD891996B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{712CCFDC-A9C9-4A7F-BDDA-074A70CA7340} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{713F311B-A00F-4FF8-8B10-E3A6EF906F81} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7251B4C6-4B25-4173-BBE9-4B4C16B92B2F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{72B01008-4408-4A55-B01C-9F301CDB183B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7332A3A1-5B70-4624-B2D4-E642F51D4BE4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{734F9739-75DF-48C6-ADC0-D8D82B230241} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{73588EF8-838A-446B-8D71-BE6434F7E574} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{73711BD9-DBD3-4983-AF35-53928322B6A9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{73A5AC17-3558-45DC-A087-11C58270DBB2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{73AC7452-A0E7-4076-A8DD-96504E2D4FF3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{73E2C77C-489F-46B1-BB13-365A5CDF2C8A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{73FD0718-1192-4354-BA70-737F777B9CE7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{73FEDBE3-6890-4E5E-9513-62A70229DD3C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{73FF67BB-86E6-4EA2-B114-E7E2DA4BCCD0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{741833AC-7B46-461B-8EBE-34CC5688C05F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7420E079-7E9A-47A6-A43F-D9872D26181F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{749AE4A0-19A2-4627-B492-C3C95D8CCA95} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{751C4F57-CB68-46E9-BDE1-24F57E87FB0C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{751C9AFD-72DA-4654-B0FB-4911FE8DD079} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{753CB303-FC17-40BD-9CD1-EE792FA53696} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7545AF66-0838-4E3B-B35F-CFE74DEEF05B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7548ECD2-3A8B-498C-8CCC-A36F59EE3E45} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{755AA84C-477F-4EAB-985E-A462067804AB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{75686037-C16A-4C06-A2F2-A5E695508B4F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7573ACAA-9D40-47CD-8990-77A11DC7F3ED} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7580ACE3-F822-40E1-A16D-2A2469394ADB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{75A2DC7D-A936-4B9F-8048-6B626109886B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{75EB73F5-B052-48AF-A950-8BD44D67876D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{75EE8AF9-F6DA-4D9A-893E-DFC02E0B9C7B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{75F8BE11-1454-4968-9B78-123890DBD34B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{76396F90-8D29-48E7-933A-1D74337280D3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{76811556-CC13-45D2-B26C-5245301087E0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{76CB8CB3-1CC1-4654-A090-1CE1DC06A816} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{772E4FEF-AE2C-4AC2-95E9-EA8AD93A9A11} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{773DED81-7F3B-4ACB-A90A-2A22A75A908B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{77637821-009D-43EE-902E-4E26AB4EA1B1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{77F95F39-67B2-4EA2-BF00-1A02493017DF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{780F2AE9-2A3E-44C3-85C1-BA7BF8CF03EF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{78B7FCB7-972F-4038-8039-464BA882746D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{78C9954E-556A-4333-9ACB-F870911A7066} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{78F4D73C-EDA4-4A48-8563-67795B0F22C5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{791F5B1B-8BD6-4DA3-8BC2-E7677EEE840D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7922F401-2ACD-4DB4-89DC-A56611A1C07B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7986A748-6D34-4064-9A91-52A06F881209} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7A1396B6-7B80-499B-82F7-BB7270A3BC75} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7A829B64-18A7-4789-B7E4-3C3BC1C16788} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7AAC1E65-E8FD-491F-9037-8CA54ED9D488} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7AB4362B-A2AA-42FE-A0A4-F9B5F1C314FB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7AC3B18D-1ADF-445F-AA08-629E2DFD10DA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7ADEFC5E-0CEB-47A0-B46A-354D1C633024} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7B0B224B-9800-4095-86E9-C4FF55E61FA7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7B49FB23-730E-4459-A5E3-E4DBA600C5B3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7B4B5485-DB47-4362-A835-604C8D7C74EF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7B5EAA31-4FB6-49C4-AA45-FE5D38D35612} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7B6B3D65-4BB4-4601-8658-C249F867EB5F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7B760EDA-C21A-4097-943E-5B8D3F5235C8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7B99BF7C-9FDF-4FE6-B4E5-6C7B39FC5A05} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7B9C8B03-31A1-47B8-A9BC-76980F7AB8FE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7BB10FE7-4E9F-4317-9B39-2303A461F8F2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7BDFF5F3-E84F-4DBD-942C-9B72855950D3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7C0B6F42-3AED-4C05-8507-8DAEF860505D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7C5A48E2-9694-457E-90F8-2D2901938A20} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7CCD1357-E241-4A42-89BD-39402F324E25} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7CE2CB16-3923-4969-964B-E90A74D63D29} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7CEDA2DA-60C0-443E-B681-631101E471E6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7CF54268-AB5E-4188-8EAD-231E2C436659} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7D0B179B-99A9-47BD-92CD-BCBAA4D17BCE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7D6FE92B-07FA-4A7D-9F7E-300892C2E178} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7D8DC488-06D7-430C-A076-B3ACC33A5659} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7D9F5B34-89D8-46FF-AA7E-4B86FC612FB8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7DEB1945-61AD-44FF-BE8D-275E2DA59845} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7DF673B6-93F2-4E20-926C-E8F3934C8463} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7E4CF436-EE96-4902-BD99-BC9ABAE7D754} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7E8C8434-E4B8-4114-9250-BEAE4F7A931B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7EFD6670-8EBD-4C55-A237-0DD642D97291} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7F4BF03D-EB4E-44B8-B5EA-553495F70CAC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7FA02236-4000-461D-995F-831903E99FD3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{7FAE5A9D-ADB6-4B73-A78B-107450FFF80F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{802E97BC-52AF-4D6C-A41A-7B9794C08EFD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8049CACF-CFB6-4CE6-8CEB-FD292AE941C6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{80C165E1-D81A-478A-A147-1CBD5FC16BAB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{810695A0-CA01-4999-998E-1B380F0A2F62} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{82385182-AE25-42FD-9A90-32EBDE8B1484} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{825DF7A4-4B1E-4C80-830D-02B0096B4847} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{82B96389-40CE-4DC7-861D-77342BF3BDF6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{835F88E4-52F1-4785-B4BA-D99C3BC1C481} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{83AEF6EC-BBC1-403C-8761-3D4A7EAEE13A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{83B0BCF4-DFA8-4C78-BE4A-FF3B2C4AF291} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{83CA8663-62A3-4BDE-A862-659577686A49} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{83FCE19C-EC89-4AFC-B1B9-DF7FBE33FE41} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{843D3514-5430-42C7-8D4C-B192F2AE8436} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{84CA57AA-6FE2-4D59-BAAD-D4D8EFF917C7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{856A3483-08FB-4590-9FCA-2C839E144DE1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{857BA1E0-E65F-4C15-A5BF-A97CD5B9B326} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{85930B6F-5AA9-4517-AD57-91DFDE8A9B5F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{85CACAA1-2D51-43CF-92DD-12DBDFA3C66F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{85F0A7E7-444C-44C5-93E5-932412B39B8B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{861E0C47-B33F-4E8D-BF94-0B7679F07E55} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{86B3131C-24EE-47F9-8E01-CBB77C73C582} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{86C32EA8-AF8E-4358-A6DC-0F52CD9D635E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{86DB052C-B163-48D3-ACBA-F3C3D5E5608A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{872C2A7A-B9E6-4669-BEC6-1A125AC3F516} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{87732031-750E-412C-AB21-EA7953C9FE64} (Empty Folder)
|
|
28.11.2016, 17:27
| #7 |
| | Windows 7: DCOM Prozesstart unerwartet beendet (musste es 2-teilen) Code:
ATTFilter Successfully deleted: C:\Users\Martin\AppData\Local\{8835103F-2DF0-4904-A7C0-A5926FF55F1E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{88A62B96-6A2E-411A-8AD1-4D860E8F39EC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{88B4EA55-6A47-4DE7-9173-C622D7332378} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{88B83E87-FB0D-40B0-AD84-06FE736550EC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{88BF565F-8CAD-483A-9BDC-403745A9CEBD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{88C73083-AB88-4E0B-B5AD-194D317A6E2E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{88C8138E-6755-4045-A8B6-B56D9FEA8243} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{88D969FD-0A22-45F4-8D17-D4CA68A0DCBC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{890B3A05-48C2-4511-BADD-5EBD3B7250FB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8920860F-E0B4-450F-9C73-D9DDC07EC5C3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{894D39E3-989A-4D28-89BC-28F58C7526F3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{895E5227-849D-4A37-80D2-0888D2C7EBDD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{89755091-7C93-4F74-BF1B-3310DABFE025} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{897C05C6-44D2-4D28-9E23-D0FCD373B323} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{89C9BFDE-E13A-42C0-ACA0-DE52E78A54EB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{89DCC0CA-9F7A-4438-9FC3-D07F69F6C313} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{89F7FF34-F86C-423C-9E8E-03D7142B31E3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8A004BA3-557F-4402-AF9C-204DD1EBFDF2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8A8D2EBB-E720-424B-BA46-B038B3A65AE9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8AE0C392-A5C3-4FC1-A314-9A740DE93050} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8B72330A-483D-4B1D-B735-B99E54436500} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8B7278F1-6DE5-4333-9B2C-6E6E05B016C4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8B90ED51-DC51-44B9-A8A8-C29CA7A0006D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8C14FA15-BF9E-4E3B-AD96-6D525F5C988A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8C539572-23E6-456B-81E6-06E97A2D58B5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8C7E6A73-53A2-4CCB-9BEF-23AD34B321DE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D07E08B-92FE-4AFD-A989-87CEECD6E631} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D1A3552-CE1E-444B-9595-EDD89A5EE774} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D2418CD-E4BE-4BF2-BE95-198389D13E81} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D3DCE8D-536C-41EE-8848-643820E85336} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D53A7AA-FE5D-4A11-B490-0DD2109447FE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D58803A-07AC-4D0D-A59F-974965422453} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D5B9C50-8752-4A0B-B846-C111BF6B017F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D6CDA56-4DEE-48B6-8E0A-81C63F317218} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8D883C9A-17FC-423F-9638-DAFAB7EA2E92} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8E280B3B-7709-433E-B26F-91DCCED28E14} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8E7F43E7-1BAD-43B9-811F-466D8854E838} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8EBBA257-CDC9-4901-80EE-57A67970E03E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8EC0A1BC-2616-4C34-BEF0-803903D99DB1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8ED2D92B-BB2E-4976-B12E-477483126D71} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8EE3A75A-22F8-408E-886A-87C811FF8C90} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8F2047C0-D2D5-4F31-B655-8EB309DE308F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8F2A7740-ED60-4BA1-8A80-D5AB0004B810} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8F639ECF-0C33-4B66-B230-2484D050852D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8F640E57-65EF-4A61-BB03-D9975CE874F8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8FA9AF8B-1EFF-4421-A393-E601CAC3608C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8FAC0719-E7F5-4DB1-A768-91DC0F745C25} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8FAC88B2-9FC3-4201-A3E4-2BC716BBB70C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8FCE97CE-7B6E-48FF-9638-E543669C05BB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{8FF8C62F-5343-4D78-B1D2-DF16EA264C10} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{901CA46B-1321-4DF6-9D73-82C90BD92924} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{901D9E83-48D8-44D5-B0D0-19746B834C03} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{90249D25-D1BF-4113-960C-5EEA44937EDF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{906226A3-4CEB-4BF6-966F-284F55F08CA4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{90C345A2-9D58-487C-83CB-D17FEF3C12A7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{910D389E-C256-42BF-BBA0-0C88053DE3F4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{912C84FC-13F8-4E58-8771-E2CD961F95E6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9221676A-E1BA-4E59-8061-4F581B986F0F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{922EB01F-9380-46F4-973C-E464B0AC7EA7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{928F8ABC-CA85-4528-9091-AA0933A60852} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{929A8D9E-742A-40B9-AD9D-8EA5DA12CB33} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{92C375A4-3CBE-4E42-8ED1-B00138435283} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{92D0641E-5128-4F96-BDBB-7A0C404D65D1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{92EDECA7-E82F-4BFF-94FB-B35338A02437} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{935128D8-8C7E-4BF7-9201-3D4029B95322} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9365DD40-130A-4C42-9615-97DE667777A5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{93749CAB-AD18-452E-8814-9E39A6B01E9C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{93786E2D-763B-4FB8-8CA8-B9488314D3AC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{939E80D3-5EDC-4C29-ADCF-7BCEB1ED6BA8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{93ED7FF0-DF68-4E5E-8C5A-ADD1886DC89D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{93FD5E06-8FB9-44B1-9F78-AB8593B1DF57} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{94589397-D8E8-43D3-A780-A138A3D7633B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{94A83812-AC2D-4BD6-B57D-57B2C40C9165} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{94D0F96B-53B7-4ABE-A84F-11145BDDD052} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{94DA617B-29F4-4509-A3AF-49C9E0770D8A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{94E3B2D1-90D1-4CDE-A26A-A0AD7665601F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{94EDCC46-3CE5-4209-8062-D5D18CB54840} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{95195D25-4C5A-4D39-880B-96AAE77EA00D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9543601A-7B4F-43B4-8785-16A749D1FC4A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{957EA581-2FF7-4999-8B4F-1A290DBDA746} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{959BC1A6-E628-482A-808D-4D38FC325F81} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{959D6417-2918-4D64-8EA1-911D15E49F41} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{95DAA2AF-35E6-440D-A98E-3FA470055E4F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{95DC2148-BE97-411B-AEE7-15E937D67E1F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{962C1E77-9227-4074-9B8D-D10F4765EE16} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{96745036-85F9-4E7F-94C2-FFCC670420A2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{967C83B4-52D5-4219-91A7-E1D4CDB67776} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{96C2157A-505D-4DB1-98CA-CB1E17EB9D38} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{96D41BCB-196C-447F-AE48-245E4AD5659F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{96F1E66F-6638-4A26-9F11-4EDF8C8B5719} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9720FB93-74D1-42DB-A464-0020C72665D1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{97623E75-3BF4-4A36-9744-D183365BBA28} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{977CEF87-F53F-4AC6-9229-C9CFAD59C6C9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{977FE900-EDCF-4C93-A91B-5D67426426CC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9795B19F-C28A-4D6A-AE35-4DEC26F21425} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{97A64ED3-692E-40A4-82F7-9B685693A1CB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{97DDFD8D-8840-49E1-AB1A-A6982AB1DFF0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{97EFD4A7-4402-4DF8-BCA9-A73130587964} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{97FE8CD9-EA4D-4E2C-BE1C-8726CA183157} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{98576F05-32DA-4CDC-BB1C-115C542DAF15} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{989313FC-D175-47D5-A89D-83A98D203FA1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{98A40568-EC27-4BD8-B9CA-921C56A8C99B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{98CC8825-559D-4E15-B010-49AE2CC86C28} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9900040F-1022-4842-9F0A-28205D5032CC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9913CA13-0CAD-47DD-BBD8-12DC499168C4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{993CE215-73B7-4C6A-A19F-44DBC8D23739} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9972AD26-33B8-497C-9276-6A1BC16680BD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{999EC177-2C81-4210-8580-2D5CA581CDEF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{99A6139F-62F5-44BA-B24F-6E99D0640B77} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{99A92E5B-3F82-4E0C-AEFF-9C2D63514A63} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{99BDC5DF-B473-4856-AF4B-AC85D4F931D9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9A1F9EFE-3EDD-4189-B304-D5B3CADD2A1D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9A7AD660-4EBA-417C-85DB-E8A62CB7C685} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9AC0A024-D59C-4FDC-BB2F-3E182BDC2553} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9AE29C84-B907-4F31-B4D9-A22FB7F64F61} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9B57FFF3-B8DF-4302-9F45-5F70A40F9091} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9B7AD396-2CD8-4057-8EDD-4504A643FF67} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9C288DBE-2D01-4F5E-9C86-99892FED6B15} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9C3CED36-CB9D-4AB8-A51B-1EF8FF7906CE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9C6A606A-18B9-408C-A335-6B18D66CDED0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9CB25156-4E94-4246-A99F-6A32651109A2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9CC18674-2E72-4373-B784-809742F40EC2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9CDBE367-A6A5-4A9C-A624-408E240E5159} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9CE87BC0-24D2-44D9-8DB9-CE4187721EAF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9CFDF18A-D96E-4342-A541-9867F9404522} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9D6377AA-9E7C-4D72-9711-996C1ABD6552} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9E1D2A80-DB3B-4949-BA13-669E86D8623E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9E26D63C-E309-4D69-BE5A-F27D8CFEDB1F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9E58F5FC-2CEB-4C51-937F-F352EF4C162C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9E6192F1-7A67-4148-833E-12B6C8FF15AE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9E905253-553A-4A05-AB4F-79C1072C854A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9E908EB9-75C4-46F6-AD0C-F9566A5D14B8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9E9EE769-57C0-4D8D-ABBE-6E60AEAA65CE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9EDE9779-F151-4722-81CB-786057B23F5A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9F056FCD-57BF-4633-9915-ED6C3EB5C4DA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9F125E05-2322-4CB8-B77F-A15E79B2109E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{9F4757E3-7987-4359-9F94-78551C9081D0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A01DCBB8-F367-4303-A01C-BF2B0150237B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A026879A-75A2-4A88-9C85-DE8EE2FAFE93} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A050A33C-02A0-4F8E-920A-FF044493FFEA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A06B6E36-A6FF-40D6-9DD6-6C42E64E80CA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A08F48DC-83C3-4618-A741-3860C91FE189} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A12FAD3B-A4BF-4B2D-AEB2-BEE7F55E7073} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A19E40BA-DA68-4FA2-A3DF-A4DC9BC6847A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A1B1558F-749A-4922-9367-B8D8A45A24AE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A1EE9060-AD61-4ECC-B44C-7E69B170964F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A1F6CD30-09A3-4444-B26D-664FA51F900F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A2054C89-C351-422E-B6E3-C8FCAA742D31} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A20ACBD8-6568-4D5C-B0FA-C6CEE82EA6AC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A24C0610-9538-4AE0-B4E6-18C496D84717} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A2CD3418-8179-484F-8CEA-F0BBE9146CF3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A2CD798D-515B-4109-8731-1F3378BA071F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A2D6D2EE-1767-42FC-BCCF-9DE4864A92EB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A2DBCCF8-8E5A-40E2-960E-579B22785A6A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A2E8C5BD-B8AA-4E6F-A9AE-220175985982} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A323F269-87B9-4CA5-B69B-6B4C0E1C4F0C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A3D1D7EB-3BDA-43CD-80C5-9B903CE73F14} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A3D76A80-A195-49E8-B38F-A8C7DC2C2437} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A4079943-271D-4AE1-8874-F9158AE013B8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A4215C43-E7B0-4DAB-BD52-17A846A7E05D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A43A3D60-CD6B-4867-BA0A-F39DFAE634D8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A45B20E2-8675-4F9B-BCB1-1A771D082668} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A518E1B6-7649-4D0D-A0BE-34615F14FF31} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A535D1DC-B0F3-4C1F-9D27-00AC3B30B084} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A542F0CC-C94E-47B9-A0BA-9B94EF6D7A8B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A555EE66-B0F4-4A19-8C05-CAF6E145D029} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A568C932-C3CD-4BA2-8EA5-963E6AC0F029} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A571A553-579B-43D8-AE10-33F81C4AB132} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A5F184E3-1292-4FD1-803F-F38D69CAD1C0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A61DC2DF-69F1-425E-B7CD-F61A5F94994D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A63894CA-130F-4774-BA27-ED1A7E810CA6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A64E69C5-37FB-4D94-97AF-30388B222076} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A67EA420-67B8-420E-8438-A93E719C3AA8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A68C7A24-CE98-4A51-BD83-2E2D73F7393F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A6F1DA61-76EA-4287-8919-B6F1AF70BD80} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A7003368-4177-47F1-9D3A-E04E01D44911} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A71D9291-DB48-4277-BC0B-29C36E4012D1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A7BAF79F-F62B-42AC-8DF4-D1D196392FE2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A7BCBA7F-1A68-4B67-904C-FA8782FDD107} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A7D427CD-7F6D-4A14-9CA8-FDC0220FFC79} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A859EFBF-A93A-4509-B596-0BE1FA389C51} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{A8E7EE4B-18FD-4A5F-BD3C-21F05012286A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AA38B50E-8AD8-4DA0-9BCC-C64D34257DD4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AA5D4E1C-C061-4CF9-A33B-ADF5FEDD81C8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AA6A70CD-D7CE-4982-8CB5-14A3420C5AC6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AA842A90-012A-477D-8162-8FE7FEB5B065} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AA9B8122-EB0D-4DC6-A242-41603171FF88} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AAB9AD2A-5F60-460D-8E42-B1CCE5C1D1BA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AB033066-7F9D-4BDD-BA4F-7787D04F3278} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AB32C86F-D607-4461-A099-C05F1C3DA7E0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AB3FEF83-1A85-4454-A28E-C6BA81193029} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AB8BDE8F-277D-4D32-BDFB-E3A3E103B0D0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ABAF20C2-16A6-4BB9-8AF4-CA3CBC4E9524} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ABAFE55B-0410-4A32-B6DC-BD97A3AA2B04} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ABCB69E5-3351-437D-853C-447172F80A55} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ABF47DF3-D06B-4E11-8B57-41AC57EF426A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ABFB72D3-9BC2-4C2C-8871-0B6CCAABBEAF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AC1F08EB-F5AF-450C-B327-D8ACDC0B58F1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AC6A24EA-E084-4187-87BD-A84096639901} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AC88B706-6510-4184-AB79-BC5F6C245D1D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ACD6E7CD-ED9F-4B6C-B7ED-C94DD33260F8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ACE46C56-3AFF-4BEE-A1F9-C82616480579} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ADDA0B2A-110F-45EE-951C-356387811432} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AE02BEE3-CD06-400E-B982-BBED002B26A6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AE227D7D-30D3-4D0E-8A4E-49F88FDCDE8D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AE3E7A6A-9098-4274-BE18-2B4041882FC1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AE5A4130-9491-4FC5-8204-1F21CA96958C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AEAF568E-D9CE-463E-AB59-B890B6B557E4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AEF2A8E2-2B33-4FB2-A9F1-4620F5518B14} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AFA7973D-FD39-41C9-AE71-775E2EAC4C75} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AFBFAA98-5EB0-4162-87EF-8537B5B3358F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AFC0EC4B-BAD4-4916-884B-D6C8D57E6783} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AFC81D21-E432-431A-AA15-24631EDE014B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AFF0C773-D959-4135-878D-5499FDC69803} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{AFFA853C-F5F9-422E-BF6F-C8B454E23AAF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B002CCD8-77A5-43B7-9275-D221E72C22D0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B0AE29C2-2405-42D5-890A-9900492AC2BD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B12DF6A3-0834-4469-A03F-EE032A01C799} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B16CA871-2632-437A-A2DE-0E44656C7489} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B17FB9AC-0248-4A2E-833A-13E4E78B11BD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B1E7A707-80FC-46BD-8B75-93237600398E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B1EDA393-C527-485C-B437-8BBCF4B359C5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B237050D-F102-4A9E-A0D2-2CA4AEB38A8E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B2396254-84D4-447B-A238-C512564DEE27} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B23B47D0-1132-4119-A836-B43D3335BB05} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B26E8164-3D53-4264-80FF-3E9B0E33CA3D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B2FCBE28-18B4-43F3-A279-F8FF18224794} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B329ABDD-822F-4B95-8690-280F2E8B3E7B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B3BDCBC7-A68E-41A7-AF22-B3C9B7455BEB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B3F355AA-867A-4686-B725-7B6758ADC3BA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B41AE773-768C-4D50-911E-CCABE62DCA2D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B43572A4-92D6-47D9-8993-2FF3484D17AC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B44C4423-2D8D-4507-A8C4-629D54E24EDD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B4589910-5F5F-4BC3-B4CE-CD23B789EC18} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B478CC1E-0F84-4881-83EA-D668DF20047E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B488F014-1613-487A-8060-7432EB5DE943} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B4D57667-7E1B-4945-8210-4E1A2A221132} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B4F7959B-E414-400D-9086-67571F1C3674} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B5101E3E-2C8C-43EF-B29C-0EC815960F44} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B520EDC6-BB93-4B21-9993-E3B2DC13CD58} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B5468532-5914-4D33-968E-849B2A46A77A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B54B2321-42F1-4587-B3B1-0B1723897855} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B571FDE5-BDC1-4712-8930-E4CAA90F9D16} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B58137A2-4240-4ACA-A292-AEC5D2D154BD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B5888EF1-7010-4C9B-A4D5-7DC6372E5E62} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B589DC6E-0F57-405E-96A9-626CB7418D65} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B5B5DB94-28E5-4DE2-9683-D40F0F78C180} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B5B8FDBB-042C-47BF-B5F2-8170478875DD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B5CF8D76-D1C7-4460-8D6A-660089213323} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B5FE650E-73B8-40F1-9E94-80031E211F41} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B62D75B8-2909-4752-AFC3-7223D72B1904} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B638ABD8-74B6-4D44-B4F1-79C3EB98C75E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B67ABB90-20CE-4BF5-9DAD-3A7891EDA1A9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B687D6D7-6496-438F-AE47-B89F15099194} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B7184687-0600-4AC8-82A6-8485F658BC70} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B72B85DF-CB3C-4F41-BCC3-64DEE63286C2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B7836955-ED6D-46F0-8D54-8492CD17CFA0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B79CF665-7751-4A2D-9256-07E74B5C9AB0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B850841F-DABF-4DB5-9CDD-9CAD6772FDE6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B8589DA0-A67F-4F88-ADD4-BF64C21D6C21} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B8B1E953-161D-481B-9F6D-E2FA4663A884} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B8E502D5-B38C-44B5-ADFE-72CE661C7D9F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B938C384-F3BA-424E-94B7-40D28F980E0F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B99712E7-8472-44DE-B084-B780CD232E67} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B9B736BC-50CC-4A15-A216-7159EB69A6C8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B9F59FDA-328A-421E-B1B8-7164E09A8E3C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{B9F8A4CF-FC56-4666-9636-3218C9422120} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BA18D865-1FE7-45DC-A520-C3EB001E169B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BA1DA679-CEE5-448A-AA46-B5578E2DEB93} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BA3FA773-B3C6-4362-85E2-797B531B9C90} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BB22F7BF-2CB4-4C0C-998A-A46ADB68FDC6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BB5A5A86-9BB3-4F27-87A7-50B8ECE0F9A7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BB6E4237-6BD3-4336-8BFE-B7DFB1825C9F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BB8BBDC0-9934-4751-AE09-E823F77F3848} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BC189A9D-5B37-4B17-A287-EDD3408556AE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BC68F848-7116-446F-8C4D-74F1305D78CC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BC84FAEB-38E4-43D9-925F-2A5C5805C1B1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BD2387F8-EB11-4A5A-9E7C-5EADE1552A39} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BD245ECA-05EB-4B3E-B9EE-D4D6161FB8CD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BD4B8DDB-FDC0-433F-B0F8-AAD2E2C9BA5D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BD5B78C0-A916-4B37-B26F-E687CD18A54D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BD9B5EB8-EA0D-4007-8393-14057723B78F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BDB120DA-FE34-4348-9147-FFEC6F4BEFB0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BE0E3CE2-B475-4A3B-9305-D8E2D3DD1B42} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BE1748DA-1291-49E0-A2E1-1C5BB4BDB309} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BE2D7081-EAB8-4487-ACEC-3BF2DE083F3B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BE86EE30-F0C0-4B87-9B16-B50F71A493AC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BEEF01F2-A6EB-4CDA-97DD-17ED0AA91385} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BF1D2F44-4F7B-41AC-A3B1-B7D7B7F72625} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BF739148-44B4-492C-970C-933E18091625} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BFD75C5C-5200-4269-8D1D-3BC4B619A103} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{BFEACC73-7797-4916-934B-E6DB030E741E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C06565D9-A6AF-4EEF-B74D-9183A8E57149} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C08834E9-DBB8-4892-823E-1F388A1FEA01} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C0DBFCE2-5B86-4504-B49A-7BEF4B3C603B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C0E03BB1-7F4A-4AE0-B384-492CAFC67B37} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C132BC72-8D3C-42E4-AB4E-735132465E07} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C16DEAE8-F63F-47B7-A567-3CC458ADF415} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C181875B-0EE0-447D-AC98-951252A02A74} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C19F1121-F227-491B-966C-C13AA4FCF2CB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C1E7B001-62B4-441D-9618-516C4B8B1531} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C2018D60-537A-40CC-8A14-759CCD441A86} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C210039C-F120-4C65-B251-E2746EAB8913} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C21276C5-71CD-4FD2-8E53-262109BC47BB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C236F9D0-F11F-42BC-B3BE-3618B8C66AD3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C280F9B4-2E35-4C71-861F-89392E11122E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C29539D3-5638-4C74-84A8-03BBA17ADB42} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C2A0B6D4-353D-4D03-9FFA-C6E3C1E1B081} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C2C1ECFA-2BAD-40C8-BEF7-E019143C579F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C2E5FA41-67CC-433E-B7B6-97EF32F9A82D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C2F0AABA-4750-40A2-8184-8B4E1D0C0454} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C31F83EB-C69D-496F-AF4E-E0B610DFD75F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C3AC07B1-F9F0-4B91-8DD2-1FF24AAC4951} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C430B84D-9801-4058-A68A-247D60178185} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C4341608-AC97-41D5-BEB5-8D22C18ADF15} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C45F0FB0-5F3C-42E7-9433-04603C625D92} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C4B9D5A9-BF83-49C3-98A9-AE629EE08462} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C500DF29-3780-477F-A1D3-811AFBDF6825} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C51492D6-13DD-4B35-BDEC-9956A199E6D4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C5393A2E-12F8-4122-8D2F-02EEC554EE9B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C566440B-B7A4-4730-90D1-CE62A8EB339A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C5B2694D-9EAB-4675-BB00-81D04D0B71D2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C5D4E67A-DD46-4245-8A7B-0690D584593E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C637DC23-7A3C-4EEC-88CE-3381151E1926} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C63FCB43-5070-430D-9C88-62C02598EE18} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C64E5412-9717-4587-B2C3-4D206091EA47} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C679DEA3-BF7C-4F8D-9A14-23EBDADA4736} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C68C22EC-5D11-4C67-8F6F-9E447DDF3B78} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C6A35494-5260-4968-8F70-C606A11E44B0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C6CB8F42-3407-42EE-88D1-2B48ED877FC9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C6E91F3C-A386-4B02-816C-916302F43450} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C780DF7E-379F-4734-826F-D7A3FCC01C0E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C7A70CBC-23CA-4DD4-BE93-36FAFDB6DDD0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C8265DD4-9A12-407E-B9C6-DB1C4C438CB9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C82BC09D-AD77-4E4D-839E-52E9BBA55F64} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C85FAA2E-08A0-4A46-9E4C-20F255140FB4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C8663738-FFF8-41D4-BC7B-2C904D965397} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C8B124D3-4534-4F67-B740-8EE202F7FBE8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C8B7A3AF-306A-45F5-B3FA-0BB6A1785BAE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C8C67384-6DBB-40FB-AAFC-0659FFD150A5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C9250C4D-3AF3-4767-9FD3-1DC4BA20A5A3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C93E2377-A3BA-4DFC-A8B7-669166CB9632} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C972C375-7B2B-4F08-90CD-E608429C0F38} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C97499F6-E0D6-4C47-8810-6CDEE6FD5F00} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C97D75C6-B191-4469-B594-A09FE5311E3C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C985E0CD-BE3E-4733-A53F-EB8851207BCB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C990130F-00CC-452E-A662-BA25BB26FAC9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{C9B7CFBD-98B5-4D1F-AB73-9072B6276B66} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CA295F70-D6E2-471B-BA07-207BAFE0BE13} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CA5BA17D-289D-4D14-8E37-4F1282C54E75} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CA7D1880-1857-46CB-956D-C3B7C815BE3C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CB1871B8-714E-4E84-8AE7-A89B533C9454} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CB1B4FDB-8CAD-48EB-9B36-A8E86D73E737} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CB44AB4B-43BA-48E0-A080-3900768407B8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CB8F42E3-D31E-41BB-8741-CA69D4FDCC95} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CB9D9691-747C-4B1F-9A17-6F22A9424D20} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CC57AD6C-84B1-44A9-94AE-E311E196EFD7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CC85480D-9F64-494A-B59D-4958FE2E7614} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CCE9F4B9-9FAC-430D-A6CE-F717E787648A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CD0F1461-DB76-477F-9874-24A6C1162005} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CD27E18D-B012-4B13-88C9-3C641D49E596} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CE30A3ED-0715-4D6E-AAB7-E82F0078F6EC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CE9A3E96-71F7-4773-B737-9D6F1DE11FA8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CEC99B2A-7F1F-46B0-BFA8-4A87985AD9D8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CF1C6632-826C-4D34-8A71-BEEB7988A7C6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CF53A3DD-C7F3-4A71-830D-85775D8C5E53} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CF5E26A9-DDB0-4660-983A-6FE0D0015810} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CF851145-B956-48F5-B6D3-EE5E60CB67AD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CF99D3A0-2AC5-4213-A975-1773D352CFA3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CFA5B47F-F7C3-43D0-B2FD-1D29033710EF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CFACF238-86ED-4CF0-A4CE-C8FA1A354375} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CFD330DA-CDE1-4548-B5D4-3DB99D6A4B11} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{CFDA5FC1-0C7E-401D-B191-EAF3A32231D0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D079FDFB-2192-4436-AD96-B95A306A8B6C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D09C4694-3B76-4FFC-9448-AD9BE790E2E4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D0E6E690-52CF-49AF-A191-D476EB714336} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D158CDFE-8F97-48A0-BF7E-0C2128C79E7C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D18EE5CC-9C81-4FFF-B45B-6936F9ABFB11} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D1AFD9FC-FA5B-43DB-AD32-954960ED8D53} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D1B19212-317B-4463-BF98-DAF426E70B0A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D1DD7F3E-5639-44C0-A3B2-5637D26908C6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D1DE56B5-F6B9-4BDA-B0B3-7B62F9DAAF83} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D25C41A4-5574-475E-99E4-5D80C8638DF6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D2B91AD7-A5D2-434E-9D77-C298BEE27F38} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D2FB864E-1D02-46FF-B3F9-D95B5A5FEEFD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D35ECE62-4B3B-4E44-AC21-933264D579FE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D36B9D0D-17D0-4E60-9EC0-35AAF4C67356} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D36F525C-D975-4DF1-AFBD-7804B8064356} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D375777D-B13E-44D0-9A09-FCF81594344E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D3985881-92D2-49D4-BCF2-16A8E1A6B2B7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D399E48A-CFC9-4D82-A31D-19CF3917B6F1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D3EF45EB-BB0F-4C32-8EC0-1BA002E0B4A3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D46AB67C-45FE-46B7-BDAC-73BBF57A166E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D4878FCD-C56D-4E07-BCC0-FD84CB1E8315} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D4907DED-8123-4907-853B-7AF2D33AE5D6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D4D2CC37-0845-4888-86CE-0F7878AF1A3D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D50830F7-B77C-4FF3-B0AB-5356F0EEAE5A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D50FDCB9-45B3-4EB9-AC55-1FBFF7DDE6ED} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D53DBB41-0447-47C8-A737-EB5E83858235} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D5760D7B-DE83-4679-BE7C-7E33A750D253} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D5AC926F-681A-4E9B-9DBF-DF38B88DCB24} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D5DAB822-F7D1-47E2-8DBC-85AC736B1B71} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D612405F-95E5-4DD1-B927-4D5385DAEB13} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D6237006-33F2-4330-97B5-E95B96E5E52B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D6D73A60-4186-44FD-BC0A-39BE00AE72D2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D6E58FC7-BFFD-41EA-92AE-B82B0674CCA2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D70FFBCB-1F5B-43FE-A425-B8AE753F907E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D72B1778-3C8C-4D8A-97F1-F4ADC944288D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D7650AC8-DB43-48EB-A34B-AF8E9253400D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D80CA78B-73E4-4196-AF74-C1179F0249DE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D83A8DDD-C750-4A79-A9A6-0E413B45CBC5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D83F9CF5-6F4B-47EC-8258-5B2646490F0E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D84B0563-EFE2-404C-8CE1-AFB206322159} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D85E1952-F80D-4872-B0D0-C7391DDA6952} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D86CEEBB-07BE-4B36-9B4B-5CAFA9E64F58} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D8AEEC99-0352-4FF6-874E-19DDA5FBF7B3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D8E6BEC7-04B7-4B0B-856E-7370C67D3046} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D979DE16-BCF9-4559-BD53-08F5661C6565} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D9907FA4-443D-4358-8DAD-F8BEA6AB0887} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D9A80ECB-F636-4C50-8E74-747F38FEC12D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{D9AFBF6F-E29E-4934-9C85-9FB8A9C3F6BD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DA39AE2D-1324-4E42-83D6-CC73618E409C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DA3C880A-41F2-449B-8C28-58E1CED2EFFF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DA46F525-C127-4FD9-A46C-9BCEF7CD4294} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DA4B6D90-6419-458A-BABB-C5482DC81B66} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DA70C049-D385-4038-9B17-0049ACCE7F52} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DA86CB87-A54D-44E6-B226-24E20EDE745C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DA99E85B-71CA-4DDA-914F-5DC5C2791F74} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DAAECB7D-8209-42AE-86B6-3DE9B20B26BD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DAD8B549-1897-4B09-B0DC-5B2253544653} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DB3018A9-30DD-4236-8DA6-170A11EAB1A0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DB51A2F6-12B3-4BDD-859F-CE6E48518CFE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DBA0959C-F78F-4A40-B783-FDBE397DB78D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DC11EDDA-C8EB-4C56-838A-1B59179BCC18} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DC8FB7EC-93A2-4BDA-8CBC-C591C5E45F73} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DCC8C8B3-AEA8-4548-96F0-E40ABA322F9D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DCCCD6B1-5F45-434F-899B-68E601A61E06} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DCD78514-6696-4C0A-B004-2FB55C121CB1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DCDE27A7-93FA-428B-BDE2-B29F26F1F672} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DCF92118-F35E-4DC3-8E43-75ED9D691AA4} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DD4EE582-2A71-4AD9-8727-C69259CEB894} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DD4F015C-B9B1-4054-81AA-192A8F407901} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DD88D735-88FA-488B-9A43-6D8CB2BB674B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DDB18ACA-DCD8-4896-846D-ECFFFD808CB9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DDB960C3-46BA-4CDA-B45E-A6D52FB2D91D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DE2B6390-2A87-4991-A2A9-B045F3135B92} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DE57B0A4-1DEF-4E98-93AB-90A98585EEE2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DE78C2E8-C2D2-40F7-86D4-CA75A470E578} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DEB4A189-2630-424A-A6FC-C0EB47D25D3A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DEF8AFA4-1999-4987-9675-E617792CDE4A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DF25C96D-857E-4BCE-935C-8CEE4E20FC34} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DF7638E2-49FF-4670-92C3-CEDC94EF25EB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DFB0FCF0-44C6-4923-AD70-225BBE066597} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{DFC9CB42-266F-4767-8BBB-CA5602CA6217} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E00CDFE1-5483-42EB-A880-E8CFB6D896DD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E0163B7E-A338-4C93-A714-B1A0E25B46D3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E04E2CE8-C5A5-403A-89A6-FAB89555788A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E06291C7-E02E-4E59-A20B-52F2D93284EB} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E14FCB6A-2355-449D-8B5C-C95AF021DA74} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E15BD3F3-728C-447B-99B1-44351E72D242} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E1BF9C37-76BE-4BB4-B9E7-9195C158F63B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E1E2EF1D-A7B6-4B31-8911-DC71A887BBC1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E1EA937B-1AFF-4239-8C72-1BCD2EE4EC3D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E20FA8CE-1F2E-4BDA-9094-D2DDA9C9606D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E24BF1F8-0D3F-4B38-8B6F-A82045B78667} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E2726833-12D4-409B-B614-139DA3D8D11A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E2891F99-4C19-443B-B64B-253DBDDB05CA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E2B65C5E-168F-490F-B612-016E92ADDFA0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E323254B-4F30-44F1-BD5F-E0F0D89EE882} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E3466311-2A84-474D-9012-68CD476A101E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E356BE04-BD14-4F61-A952-AB6F46DBD2AF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E3987096-E4E9-42F8-922C-BD473AC7F85B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E3D57CE1-BF14-4342-B9A9-64406E775C53} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E3F7081B-333D-4A4E-91CF-ED2B41F4C0B0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E44882D3-7F14-4D89-965E-FD47BD8CB64F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E47BB9B0-9E59-4A07-8B78-A4CAFB23E423} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E5815631-4680-486C-A503-662B0B60B208} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E614B2A4-2DBD-46D9-89F3-B4E9F05B1337} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E61E565C-0C6F-4E47-8241-2E2C3082957D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E652AE2B-58A5-4CDD-809F-4211978B2B64} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E72FDA69-409C-4BC5-8FB3-2F1790FEBDC1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E8641563-F08C-4526-8606-018C9DF00A0F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E8DD1F79-40E4-4C26-9165-969F6D33B38B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E9127CFA-EC2C-45F5-937C-1CA5514399F6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E936EA23-29BC-46A1-B099-F3113EB1C974} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E9592B8E-6AA5-4A0B-9811-29BFAD008A06} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E95ADD43-55A7-46B6-B71D-A5342C222F00} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E99014C7-08F4-40C6-9220-4E487AF3D2B8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{E9DAB3DF-D06B-4652-A4BE-D44764BC80C9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EA101A55-0A2E-4DD0-BC96-6F890AB8A517} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EA2106FE-C022-4DA7-9008-B7E9845737BF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EACBBCCD-BEC1-464E-A851-62B7DC382164} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EB2A1E2B-27B2-4D97-9949-891997C3DF99} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EB2C8801-1F71-4F78-8C13-7D4D1673B016} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EB30CBCC-C734-4FBA-8C5D-4548342547FE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EB4E1A6B-F8C7-4A69-BC6B-98AA47836AF7} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EB88E3F7-B7FC-4804-835B-D813A8693125} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EBAFF085-431B-4CED-9247-4C78F133E566} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EBDE11A9-04AA-4D27-8D43-95BE19C1290B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EBE522BA-4288-4ADD-BC99-5F1C3B130256} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EBFEA13C-3210-457B-8AFC-2A2B6A32D500} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EC011FD1-5F24-4F4E-8703-666590448B58} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EC536EFC-A9EC-4050-85D3-D135C305EED8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{ECA41F5A-A4D2-43E6-A7D0-21CD3C5E2C2D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EDA25299-5A3B-4AB6-BC51-A26EFC16A6E9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EE376E20-A798-4C97-BB0A-AE9B6CEB97ED} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EE3E9377-712A-491A-8C41-984553583444} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EE6121EC-F5EF-4808-8D5B-C8F9D1C609D5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EE927103-7460-4B6E-B14A-8B60323DF4D6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EEAB3546-CE9E-4CB9-B104-8C15678403CF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EEB34073-062B-449A-B11C-0B5DF6DFA2CE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EEEBA6D6-F915-457E-801E-D9574DE43EA9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EF40E72C-80CA-468A-B4D6-5CF3DFB4DFA1} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EF4CCED1-2221-4EC1-9B4E-3A7BBA69A752} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EF7975F9-0DF4-4359-9FE2-244A5DE4BC12} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EFD35CCB-3EA2-4110-A6DA-432E77439124} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{EFF8BC36-510F-4511-A840-7EF01C82F117} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F013B254-DAC6-4124-AD6C-55B3001412C6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F0205B98-0ACE-4A61-86D3-326962505463} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F0336AE2-5668-4527-ACAA-87ADFB39E465} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F06701FB-8F4E-42C5-B4B1-3F3B4ED3790C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F071108E-CAD4-42DE-BA94-57DD171A055A} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F0855192-35F1-499D-916C-4687E279B2FD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F0878134-C20D-4EE2-A4A6-8B56D333D466} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F08D3FC9-8A6C-402E-AEC0-FDB65540ACFA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F0C6F220-15FA-42D4-8D61-07C17871373F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F0F1F0EE-ADA2-493F-8F80-B0B3B098EBA2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F1029D53-CC38-41F3-80AD-E0D2BEB80467} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F1747E10-5274-442A-8970-6E459C0B525C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F1DEBFC3-7537-4113-8A69-9307BDE7EB8D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F1E275AF-90A3-4AEF-9525-CDFB69CFD5AD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F1E93B52-87B4-4D1E-964F-B64CB937DF0E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F1EF76A2-FBF9-4C7D-A7B2-07FF7C89F665} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F1F1BA84-096F-4040-ADD1-AE065BDB66F3} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F206E4FC-22A6-4DD5-8438-54165831CB31} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F226CB2B-24C0-4BE4-A60E-12E769435EBF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F22CCEE3-9E8A-43E3-8EA1-FD4E3A6D6927} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F303347F-B636-4C19-BB49-9EB3EBF5DAB8} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F308EA3F-4712-4751-8616-B8437FD58D7B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F396807D-7904-449F-A466-E45B095D5477} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F39F9CFA-51A5-4C53-8711-B8841A64AED2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F3D20111-837F-4DE3-B08E-DE3DA0F54802} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F434EE7E-3341-4747-AF78-5B64A6898333} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F4925202-04B5-4BF3-9DE5-5BA7A368C5D6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F5008B85-541C-4192-869C-575E58D8A94D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F50FE6E5-6B65-4BA1-9339-B98732C4CE57} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F55EBAAD-2C98-4430-ACBD-474D33871D02} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F593AB81-A94F-44A6-923E-630D97E54222} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F5CA48AB-6B85-485B-9F00-070C5D3430DF} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F6DC1315-B698-4D22-8642-CF6C60A2AD32} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F6F727D9-937D-46F2-B43D-94270876ACB6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F7803D83-3D85-4F75-8CD8-2DBDA21BFBA2} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F7A8D180-15F6-46BE-BCA3-0B780FB6FE0E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F84EBAE3-1254-42A2-A70B-AC023C5FD859} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F86144A2-4C63-44CD-8B4B-C424843ED7DD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F86ABA7A-D0AA-461E-8417-CDDCB410E90D} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F8F7809B-C4F3-4351-A498-DBFC74C120FD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F914AA82-9CC7-4C7F-8698-0B7553E8C49F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F93DDB8D-A819-43C5-82D8-AF28DBBFDB8B} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F942D1DC-2569-40B7-826B-5393B0585C87} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F9CCE76B-EFB2-4DA2-8272-78EDE5A2DD57} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{F9D7297E-369B-435E-B30F-E1AEA65A4B29} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FA2457E6-223C-4409-B130-D595534AEF16} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FA6405C7-3E18-413B-86E6-F42DE1E650BA} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FB0E8EC1-3BAB-48EE-AB85-7DA0498A4E6C} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FB941C3D-8363-4127-B676-5EFBB6B77FD9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FBA8E2F8-4AF0-45A2-BDEC-E5BFF191DE58} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FBC2937D-1208-48A7-A4A6-59404B3210E5} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FBD3C796-FEB2-46F1-AB24-625DF093ACC6} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FC3F9570-2EA9-446A-BD87-76B28E786F00} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FC7DAF9F-3E92-4A4C-8A41-1B86F6BCC4DC} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FC85D864-A347-4652-9D04-AF7AA6295B68} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FD0672B0-042D-4606-9A5C-D41E8EC1C241} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FD26EFBC-CABE-478D-96B4-6A59BF9DF7A9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FD891513-C27F-4A74-B09C-4B3EDB5EEF27} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FD8CE804-5B6E-40AF-9D28-9915395D9E8F} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FDFAC7F7-4AF2-4C26-AC35-B1A05B996D8E} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FEA42E4C-DBD9-4F8E-BD07-1ECE659DAFF0} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FEAEE6E6-D64F-422D-B968-D6CA3F3C38DD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FEBE6A60-F848-44B3-BA79-7E0990D194DD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FEEA3464-AE70-4D1B-BC64-B158F84E23AE} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FEFFF184-66E9-4E71-99C1-2988B56733A9} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\{FF23E2F0-A3BA-4181-92AD-2A4FC22096FD} (Empty Folder)
Successfully deleted: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\searchplugins\bing powered search.xml (File)
Successfully deleted: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\user.js (File)
Successfully deleted: C:\Users\Martin\AppData\Roaming\pdfforge (Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Z25EP9A (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\66AZBXF4 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C8MPF3ZS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVC8FONP (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O418YEFE (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TGYYRIC1 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WIUW2HXR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZKTSUEZJ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Z25EP9A (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\66AZBXF4 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C8MPF3ZS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVC8FONP (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O418YEFE (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TGYYRIC1 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WIUW2HXR (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZKTSUEZJ (Temporary Internet Files Folder)
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.11.2016 at 17:00:00,86
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
29.11.2016, 15:40
| #8 |
| /// TB-Ausbilder | Windows 7: DCOM Prozesstart unerwartet beendet Servus, Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Policies\Explorer: []
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @hola.org/vlc,version=1.8.649 -> C:\Users\Martin\AppData\Local\Hola\firefox\app\vlc [Keine Datei]
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit) | SystemLook (64 bit)
Schritt 3
Bitte poste mit deiner nächsten Antwort
|
|
29.11.2016, 17:33
| #9 |
| | Windows 7: DCOM Prozesstart unerwartet beendet Beim Ausführen von FRST ist folgende Fehlermeldung aufgegangen: "Failed to update (5)" Fixlog: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016
durchgeführt von Martin (29-11-2016 17:00:20) Run:1
Gestartet von C:\Users\Martin\Desktop
Geladene Profile: Martin (Verfügbare Profile: Martin)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Policies\Explorer: []
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @hola.org/vlc,version=1.8.649 -> C:\Users\Martin\AppData\Local\Hola\firefox\app\vlc [Keine Datei]
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => Wert erfolgreich entfernt
"HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt
"HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\MozillaPlugins\@hola.org/vlc,version=1.8.649" => Schlüssel erfolgreich entfernt
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @hola.org/vlc,version=1.8.649 -> C:\Users\Martin\AppData\Local\Hola\firefox\app\vlc [Keine Datei] => nicht gefunden.
========= dir "%ProgramFiles%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 9A2A-3E46
Verzeichnis von C:\Program Files
20.11.2016 19:16 <DIR> .
20.11.2016 19:16 <DIR> ..
17.07.2015 08:34 <DIR> Adobe
20.10.2016 14:43 <DIR> AMD
19.08.2014 09:56 <DIR> ATI
27.10.2014 10:06 <DIR> Autodesk
27.08.2016 14:46 <DIR> Blender Foundation
26.11.2015 15:36 <DIR> CCleaner
22.07.2016 22:54 <DIR> CDisplayEx
15.12.2015 17:39 <DIR> Cloud Imperium Games
01.06.2015 15:49 <DIR> Common Files
27.04.2013 20:46 <DIR> CPUID
21.11.2010 08:01 <DIR> DVD Maker
23.09.2016 13:34 <DIR> GIMP 2
19.10.2016 19:41 <DIR> Internet Explorer
06.01.2012 19:16 <DIR> LoL
21.11.2011 13:05 <DIR> Microsoft Office
19.10.2016 18:44 <DIR> Microsoft Security Client
19.10.2016 19:44 <DIR> Microsoft Silverlight
21.06.2012 18:45 <DIR> Microsoft SQL Server Compact Edition
14.07.2009 06:32 <DIR> MSBuild
20.11.2016 19:45 <DIR> Nexus Mod Manager
12.05.2012 16:01 <DIR> NTCore
19.08.2014 09:55 <DIR> NVIDIA Corporation
21.09.2016 22:02 <DIR> Paint.NET
31.03.2012 22:09 <DIR> Rainmeter
15.11.2011 17:07 <DIR> Realtek
14.07.2009 06:32 <DIR> Reference Assemblies
21.10.2012 11:16 <DIR> TeamSpeak 3 Client
11.07.2013 11:47 <DIR> Windows Defender
19.10.2016 19:41 <DIR> Windows Journal
04.12.2014 15:40 <DIR> Windows Live
21.11.2010 07:50 <DIR> Windows Mail
19.10.2016 19:42 <DIR> Windows Media Player
15.11.2011 16:52 <DIR> Windows NT
21.11.2010 07:50 <DIR> Windows Photo Viewer
21.11.2010 04:31 <DIR> Windows Portable Devices
21.11.2010 07:50 <DIR> Windows Sidebar
04.01.2016 12:50 <DIR> WinRAR
0 Datei(en), 0 Bytes
39 Verzeichnis(se), 125.552.791.552 Bytes frei
========= Ende von CMD: =========
========= dir "%ProgramFiles(x86)%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 9A2A-3E46
Verzeichnis von C:\Program Files (x86)
28.11.2016 16:30 <DIR> .
28.11.2016 16:30 <DIR> ..
27.02.2012 01:07 <DIR> 2K Games
22.12.2015 12:58 <DIR> 7-Zip
02.01.2012 18:58 <DIR> ADLSoft UnCompressor
17.07.2015 08:35 <DIR> Adobe
07.12.2014 19:00 <DIR> AGEIA Technologies
25.05.2016 11:23 <DIR> AMD
19.03.2015 22:37 <DIR> AMD AVT
15.11.2011 17:09 <DIR> ASM104xUSB3
12.02.2015 01:20 <DIR> Autodesk
11.10.2012 19:33 <DIR> AutoIt3
17.06.2016 17:15 <DIR> Battle.net
08.08.2015 16:59 <DIR> Battlelog Web Plugins
20.11.2016 19:15 <DIR> Chip Digital GmbH
03.01.2013 12:59 <DIR> Cisco Systems
27.11.2016 14:56 <DIR> Common Files
18.11.2011 15:32 <DIR> CyberLink
31.08.2014 20:35 <DIR> DAEMON Tools Lite
22.11.2015 18:53 <DIR> Drakonia Configurator
07.10.2015 23:09 <DIR> EveHQ
20.02.2014 11:12 <DIR> Foxit Software
15.04.2016 22:26 <DIR> Free PDF to Word Doc Converter
31.12.2014 17:30 <DIR> Free Picture Solutions
06.04.2015 16:17 <DIR> Freelancer Mod Manager
15.04.2012 12:17 <DIR> GameSpy Arcade
24.11.2011 20:55 <DIR> gs
19.12.2011 13:33 <DIR> GUILD WARS
29.04.2015 20:42 <DIR> HardCMP Editor
15.03.2012 01:17 <DIR> Hex-Editor MX
23.02.2012 18:56 <DIR> id Software
17.11.2011 00:19 <DIR> Intel
19.10.2016 19:41 <DIR> Internet Explorer
10.05.2012 14:13 <DIR> IrfanView
23.10.2016 10:23 <DIR> Java
26.11.2016 11:44 <DIR> JDownloader
03.03.2015 10:43 <DIR> Knuddels
28.11.2016 16:30 <DIR> Malwarebytes Anti-Malware
15.11.2011 17:09 <DIR> Marvell
21.11.2011 13:05 <DIR> Microsoft Analysis Services
06.04.2015 19:39 <DIR> Microsoft Games
04.12.2011 15:54 <DIR> Microsoft Games for Windows - LIVE
21.11.2011 13:06 <DIR> Microsoft Office
19.10.2016 18:43 <DIR> Microsoft Security Client
19.10.2016 19:44 <DIR> Microsoft Silverlight
04.12.2014 15:41 <DIR> Microsoft SQL Server Compact Edition
24.11.2011 01:47 <DIR> Microsoft.NET
18.11.2016 09:37 <DIR> Mozilla Firefox
18.11.2016 09:37 <DIR> Mozilla Maintenance Service
14.07.2009 06:32 <DIR> MSBuild
17.11.2011 11:16 <DIR> MSXML 4.0
29.07.2012 14:15 <DIR> Mumble
21.03.2012 22:44 <DIR> Night
20.02.2014 11:16 <DIR> Nitro
19.08.2014 09:55 <DIR> NVIDIA Corporation
03.01.2015 20:13 <DIR> OMC ModPack Client
15.11.2011 19:57 <DIR> OpenOffice.org 3
22.05.2014 09:12 <DIR> Pando Networks
07.12.2012 20:53 <DIR> pawúned<4>2
07.10.2015 23:11 <DIR> PDF Blender
26.11.2015 15:38 <DIR> PDFCreator
06.08.2012 21:12 <DIR> Pidgin
03.04.2012 11:14 <DIR> Privoxy
09.03.2012 21:32 <DIR> RADVideo
03.10.2015 10:38 <DIR> Raptr
15.11.2011 17:08 <DIR> Realtek
14.07.2009 06:32 <DIR> Reference Assemblies
18.06.2015 09:47 <DIR> Repair File
06.03.2012 16:20 <DIR> Resource Hacker
04.05.2015 12:42 <DIR> Rockstar Games
10.05.2016 12:09 <DIR> Skype
22.05.2012 10:29 <DIR> Smart Projects
31.03.2012 23:39 <DIR> sTabLauncher
26.11.2016 11:44 <DIR> Steam
16.09.2015 19:26 <DIR> SystemRequirementsLab
19.07.2016 15:56 <DIR> TeamSpeak 3 Client
01.12.2014 14:16 <DIR> Trillian
19.06.2013 12:57 <DIR> TuneUp Utilities 2013
20.03.2014 00:37 <DIR> Ubisoft
26.06.2012 13:49 <DIR> Valve
23.09.2012 20:38 <DIR> Ventrilo
16.11.2011 11:27 <DIR> VideoLAN
20.10.2016 14:47 <DIR> VulkanRT
10.05.2012 19:44 <DIR> windirstat
11.07.2013 11:47 <DIR> Windows Defender
04.12.2014 15:40 <DIR> Windows Live
21.11.2010 07:50 <DIR> Windows Mail
19.10.2016 19:42 <DIR> Windows Media Player
14.07.2009 06:32 <DIR> Windows NT
21.11.2010 07:50 <DIR> Windows Photo Viewer
21.11.2010 04:31 <DIR> Windows Portable Devices
21.11.2010 07:50 <DIR> Windows Sidebar
04.01.2016 01:30 <DIR> WinRAR
18.05.2016 19:45 <DIR> YACReader
0 Datei(en), 0 Bytes
94 Verzeichnis(se), 125.552.787.456 Bytes frei
========= Ende von CMD: =========
========= dir "%ProgramData%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 9A2A-3E46
Verzeichnis von C:\ProgramData
28.11.2016 16:22 <DIR> .
28.11.2016 16:22 <DIR> ..
20.06.2016 11:24 <DIR> .minecraft
02.06.2015 11:01 <DIR> Adobe
19.03.2015 22:37 <DIR> AMD
17.08.2015 09:51 <DIR> Ark Savegame Manager
23.07.2016 11:55 <DIR> ATI
01.12.2014 10:39 <DIR> Autodesk
28.02.2016 12:45 <DIR> Battle.net
02.10.2015 15:52 <DIR> BitRaider
11.06.2016 13:38 <DIR> Blizzard Entertainment
15.09.2014 00:09 <DIR> BlueStacksSetup
18.01.2014 19:46 <DIR> Bohemia Interactive Studio
19.11.2011 15:14 <DIR> CyberLink
23.05.2012 23:14 <DIR> DAEMON Tools Lite
23.03.2013 13:57 <DIR> dbg
15.08.2013 17:10 <DIR> EA Core
15.08.2013 20:52 <DIR> EA Logs
16.03.2014 00:10 <DIR> Elder Scrolls Online
15.08.2013 15:12 <DIR> Electronic Arts
20.02.2014 11:17 <DIR> FileOpen
27.10.2014 10:13 <DIR> FLEXnet
15.04.2016 22:36 <DIR> Foxit ContentPlatform
28.11.2016 16:30 <DIR> Malwarebytes
20.12.2014 11:09 <DIR> McAfee
21.03.2012 22:45 <DIR> Media Center Programs
23.11.2011 18:48 <DIR> Microsoft Games
19.10.2016 18:55 <DIR> Microsoft Help
27.10.2014 10:08 153 Microsoft.SqlServer.Compact.351.32.bc
25.04.2012 21:08 <DIR> Mozilla
20.02.2014 11:16 <DIR> Nitro
19.08.2014 09:55 <DIR> NVIDIA Corporation
23.10.2016 10:24 <DIR> Oracle
05.08.2014 19:40 <DIR> Orbit
15.12.2015 21:59 <DIR> Origin
27.05.2016 10:56 <DIR> Package Cache
07.03.2016 11:30 <DIR> Razer
01.06.2015 15:51 <DIR> regid.1986-12.com.adobe
15.12.2013 19:59 <DIR> RELOADED
10.05.2016 12:09 <DIR> Skype
18.11.2013 21:13 <DIR> Steam
15.11.2011 18:58 <DIR> Sun
08.10.2014 19:50 <DIR> SystemRequirementsLab
15.11.2011 20:15 <DIR> TerraTec
22.11.2015 19:00 <DIR> TuneUp Software
28.05.2012 17:25 <DIR> Ubisoft
02.08.2014 16:44 <DIR> WarThunder
10.05.2012 18:23 <DIR> XSettings
1 Datei(en), 153 Bytes
47 Verzeichnis(se), 125.552.783.360 Bytes frei
========= Ende von CMD: =========
========= dir "%Appdata%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 9A2A-3E46
Verzeichnis von C:\Users\Martin\AppData\Roaming
28.11.2016 16:59 <DIR> .
28.11.2016 16:59 <DIR> ..
17.06.2016 17:01 <DIR> .minecraft
02.02.2013 18:24 <DIR> .purple
12.03.2015 13:30 <DIR> .StarMade
01.06.2015 15:52 <DIR> Adobe
02.05.2016 18:56 132 Adobe CS6-PNG-Format - Voreinstellungen
04.10.2014 12:05 <DIR> AMD
19.08.2014 10:04 <DIR> ATI
01.12.2014 10:39 <DIR> Autodesk
19.05.2016 22:11 <DIR> Awesomium
28.02.2016 12:45 <DIR> Battle.net
01.03.2012 20:19 <DIR> Bioshock2
27.08.2016 14:52 <DIR> Blender Foundation
13.02.2012 23:27 <DIR> BoneCraft
13.06.2012 15:08 <DIR> BT
31.12.2014 17:14 <DIR> calibre
10.08.2013 10:55 <DIR> Capcom
21.08.2016 23:48 <DIR> CDisplayEx
22.03.2016 17:57 <DIR> com.zam.minion.Minion
17.06.2016 17:05 <DIR> Curse Advertising
19.11.2011 15:16 <DIR> CyberLink
07.06.2016 11:47 <DIR> DAEMON Tools Lite
17.05.2014 19:35 <DIR> DarkSoulsII
25.03.2013 20:09 <DIR> Doublefine
20.02.2014 11:16 <DIR> Downloaded Installations
13.10.2012 12:59 <DIR> DScaler4
11.05.2016 21:57 <DIR> dvdcss
07.10.2015 23:09 <DIR> EveHQ
19.07.2012 11:08 <DIR> EVEMon
20.02.2014 11:17 <DIR> FileOpen
12.02.2016 14:39 <DIR> FiraxisLive
15.04.2016 22:36 <DIR> Foxit AgentInformation
16.04.2016 09:55 <DIR> Foxit Software
31.12.2014 17:31 <DIR> Free Picture Solutions
30.07.2013 17:18 <DIR> ftblauncher
06.08.2012 21:33 <DIR> gtk-2.0
08.10.2016 20:11 <DIR> Guild Wars 2
15.11.2011 16:57 <DIR> Identities
21.06.2012 18:46 <DIR> Indicium Technologies
15.11.2011 17:05 <DIR> InstallShield
15.11.2011 17:18 <DIR> Intel Corporation
10.05.2012 14:13 <DIR> IrfanView
18.01.2015 23:09 <DIR> java
17.03.2014 11:33 <DIR> Leadertech
19.08.2014 10:14 <DIR> library_dir
06.01.2012 20:03 <DIR> LolClient
15.11.2011 18:33 <DIR> Macromedia
28.11.2016 16:30 <DIR> Malwarebytes
21.11.2010 08:00 <DIR> Media Center Programs
23.11.2011 18:48 <DIR> Microsoft Game Studios
22.11.2015 18:53 <DIR> MingGuan
15.11.2011 18:28 <DIR> Mozilla
10.11.2013 18:35 <DIR> Mumble
07.10.2015 23:11 <DIR> My Battle for Middle-earth(tm) II Files
08.06.2014 12:37 <DIR> NCSOFT
08.07.2015 15:36 <DIR> Nitro
27.11.2015 12:08 <DIR> Nitro PDF
30.04.2012 22:44 <DIR> OpenOffice.org
07.08.2015 21:47 <DIR> Origin
01.06.2015 15:52 <DIR> PDAppFlex
25.11.2011 23:36 <DIR> PunkBuster
27.09.2013 09:30 <DIR> Rainmeter
03.10.2015 10:39 <DIR> Raptr
01.08.2013 21:39 <DIR> Rovio
27.11.2011 11:31 <DIR> SFBot
24.09.2016 13:42 <DIR> Skype
25.08.2016 16:43 <DIR> SpaceEngineers
19.08.2014 15:56 <DIR> SPORE
28.11.2014 15:28 <DIR> Steam
20.02.2014 11:11 <DIR> SumatraPDF
07.03.2014 17:12 <DIR> Sun
02.03.2013 12:30 <DIR> TerraTec
21.09.2013 22:59 <DIR> The Creative Assembly
30.01.2014 19:42 <DIR> TheBannerSaga
20.11.2012 21:02 <DIR> Theta
01.12.2014 14:17 <DIR> Trillian
29.11.2016 00:15 <DIR> TS3Client
23.03.2013 13:59 <DIR> ts3overlay
22.02.2014 00:10 <DIR> TuneUp Software
27.07.2013 22:40 <DIR> Tunngle
27.04.2013 21:40 <DIR> Ubisoft
04.01.2016 23:08 <DIR> uplay
31.12.2014 17:03 <DIR> uTorrent
26.11.2015 15:38 <DIR> Ventrilo
25.11.2016 19:17 <DIR> vlc
23.07.2014 21:53 <DIR> wargaming.net
11.02.2012 12:14 <DIR> Windows Live Writer
15.11.2011 21:35 <DIR> WinRAR
04.04.2013 13:25 <DIR> XRay Engine
18.08.2016 19:08 <DIR> {CD83FB38-E8D1-964E-83E7-B19C5F354CA2}
1 Datei(en), 132 Bytes
90 Verzeichnis(se), 125.552.779.264 Bytes frei
========= Ende von CMD: =========
========= dir "%LocalAppdata%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 9A2A-3E46
Verzeichnis von C:\Users\Martin\AppData\Local
28.11.2016 16:59 <DIR> .
28.11.2016 16:59 <DIR> ..
18.09.2013 13:23 <DIR> 4A Games
29.04.2015 10:19 <DIR> Activision
08.11.2016 10:42 <DIR> Adobe
20.10.2016 15:57 <DIR> AMD
17.01.2012 16:42 <DIR> Apps
17.08.2015 09:51 <DIR> Ark_Savegame_Manager
18.01.2014 20:38 <DIR> ArmA 2
18.01.2014 23:48 <DIR> ArmA 2 OA
19.08.2014 10:04 <DIR> ATI
27.10.2014 10:13 <DIR> Autodesk
26.11.2015 15:33 <DIR> Avg2014
10.08.2015 14:14 <DIR> BANDAI NAMCO Games
17.06.2016 18:56 <DIR> Battle.net
20.11.2016 19:17 <DIR> Black_Tree_Gaming
09.11.2014 20:22 <DIR> Blizzard Entertainment
31.12.2014 17:07 <DIR> calibre-cache
21.07.2015 23:27 <DIR> CEF
25.04.2012 15:08 <DIR> Chromium
29.11.2016 00:22 <DIR> CrashDumps
13.02.2013 12:10 <DIR> Darksiders2
25.01.2016 23:50 <DIR> Daybreak Game Company
05.07.2016 09:38 <DIR> Deployment
18.11.2015 14:07 <DIR> Diagnostics
20.11.2016 19:15 <DIR> Downloaded Installations
24.01.2012 01:55 <DIR> dxhr
08.02.2013 17:11 <DIR> EA Games
14.10.2016 08:35 <DIR> ElevatedDiagnostics
15.08.2013 17:12 <DIR> ESN
20.11.2016 19:45 <DIR> Fallout4
10.10.2013 16:16 <DIR> FalloutNV
06.04.2015 15:01 <DIR> FLCrossfireGecko
29.03.2013 00:39 <DIR> FLT
15.09.2015 13:38 <DIR> fontconfig
31.12.2014 17:31 <DIR> Free Picture Solutions
03.04.2015 11:43 <DIR> Freelancer
04.07.2016 09:19 129.480 GDIPFONTCACHEV1.DAT
15.09.2015 13:38 <DIR> gegl-0.2
15.09.2015 15:59 <DIR> gtk-2.0
01.06.2015 11:56 <DIR> GWX
25.08.2016 15:54 <DIR> IsolatedStorage
26.11.2016 02:49 <DIR> JDownloader v2.0
05.09.2012 08:29 <DIR> Macromedia
05.04.2014 16:21 <DIR> Mass_Effect_3-RAF
18.02.2016 14:02 <DIR> Microsoft
23.11.2011 18:48 <DIR> Microsoft Game Studios
06.02.2013 16:01 <DIR> Microsoft Help
22.03.2016 17:57 <DIR> Minion
09.10.2013 23:14 <DIR> Mozilla
25.12.2013 19:32 <DIR> My Games
11.06.2016 00:15 <DIR> MyComGames
07.02.2014 13:47 <DIR> NBGI
08.06.2014 12:37 <DIR> NCSOFT
19.08.2014 09:53 <DIR> NVIDIA Corporation
21.12.2011 16:15 <DIR> Oblivion
27.08.2016 14:42 <DIR> open3mod
15.09.2015 15:45 <DIR> Paint.NET
21.03.2014 20:26 <DIR> PAYDAY 2
23.04.2013 08:50 <DIR> PDF Repair Toolbox
12.03.2013 18:01 <DIR> Programs
22.08.2014 21:03 <DIR> PunkBuster
17.10.2014 16:41 <DIR> QfG
07.03.2016 11:30 <DIR> razer
15.09.2015 15:59 6.682 recently-used.xbel
11.05.2012 18:13 7.596 Resmon.ResmonCfg
22.08.2014 22:22 <DIR> Risen3
04.05.2015 12:45 <DIR> Rockstar Games
09.01.2013 20:56 <DIR> SCE
06.01.2016 00:48 <DIR> SKIDROW
10.03.2016 19:15 <DIR> Skype
17.10.2014 18:01 <DIR> Skyrim
06.06.2012 21:14 <DIR> SniperV2
10.01.2013 21:31 <DIR> Sony Online Entertainment
31.03.2012 23:40 <DIR> sTabLauncher
01.11.2015 11:58 <DIR> Steam
07.03.2014 17:11 <DIR> Sun
05.04.2014 16:26 <DIR> SWTOR
05.04.2014 16:00 <DIR> SWTORPerf
29.11.2016 16:57 <DIR> Temp
07.05.2013 22:50 <DIR> The Witcher
08.05.2013 00:11 <DIR> The Witcher 2
22.11.2015 19:03 <DIR> TuneUp Software
12.06.2013 12:53 <DIR> Two Worlds II
02.06.2012 16:14 <DIR> Ubisoft Game Launcher
27.05.2016 10:59 <DIR> UnrealEngine
06.04.2015 15:03 <DIR> utrack
15.09.2014 00:01 <DIR> VirtualStore
02.08.2014 16:44 <DIR> WarThunder
15.09.2015 13:44 <DIR> webkit
25.12.2014 17:49 <DIR> Windows Live
21.11.2011 13:13 <DIR> Windows Live Writer
15.08.2016 23:15 <DIR> YACReader
07.03.2014 16:52 <DIR> {3225C812-5FB8-41CE-B15F-997F80151000}
07.03.2014 17:08 <DIR> {3248F0A6-6813-11D6-A77B-00B0D0150050}
18.08.2016 19:09 <DIR> {CDDEFB82-E976-973A-84EE-B2D2A0864E4A}
3 Datei(en), 143.758 Bytes
93 Verzeichnis(se), 125.552.771.072 Bytes frei
========= Ende von CMD: =========
========= RemoveProxy: =========
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
========= Ende von RemoveProxy: =========
========= ipconfig /flushdns =========
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
========= Ende von CMD: =========
========= netsh winsock reset =========
Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.
========= Ende von CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 83499140 B
Java, Flash, Steam htmlcache => 354394671 B
Windows/system/drivers => 27318 B
Edge => 0 B
Chrome => 0 B
Firefox => 37944055 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 33125 B
Public => 0 B
ProgramData => 0 B
systemprofile => 83620 B
systemprofile32 => 66088 B
LocalService => 115860 B
NetworkService => 67936825 B
Martin => 18966883 B
UpdatusUser => 0 B
UpdatusUser => 0 B
RecycleBin => 185131667 B
EmptyTemp: => 713.5 MB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 17:01:21 ====
Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 17:06 on 29/11/2016 by Martin
Administrator - Elevation successful
========== filefind ==========
Searching for "YSearchUtil"
No files found.
Searching for "Hola"
No files found.
Searching for "OpenCandy"
No files found.
Searching for "Media Finder"
No files found.
Searching for "Babylon"
No files found.
Searching for "Softonic"
No files found.
Searching for "SweetIM"
No files found.
Searching for "Optimizer Pro"
No files found.
========== folderfind ==========
Searching for "YSearchUtil"
No folders found.
Searching for "Hola"
C:\Users\Martin\Downloads\Hola d------ [10:27 07/02/2015]
Searching for "OpenCandy"
No folders found.
Searching for "Media Finder"
No folders found.
Searching for "Babylon"
No folders found.
Searching for "Softonic"
No folders found.
Searching for "SweetIM"
No folders found.
Searching for "Optimizer Pro"
No folders found.
========== regfind ==========
Searching for "YSearchUtil"
No data found.
Searching for "Hola"
[HKEY_CURRENT_USER\Software\Paint.NET]
"File/MostRecent/Thumbnail3"="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
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\hola_plugin.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\hola_plugin_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\hola_plugin_x64_RASAPI32]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe"="v2.10|Action=Block|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe|Name=Hola Better Internet Engine|Desc=Hola Better Internet Engine|"
[HKEY_USERS\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Paint.NET]
"File/MostRecent/Thumbnail3"="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
Searching for "OpenCandy"
No data found.
Searching for "Media Finder"
[HKEY_CURRENT_USER\Software\Classes\MF]
@="URL:Media Finder"
[HKEY_USERS\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Classes\MF]
@="URL:Media Finder"
[HKEY_USERS\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\MF]
@="URL:Media Finder"
Searching for "Babylon"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1031562343-2424694273-2990312000-1000\Components\BC9D387CD403E0479C0E59FB2C7D6AB3]
"8574A5E99810B9146ADEEFC4DB52F550"="C?\Windows\SysWOW64\BabylonLogo.jpg"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1031562343-2424694273-2990312000-1000\Components\E174AC3C70E9E69C2B2D4FA24A326A7C]
"8574A5E99810B9146ADEEFC4DB52F550"="C:\Program Files (x86)\sTabLauncher\Sponsor\Babylon9_setup_15500.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
Searching for "Softonic"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\49ae578b_0]
@="{0.0.0.00000000}.{b93cd1a5-c508-4750-abe5-f1181c9d1ba4}|\Device\HarddiskVolume2\Users\Martin\MC\SoftonicDownloader_fuer_minecraft-skinedit.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\49ae578b_0]
@="{0.0.0.00000000}.{b93cd1a5-c508-4750-abe5-f1181c9d1ba4}|\Device\HarddiskVolume2\Users\Martin\MC\SoftonicDownloader_fuer_minecraft-skinedit.exe%b{00000000-0000-0000-0000-000000000000}"
Searching for "SweetIM"
No data found.
Searching for "Optimizer Pro"
No data found.
-= EOF =-
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016
durchgeführt von Martin (Administrator) auf MYRMIX (29-11-2016 17:20:49)
Gestartet von C:\Users\Martin\Desktop
Geladene Profile: Martin (Verfügbare Profile: Martin)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 10 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Chip Digital GmbH) C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(The Privoxy team - www.privoxy.org) C:\Program Files (x86)\Privoxy\privoxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Drakonia Configurator\hid.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1354712 2016-08-30] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-09-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [GamingMouse] => C:\Program Files (x86)\Drakonia Configurator\hid.exe [248832 2013-10-29] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Run: [World of Warships] => K:\Games\WOWS_PublicTest\WargamingGameUpdater.exe [3134216 2016-11-07] (Wargaming.net)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Privoxy.lnk [2012-04-03]
ShortcutTarget: Privoxy.lnk -> C:\Program Files (x86)\Privoxy\privoxy.exe (The Privoxy team - www.privoxy.org)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter - Verknüpfung.lnk [2012-04-01]
ShortcutTarget: Rainmeter - Verknüpfung.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21
Tcpip\..\Interfaces\{AE141692-DE9B-4CC3-93A4-62B71E738879}: [DhcpNameServer] 195.34.133.21 212.186.211.21
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {A0C59A24-F50F-433C-928B-8235295514F4} URL = hxxps://at.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-23] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-23] (Oracle Corporation)
FireFox:
========
FF DefaultProfile: a9urom3s.default-1384358611811
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 [2016-11-29]
FF NewTab: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> Bing Powered Search
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> Bing Powered Search
FF Homepage: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> www.google.at
FF Keyword.URL: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> user_pref("keyword.URL", true);
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ftp", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.socks", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ssl", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ssl_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ftp", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> http", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> http_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> share_proxy_settings", true
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> socks", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ssl", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ssl_port", 8080
FF Extension: (ADB Helper) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\adbhelper@mozilla.org [2016-11-03]
FF Extension: (Advanced Cookie Manager) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\cookiemgr@jayapal.com [2016-02-22]
FF Extension: (Valence) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\fxdevtools-adapters@mozilla.org [2016-02-23]
FF Extension: (ExHentai Easy) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid0-db0owQRjcx0mRj5LBNH2MHAwEkc@jetpack [2013-11-24] [ist nicht signiert]
FF Extension: (YouTube Center) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid1-cwbvBTE216jjpg@jetpack.xpi [2016-04-28]
FF Extension: (Shumway) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\shumway@research.mozilla.org [2015-10-15] [ist nicht signiert]
FF Extension: (ProxTube - Gesperrte YouTube Videos entsperren) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2016-10-10]
FF Extension: (NoScript) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-11-28]
FF Extension: (Adblock Plus) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @my.com/Games -> C:\Users\Martin\AppData\Local\MyComGames\NPMyComDetector.dll [2016-06-11] (MY.COM B.V.)
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-08-21] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-01-02] (BitRaider, LLC)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-07-19] (BitRaider, LLC)
R2 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [120888 2016-08-30] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-08-30] (Microsoft Corporation)
S3 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-08-08] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-27] ()
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-31] (Disc Soft Ltd)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-04-27] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S0 mv91xx; system32\DRIVERS\mv91xx.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-29 17:06 - 2016-11-29 17:19 - 00022248 _____ C:\Users\Martin\Desktop\SystemLook.txt
2016-11-29 17:05 - 2016-11-29 17:05 - 00165376 _____ C:\Users\Martin\Desktop\SystemLook_x64.exe
2016-11-29 17:00 - 2016-11-29 17:01 - 00023035 _____ C:\Users\Martin\Desktop\Fixlog.txt
2016-11-28 17:10 - 2016-11-28 17:11 - 00058957 _____ C:\Users\Martin\Desktop\Addition.txt
2016-11-28 17:09 - 2016-11-29 17:20 - 00017372 _____ C:\Users\Martin\Desktop\FRST.txt
2016-11-28 17:00 - 2016-11-28 17:00 - 00131659 _____ C:\Users\Martin\Desktop\JRT.txt
2016-11-28 16:57 - 2016-11-28 16:57 - 01631928 _____ (Malwarebytes) C:\Users\Martin\Desktop\JRT.exe
2016-11-28 16:55 - 2016-11-28 16:55 - 00003516 _____ C:\Users\Martin\Desktop\mbam.txt
2016-11-28 16:30 - 2016-11-28 16:54 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-28 16:30 - 2016-11-28 16:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-11-28 16:30 - 2016-11-28 16:30 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-11-28 16:30 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-11-28 16:30 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-11-28 16:29 - 2016-11-28 16:29 - 22851472 _____ (Malwarebytes ) C:\Users\Martin\Desktop\mbam-setup-2.2.1.1043.exe
2016-11-28 16:18 - 2016-11-28 16:22 - 00000000 ____D C:\AdwCleaner
2016-11-28 16:14 - 2016-11-28 16:14 - 03910208 _____ C:\Users\Martin\Desktop\AdwCleaner_6.030.exe
2016-11-27 20:36 - 2016-11-27 20:36 - 00276696 _____ C:\Windows\Minidump\112716-17487-01.dmp
2016-11-27 15:00 - 2016-11-27 15:00 - 00026564 _____ C:\ComboFix.txt
2016-11-27 14:48 - 2016-11-27 15:00 - 00000000 ____D C:\Qoobox
2016-11-27 14:48 - 2016-11-27 14:59 - 00000000 ____D C:\Windows\erdnt
2016-11-27 14:48 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2016-11-27 14:48 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2016-11-27 14:48 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2016-11-27 14:46 - 2016-11-27 14:46 - 05659307 ____R (Swearware) C:\Users\Martin\Desktop\ComboFix.exe
2016-11-26 11:52 - 2016-11-28 17:07 - 00000000 ____D C:\Users\Martin\rootkit
2016-11-26 11:51 - 2016-11-26 11:55 - 00063263 _____ C:\Users\Martin\Downloads\Addition.txt
2016-11-26 11:50 - 2016-11-26 11:56 - 00027727 _____ C:\Users\Martin\Downloads\FRST.txt
2016-11-26 11:48 - 2016-11-29 17:20 - 00000000 ____D C:\FRST
2016-11-26 11:44 - 2016-11-26 11:44 - 02412032 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2016-11-26 11:20 - 2016-11-26 11:20 - 00388608 _____ (Trend Micro Inc.) C:\Users\Martin\Downloads\HijackThis.exe
2016-11-20 19:17 - 2016-11-20 19:45 - 00000890 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2016-11-20 19:17 - 2016-11-20 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2016-11-20 19:16 - 2016-11-20 19:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2016-11-20 19:15 - 2016-11-20 19:15 - 00000000 ____D C:\Program Files (x86)\Chip Digital GmbH
2016-11-20 18:45 - 2016-11-22 14:13 - 00000000 ____D C:\Users\Martin\FALL4mods
2016-11-18 17:22 - 2016-11-18 17:22 - 00276696 _____ C:\Windows\Minidump\111816-21699-01.dmp
2016-11-18 01:57 - 2016-11-29 17:04 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\Mozilla
2016-11-18 01:33 - 2016-11-18 09:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-11-11 14:05 - 2016-11-11 14:05 - 00000781 _____ C:\Users\Public\Desktop\WOWS_PublicTest.lnk
2016-11-10 22:06 - 2016-11-11 13:38 - 03186048 _____ (Wargaming ) C:\Users\Martin\Downloads\WoWS_PublicTest.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-29 17:11 - 2009-07-14 05:45 - 00022208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-29 17:11 - 2009-07-14 05:45 - 00022208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-29 17:10 - 2010-11-21 07:50 - 00713806 _____ C:\Windows\system32\perfh007.dat
2016-11-29 17:10 - 2010-11-21 07:50 - 00153922 _____ C:\Windows\system32\perfc007.dat
2016-11-29 17:10 - 2009-07-14 06:13 - 01648056 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-29 17:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-29 17:02 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-29 17:01 - 2016-08-05 12:03 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-11-29 17:01 - 2011-11-15 21:03 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\Temp
2016-11-29 00:22 - 2015-10-29 13:29 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2016-11-29 00:15 - 2011-12-19 22:22 - 00000000 ____D C:\Users\Martin\AppData\Roaming\TS3Client
2016-11-28 16:51 - 2015-02-19 19:26 - 00000000 ____D C:\Users\Martin\DAI
2016-11-28 16:51 - 2014-04-01 15:41 - 00000000 ____D C:\Users\Martin\Siemens
2016-11-28 16:51 - 2013-04-18 10:33 - 00000000 ____D C:\Users\Martin\MC
2016-11-28 16:51 - 2012-05-12 09:53 - 00000000 ____D C:\Users\Martin\Skyrim
2016-11-28 16:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SchCache
2016-11-28 16:30 - 2012-04-20 09:49 - 00001106 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-11-28 16:30 - 2012-04-20 09:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2016-11-28 16:30 - 2012-04-20 09:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-11-27 20:36 - 2016-08-06 11:05 - 673605975 _____ C:\Windows\MEMORY.DMP
2016-11-27 20:36 - 2012-08-15 14:01 - 00000000 ____D C:\Windows\Minidump
2016-11-27 15:00 - 2012-01-17 16:42 - 00000000 ____D C:\Users\Martin\AppData\Local\Apps\2.0
2016-11-27 14:58 - 2011-11-15 16:52 - 00000000 ____D C:\Users\Martin
2016-11-27 14:58 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2016-11-26 11:44 - 2013-07-28 12:16 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-26 11:44 - 2011-11-15 21:17 - 00000000 ____D C:\Program Files (x86)\JDownloader
2016-11-26 11:43 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-11-26 02:49 - 2016-08-18 19:08 - 00000000 ____D C:\Users\Martin\AppData\Local\JDownloader v2.0
2016-11-25 19:17 - 2012-07-14 13:43 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2016-11-21 20:07 - 2015-08-11 22:48 - 00000000 ___RD C:\Users\Martin\wows
2016-11-20 20:07 - 2012-04-25 16:00 - 00218112 ___SH C:\Users\Martin\Thumbs.db
2016-11-20 19:45 - 2015-11-11 12:42 - 00000000 ____D C:\Users\Martin\AppData\Local\Fallout4
2016-11-20 19:17 - 2012-01-07 19:18 - 00000000 ____D C:\Users\Martin\Documents\Nexus Mod Manager
2016-11-20 19:17 - 2012-01-07 19:18 - 00000000 ____D C:\Users\Martin\AppData\Local\Black_Tree_Gaming
2016-11-20 19:15 - 2016-02-12 14:34 - 00000000 ____D C:\Users\Martin\AppData\Local\Downloaded Installations
2016-11-18 09:37 - 2012-04-25 21:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-11-12 18:59 - 2015-12-18 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2016-11-11 14:05 - 2012-07-28 22:00 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-11-11 14:05 - 2011-11-21 16:17 - 00000000 ____D C:\Games
2016-11-08 10:42 - 2014-02-20 16:15 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-08 10:42 - 2014-02-20 16:15 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-08 10:42 - 2011-11-16 20:36 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2016-11-08 10:42 - 2011-11-15 18:31 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-08 10:42 - 2011-11-15 18:31 - 00000000 ____D C:\Windows\system32\Macromed
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-09-15 14:05 - 2016-05-02 18:56 - 0000132 _____ () C:\Users\Martin\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-09-15 15:59 - 2015-09-15 15:59 - 0006682 _____ () C:\Users\Martin\AppData\Local\recently-used.xbel
2012-05-11 13:46 - 2012-05-11 18:13 - 0007596 _____ () C:\Users\Martin\AppData\Local\Resmon.ResmonCfg
2014-10-27 10:08 - 2014-10-27 10:08 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Martin\Drakonia Configurator.exe
C:\Users\Martin\dscaler4115.exe
C:\Users\Martin\jre-7u40-windows-x64.exe
C:\Users\Martin\Steam-reg.reg
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-10-27 13:47
==================== Ende von FRST.txt ============================
|
|
29.11.2016, 17:34
| #10 |
| | Windows 7: DCOM Prozesstart unerwartet beendet Addition Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016
durchgeführt von Martin (29-11-2016 17:21:49)
Gestartet von C:\Users\Martin\Desktop
Windows 7 Professional Service Pack 1 (X64) (2011-11-15 15:52:25)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1031562343-2424694273-2990312000-500 - Administrator - Disabled)
Gast (S-1-5-21-1031562343-2424694273-2990312000-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1031562343-2424694273-2990312000-1002 - Limited - Enabled)
Martin (S-1-5-21-1031562343-2424694273-2990312000-1000 - Administrator - Enabled) => C:\Users\Martin
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
7-Zip 9.38 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0938-000001000000}) (Version: 9.38.00.0 - Igor Pavlov)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
AFPL Ghostscript 8.54 (HKLM-x32\...\AFPL Ghostscript 8.54) (Version: - )
AFPL Ghostscript Fonts (HKLM-x32\...\AFPL Ghostscript Fonts) (Version: - )
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
Armored Warfare MyCom (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Armored Warfare MyCom) (Version: 1.62 - My.com B.V.)
Armored Warfare MyCom Beta (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Armored Warfare MyCom Beta) (Version: 1.59 - My.com B.V.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.0.0 - Asmedia Technology)
AutoCAD 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack - English (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 3.0.159.0 - Autodesk)
Autodesk AutoCAD 2015 - English (HKLM\...\AutoCAD 2015 - English) (Version: 20.0.51.0 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
AutoIt v3.3.8.1 (HKLM-x32\...\AutoItv3) (Version: - AutoIt Team)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Bing Powered Search (HKLM-x32\...\BingPoweredSearch) (Version: - )
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH)
Cisco Systems VPN Client 5.0.07.0440 (HKLM\...\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}) (Version: 5.0.7 - Cisco Systems, Inc.)
CPUID HWMonitor 1.22 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
Crossfire 2.0 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Crossfire 2.0) (Version: 2.00.00.00 - SWAT-Portal)
Curse Client (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dragon Age Redesigned Oghren© (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned Oghren©) (Version: - )
Dragon Age Redesigned© Zevran (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Zevran) (Version: - )
Dragon Age Redesigned© (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned©) (Version: - )
Dragon Age Redesigned© Leliana (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Leliana) (Version: - )
Dragon Age Redesigned© Sten (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Sten) (Version: - )
Dragon Age Redesigned© Wynne (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Wynne) (Version: - )
Drakonia Configurator (HKLM-x32\...\{2EAD3327-2F92-455F-A675-E5CC4980B67A}}_is1) (Version: - )
Explorer Suite III (HKLM\...\Explorer Suite_is1) (Version: - )
FAM 1.0.0.0 (HKLM-x32\...\FAM) (Version: 1.0.0.0 - Korrd)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Free CBR Reader (HKLM-x32\...\{B9240DAE-EFA1-4A0E-824F-17B3F99194F8}) (Version: 1.0.0 - Free Picture Solutions)
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Freelancer (HKLM-x32\...\Freelancer 1.0) (Version: - )
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
gmax (HKLM-x32\...\{3FA7A919-87DA-42B1-814B-86DE8DCA17C2}) (Version: 4.4.0.125 - Discreet)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
HardCMP v1.0.0.23 (HKLM-x32\...\HardCMP_is1) (Version: 1.0.0.23 - )
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
IsoBuster 3.0 (HKLM-x32\...\IsoBuster_is1) (Version: 3.0 - Smart Projects)
Java 3D 1.5.1 (HKLM-x32\...\{32A9C5B3-D166-4C6D-A11E-A54473151000}) (Version: 1.5.1 - Sun Microsystems, Inc.)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Minion (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{Minion}}_is1) (Version: 2.0 - ZAM Network LLC)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 50.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0 (x86 de)) (Version: 50.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.0.6152 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mumble 1.2.3 (HKLM-x32\...\{C3E9887A-23BA-4777-8080-191A5AFCAB74}) (Version: 1.2.3 - Thorvald Natvig)
My.com Game Center (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\MyComGames) (Version: 3.162 - My.com B.V.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.9 - Black Tree Gaming)
Nitro Reader 3 (HKLM\...\{9EA981E5-EE67-4662-86F1-58937D31FE07}) (Version: 3.5.6.5 - Nitro)
NVIDIA PhysX (HKLM-x32\...\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}) (Version: 9.09.0814 - NVIDIA Corporation)
OMC ModPack Client Version 1.1.11.6 (HKLM-x32\...\{E2F3187C-2B94-486F-8914-E69211487FB6}_is1) (Version: 1.1.11.6 - Odem Mortis)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
paint.net (HKLM\...\{A1D05314-DC32-4668-A97E-51060EC8BCCE}) (Version: 4.0.12 - dotPDN LLC)
Parsec (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\a53dc3b81e52c50e) (Version: 1.0.0.42 - Parsec)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games)
paw·ned‹4›2 – Die Antwort auf alle Buildfragen (HKLM-x32\...\pawned42) (Version: - JN-GAMES Software)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
Pdfedit (HKLM-x32\...\{6C11089A-E23F-4E9B-B12C-316BF1A4376B}) (Version: 4.5.0.0 - PdfEdit team)
Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.6 - )
PowerDVD (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: - )
Privoxy (remove only) (HKLM-x32\...\Privoxy) (Version: - )
RAD Video Tools (HKLM-x32\...\RADVideo) (Version: - )
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 2.2 r1116 - )
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6235 - Realtek Semiconductor Corp.)
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)
Skype™ 7.23 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.23.105 - Skype Technologies S.A.)
Slime Rancher (HKLM-x32\...\Slime Rancher0.2.4b) (Version: 0.2.4b - TheRaven1)
Space Engineers (HKLM\...\Steam App 244850) (Version: - Keen Software House)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.05.0001 - Electronic Arts)
sTabLauncher (HKLM-x32\...\{9E5A4758-0189-419B-A6ED-FE4CBD255F05}) (Version: 2.2.3 - Sergio Santos)
Star Citizen Launcher (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Star Citizen Launcher) (Version: 00.01.00.00 - Cloud Imperium Games)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab (HKLM-x32\...\{F89CDED6-B1F1-489F-BA44-698BF6A737C2}) (Version: 6.1.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Witcher Enhanced Edition (HKLM-x32\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.00.0000 - CD Projekt Red)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.)
VLC media player 2.0.2 (HKLM-x32\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
War Thunder Launcher 1.0.1.386 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: 0.0.0.0 - Blizzard Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WindowsAndroid version 4.0.3 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{7E07052F-A4CE-4932-B066-B9203888439F}_is1) (Version: 4.0.3 - SocketeQ, Inc.)
WinRAR 5.30 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
World of Warships (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net)
YACReader 8.5.0 (HKLM-x32\...\YACReader_is1) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{06d45639-4c61-4cab-be15-52f5e6e72d31}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{27e52464-33a3-42ab-a482-c84fab56362a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{4e9b62d8-f542-423b-8e8e-2007daeac423}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{7acd7f3b-8bb8-430f-8499-dd8077c7af97}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{7d430c4d-1b80-464c-8f5d-2d99d4ff9c85}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{8059b7ca-030b-489d-b211-5b961893bedf}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{b8be70ea-432e-4a55-ba5c-a83cd1e376b6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{b9540fcf-2d9b-4e81-8557-2c9592685a9a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{e26b586f-8643-46af-a2fc-bc81c5389766}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\en-US\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{e85372c0-2724-41f4-a715-0806ee361bb0}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {118AFB0A-8683-4B7C-BCDC-977FBEDB75A1} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-08-30] (Microsoft Corporation)
Task: {1D4D8704-1B7E-4E12-8562-8B322EEBA1F1} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-08-30] (Microsoft Corporation)
Task: {305492CB-4722-4BA3-BF71-A11429E75A10} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)
Task: {35419A1B-98CE-4D48-91FD-1FBF82A10B24} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-09-16] (Advanced Micro Devices, Inc.)
Task: {AAE2BC6B-1119-4222-B6C7-017DDD173F9B} - System32\Tasks\{652BC46E-1D96-4931-B893-AE3A21457C8E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.158/de/eula
Task: {B3F91BB8-7CC1-4BE6-B368-4204269BAFB6} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-09-22] (Oracle Corporation)
Task: {EF75F260-60A6-4F74-882C-2A4CF98BD56F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-11-24 20:35 - 2005-03-12 01:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2013-03-22 17:18 - 2015-08-08 17:04 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2016-09-13 01:01 - 2016-09-13 01:01 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2015-11-22 18:53 - 2013-10-29 13:43 - 00248832 _____ () C:\Program Files (x86)\Drakonia Configurator\hid.exe
2015-11-22 18:53 - 2012-12-11 11:14 - 00240640 _____ () C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
2011-03-04 12:49 - 2011-03-04 12:49 - 00202752 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2011-12-27 08:40 - 2011-12-27 08:40 - 00086528 _____ () C:\Program Files (x86)\Privoxy\mgwz.dll
2015-11-22 18:53 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Drakonia Configurator\HidDevice.dll
2015-11-22 18:53 - 2011-11-22 14:18 - 00249856 _____ () C:\Program Files (x86)\Drakonia Configurator\language.dll
2016-10-16 11:54 - 2016-10-16 11:54 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f91bd970f20123a46b575cf6e92bc441\IsdiInterop.ni.dll
2011-11-15 17:06 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\sony.com -> sony.com
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2016-11-27 14:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 195.34.133.21 - 212.186.211.21
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^vpngui.exe.lnk => C:\Windows\pss\vpngui.exe.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: GamingMouse => C:\Program Files (x86)\Drakonia Configurator\hid.exe
MSCONFIG\startupreg: Remote Control Editor => "C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe"
MSCONFIG\startupreg: RemoteControl => "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
MSCONFIG\startupreg: RGSC => K:\Games\GTA4\Rockstar Games Social Club\RGSCLauncher.exe /silent
MSCONFIG\startupreg: Smart File Advisor => "C:\Program Files (x86)\Smart File Advisor\sfa.exe" /checkassoc
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{DA14B3E4-1977-4874-9BC8-8D78BDEFA0FD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{D45D251F-9F78-419B-B3FB-CC129056CC7C}C:\games\call of duty black ops\blackops.exe] => (Block) C:\games\call of duty black ops\blackops.exe
FirewallRules: [UDP Query User{115987AB-3EE6-42AB-81E0-B6C843F4B95B}C:\games\call of duty black ops\blackops.exe] => (Block) C:\games\call of duty black ops\blackops.exe
FirewallRules: [{D023DD3D-B9E3-4FD4-A706-20EA6612D3D3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{10F598B7-6248-4641-A32C-7B8FAAB3B384}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [TCP Query User{15CF0E2B-A339-4B42-99D5-37CA542D4ABD}K:\games\gw2\gw2.exe] => (Allow) K:\games\gw2\gw2.exe
FirewallRules: [UDP Query User{32719093-8BD2-44A4-856C-49B1EA2D33BE}K:\games\gw2\gw2.exe] => (Allow) K:\games\gw2\gw2.exe
FirewallRules: [{254B1476-B09C-4F89-A9F6-82A0F56FD0B5}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{D5872796-7876-49F7-A2D8-8FF6D5A53523}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{CA94F41A-DD1B-4A72-86DE-1032FE2B366D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6FD7189D-1EBA-47A4-A5EB-BF06EC520BBC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DBFEB9BB-2B08-494C-8C03-EE196D5B1F96}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B0ECFFA5-FCEA-4F5E-BDB7-F52E27F0C431}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2D37DAE8-DD97-4929-8CD2-F5A8E96A2A74}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{14E6B066-CB4B-4F42-8C65-A30BD8CB40EA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B5E570ED-F1A3-4F9D-B837-FF53434C629B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{32EF9C71-C0A9-4FC5-9335-654F2485208E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{95F75607-BD3A-4130-849D-35460CDFFF67}] => (Allow) LPort=80
FirewallRules: [{D5CA12CD-BD78-4A0D-8C42-96AC5B89A8DB}] => (Allow) LPort=443
FirewallRules: [{6971AD85-B1AE-4DFB-B505-CA0FBA19DF34}] => (Allow) LPort=20010
FirewallRules: [{A0FD53BC-5301-453D-9458-D8690DA6BB3A}] => (Allow) LPort=3478
FirewallRules: [{C9B4DDF2-352C-4876-9231-4759D64BD32A}] => (Allow) LPort=7850
FirewallRules: [{6BE2B612-FEC8-44EA-8511-E6821D6D8B95}] => (Allow) LPort=7852
FirewallRules: [{126E1A5D-D8E5-4B2E-A48C-35CF5EE98F8C}] => (Allow) LPort=7853
FirewallRules: [{01208F69-21AE-4235-B5EF-F23299D59698}] => (Allow) LPort=27022
FirewallRules: [{9406B5A7-ED28-45B9-9945-DB2D0112F1B1}] => (Allow) LPort=6881
FirewallRules: [{A30E663C-AF63-402A-961B-4FAB7B8F6295}] => (Allow) LPort=33333
FirewallRules: [{F8B8FA6D-E5C6-4F82-9F61-EEF5831AB045}] => (Allow) LPort=20443
FirewallRules: [{197DC96A-400A-4B7F-BF17-096C617FDC52}] => (Allow) LPort=8090
FirewallRules: [{315A91A7-50CD-4AA0-9DA4-7B3EA5AF4E41}] => (Allow) LPort=50248
FirewallRules: [{647CF977-885E-487B-AECF-0D0BCFE394FB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{BFF7822D-29BB-435E-B0CC-E6FB6386D6B7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [{19C193B3-0E36-4FC9-B776-EF594F2E06D7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CCFA21AF-6946-4394-9393-A7914C1EAB6A}] => (Allow) LPort=2869
FirewallRules: [{69AD3371-0624-45F5-B3F4-EDF4EB7B9AEA}] => (Allow) LPort=1900
FirewallRules: [{24E4719D-875C-4164-92CD-2358293AF128}] => (Allow) C:\Program Files (x86)\OMC ModPack Client\OMC ModPack Client.exe
FirewallRules: [{65BDC62F-A6D0-4638-B54B-1A5E9635D7D4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{17401A7C-6DB7-40CD-8447-D6B647F506C6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4DD8C035-CD15-442C-BCBB-FDC26E1DE05D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{377EDF59-81A6-4C6E-9217-72E77BF00BAC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{E0998469-C626-45BA-9023-75797B0D51F7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{F4B02B17-DF19-4690-B6A3-67F46E14107D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{7FE67A19-1C7C-47AF-886D-E639BF16019C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{897D2F00-3723-4C6C-B2E3-F9E10B22A695}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{E63EFA4F-52DD-4E50-98F4-C64486DE5FFA}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{C5BA1463-92BA-436F-AC64-9C92FFF45D03}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{2630B555-48AF-4038-B00E-B7D7FE02BF8E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{32C8E90C-6216-433E-9875-8ACACA120F19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [{08AD94ED-4C34-474D-A3E2-63105AB508F1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8BA530C5-C118-43C2-BA5F-846FEBCC7E1D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E05AE212-44BA-4CA4-BCB3-06BDF2683ADA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D230EB6-8F4E-46C7-A4EF-DA3C02267FE5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{05FF1BE1-D9EA-4086-BAF0-54F754F95969}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{62F7182C-FD69-434C-8A3A-2C2BF7AE516A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{5EAD725D-4F20-4D72-8883-11872479E347}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{9A3D1993-D693-465A-A1CD-CE941E320268}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{ABE41180-295F-42A5-97F5-96096DE702EF}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{692AD4BF-5BA0-414C-9421-6D95E92989C5}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{6E847FBB-0774-4493-A233-2174541C47DE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{FE1762B0-077E-4E00-BF76-23E75A326709}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1A163A24-C1B9-43BE-9A54-BD8DC369BE08}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3C4E0A4-631F-494A-BF04-4442AF1A7E45}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{189D7710-D8B9-4F62-9A90-D41D995B9F6C}C:\users\martin\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\martin\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{6711ABB2-D72E-4416-B773-CD004256953C}C:\users\martin\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\martin\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{96861C9B-1464-4C4C-B036-84D8033746A3}K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{F0C2660F-3934-4181-8948-81663C7B4FAB}K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [TCP Query User{F1E2D9C4-30A9-44DC-9BB6-E63650A9A8CB}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [UDP Query User{F7AB5B48-81C1-4362-9BB9-3785D2587A4A}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [TCP Query User{94D18C8F-86D3-4AC4-98A3-2145FE0C6DCE}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [UDP Query User{732EAB2F-453C-4DF1-9872-F7CBAD021540}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [TCP Query User{A56EEAA9-67C5-4219-87F8-9BDE6D1AF9C6}K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{705B4100-C489-4C32-8B09-0449A4B51187}K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [{BD12A005-5430-4622-9F42-99B38B26F5F8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{033717DE-391B-4088-95DF-E6BE2102BD1B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [TCP Query User{107DFFE1-EC96-4538-90EB-483687386B28}K:\games\wows_publictest\wowslauncher.exe] => (Allow) K:\games\wows_publictest\wowslauncher.exe
FirewallRules: [UDP Query User{98C38A1F-A0D5-4A4A-AFB4-85EBEA8AA13B}K:\games\wows_publictest\wowslauncher.exe] => (Allow) K:\games\wows_publictest\wowslauncher.exe
FirewallRules: [{2B51E7DB-C122-42CD-BBE0-4AE609DC6D32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{BB518C50-7E28-4A63-A098-742922983C7D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{A6035418-4970-479E-9EA4-85749B68085E}] => (Allow) K:\Games\ESTU\Launcher\GameConsultant.exe
FirewallRules: [{1F20723E-7CE5-464E-8542-72EC791C4AC8}] => (Allow) K:\Games\ESTU\Launcher\Bethesda.net_Launcher.exe
FirewallRules: [TCP Query User{D4FDF617-63A5-46BE-A60E-960B2E4F1E2E}K:\games\warship\wowslauncher.exe] => (Allow) K:\games\warship\wowslauncher.exe
FirewallRules: [UDP Query User{D7E165A1-902B-4F4B-B2A9-D3AD6A00AD50}K:\games\warship\wowslauncher.exe] => (Allow) K:\games\warship\wowslauncher.exe
FirewallRules: [{D627856E-3ACF-4865-AFEA-ACF0EFFADBC0}] => (Allow) K:\Games\WT\WarThunder\launcher.exe
FirewallRules: [{C0806AFA-854B-4D6A-B5E6-96548D732351}] => (Allow) K:\Games\WT\WarThunder\launcher.exe
FirewallRules: [{A3F76B1A-5757-4FAF-9B82-9C9E68966F07}] => (Allow) K:\Games\WT\WarThunder\aces.exe
FirewallRules: [{D7BF61B9-24DB-47C1-AD5A-A1CC0346C734}] => (Allow) K:\Games\WT\WarThunder\aces.exe
FirewallRules: [TCP Query User{2FD75038-0456-428B-8104-7BBDAB2E2D71}K:\games\wt\warthunder\win64\aces.exe] => (Allow) K:\games\wt\warthunder\win64\aces.exe
FirewallRules: [UDP Query User{A82A83EA-8EB2-4583-B15C-60CEEA771357}K:\games\wt\warthunder\win64\aces.exe] => (Allow) K:\games\wt\warthunder\win64\aces.exe
FirewallRules: [TCP Query User{F905E323-B4DF-4C40-9231-941118005F79}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{3B08B716-9064-4E1C-B210-D840F0041E08}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{E60A25E8-D512-4DEF-998C-C98D84AF8B5A}C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [UDP Query User{6C728D7F-4FB7-44B4-ACA6-00ECAEBA1BBD}C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [TCP Query User{F0570CD4-A0DD-4F17-A6D8-EF1564F8BF3D}C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe
FirewallRules: [UDP Query User{A38A26FB-4783-48AC-A954-8934A8A6B9E0}C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe
FirewallRules: [{9455FA43-B14A-4CA0-8904-3CC6F639720B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{F153E4D7-8DD4-4D5B-80E8-087C75626B6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [TCP Query User{491CFD22-984D-4134-8D92-A3F1F5B6F4A5}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{99640C1F-820D-42F7-BEE2-EE224A842DCB}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [{D25E39C0-0429-4FA7-B241-549A93469372}] => (Allow) C:\Games\WOWS_PublicTest\WoWsLauncher.exe
FirewallRules: [{04239541-694A-4378-8948-1C13D266D278}] => (Allow) C:\Games\WOWS_PublicTest\WoWsLauncher.exe
FirewallRules: [{68A16BAF-1A67-478C-AA18-8C42C3613E2F}] => (Allow) C:\Games\WOWS_PublicTest\worldofwarships.exe
FirewallRules: [{C934DB75-C881-48FF-919A-C1E86685AFCF}] => (Allow) C:\Games\WOWS_PublicTest\worldofwarships.exe
==================== Wiederherstellungspunkte =========================
16-11-2016 10:18:26 Windows Update
18-11-2016 15:28:11 DirectX wurde installiert
24-11-2016 13:22:52 Windows Update
27-11-2016 00:28:35 DirectX wurde installiert
28-11-2016 16:58:19 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/29/2016 05:04:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/29/2016 09:07:51 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/29/2016 12:51:10 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (11/29/2016 12:22:15 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (11/29/2016 12:22:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Gw2-64.exe, Version: 1.0.0.1, Zeitstempel: 0x583626bb
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000c024a6fa
ID des fehlerhaften Prozesses: 0x16c4
Startzeit der fehlerhaften Anwendung: 0x01d249c0217a68cd
Pfad der fehlerhaften Anwendung: K:\Games\GW2\Gw2-64.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 7be29547-b5c1-11e6-8fe6-5404a66b46f9
Error: (11/29/2016 12:02:00 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (11/28/2016 11:54:33 PM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (11/28/2016 11:50:50 PM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (11/28/2016 11:46:18 PM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (11/28/2016 11:45:35 PM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Systemfehler:
=============
Error: (11/29/2016 05:03:47 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mv91xx
Error: (11/29/2016 05:03:46 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/29/2016 05:03:46 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/29/2016 05:00:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/29/2016 05:00:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/29/2016 05:00:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/29/2016 05:00:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/29/2016 05:00:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Cisco Systems, Inc. VPN Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/29/2016 05:00:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "chip 1-click download service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/29/2016 05:00:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2016-11-27 14:58:08.488
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2016-11-27 14:58:08.426
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-16 20:00:39.437
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-16 20:00:39.367
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-15 21:57:34.851
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-15 21:57:34.774
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.833
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Martin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.785
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Martin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.719
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.672
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 38%
Installierter physikalischer RAM: 8168.77 MB
Verfügbarer physikalischer RAM: 5022.71 MB
Summe virtueller Speicher: 16335.71 MB
Verfügbarer virtueller Speicher: 13667.03 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:491.96 GB) (Free:117.63 GB) NTFS
Drive k: (Volume) (Fixed) (Total:439.45 GB) (Free:197.82 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0D7E7020)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=492 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=439.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
30.11.2016, 16:55
| #11 |
| /// TB-Ausbilder | Windows 7: DCOM Prozesstart unerwartet beendet Servus, wir entfernen die letzten Reste und kontrollieren nochmal alles.  Hinweis: Der Suchlauf mit ESET kann länger dauern. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
FirewallRules: [TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\hola_plugin_RASAPI32
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\hola_plugin_x64_RASAPI32
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
Schritt 3 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 4
Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?Bitte poste mit deiner nächsten Antwort
|
|
01.12.2016, 15:39
| #12 |
| | Windows 7: DCOM Prozesstart unerwartet beendet Fixlog Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016
durchgeführt von Martin (01-12-2016 10:24:19) Run:2
Gestartet von C:\Users\Martin\Desktop
Geladene Profile: Martin (Verfügbare Profile: Martin)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
FirewallRules: [TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
FirewallRules: [UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe] => (Block) C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\hola_plugin_RASAPI32
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\hola_plugin_x64_RASAPI32
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{825E3A0C-7CD9-49C1-92FF-AA0B7A0D6256}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe => Wert erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9B1D214A-2E86-412E-9A37-508D956B75C1}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe => Wert erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{AE408CFD-9E72-4673-9B80-C0E60015DBE4}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe => Wert erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{99AC8BD9-AAB7-4808-A04F-F57E9C213FDD}C:\users\martin\appdata\local\hola\firefox\app\hola_plugin.exe => Wert erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\hola_plugin_RASAPI32 => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\hola_plugin_x64_RASAPI32 => Schlüssel erfolgreich entfernt
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 17367270 B
Java, Flash, Steam htmlcache => 492 B
Windows/system/drivers => 17338 B
Edge => 0 B
Chrome => 0 B
Firefox => 35309215 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 46350 B
Martin => 5470574 B
UpdatusUser => 0 B
UpdatusUser => 0 B
RecycleBin => 186205888 B
EmptyTemp: => 241.1 MB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 10:24:22 ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=29ce401110b8384ebcd0793406e4ab70
# end=init
# utc_time=2016-12-01 09:29:07
# local_time=2016-12-01 10:29:07 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=41221
Update Finalize
Updated modules version: 0
Old modules - leave modules
Update Init
Update Download
Update Finalize
Updated modules version: 31587
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 31587
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=29ce401110b8384ebcd0793406e4ab70
# end=updated
# utc_time=2016-12-01 09:37:45
# local_time=2016-12-01 10:37:45 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=29ce401110b8384ebcd0793406e4ab70
# engine=31587
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-12-01 01:43:48
# local_time=2016-12-01 02:43:48 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 3700768 151893450 0 0
# scanned=456706
# found=12
# cleaned=0
# scan_time=14763
sh=F849B9F530ACA15E341295A7595D9252E6262844 ft=0 fh=0000000000000000 vn="LNK/Agent.CH Trojaner" ac=I fn="C:\AdwCleaner\quarantine\files\cidipwktbzoudviobsahqzwrpqtqqlkk\Get the Media Finder License.URL"
sh=3D09B4A1E2E55E7D1DF62B739D434F3F4E51DB90 ft=1 fh=31688d33c108b3f2 vn="Win32/Toolbar.Widgi evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe"
sh=672708ACAD0C9077B5F991EE8B14D5E23AF3F15A ft=1 fh=b90be05a8fc3a563 vn="Variante von Win32/Toolbar.Babylon.H evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\sTabLauncher\Sponsor\Babylon9_setup_15500.exe"
sh=A766CC4B5835FF2A0FA02CD8FE333757C3A3C033 ft=1 fh=6288a12e7b129fa4 vn="Variante von Win32/InstallCore.ADX.gen evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\Downloads\cbrreader_setup(1).exe"
sh=C95708F43A748061D4C31D39204F5D2FAAE9410D ft=1 fh=4d6416c07f3bf995 vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\Downloads\isobuster_3_0.exe"
sh=5396F37DCAD0D18370CC0B9BE2EC3C5E8F2922F3 ft=1 fh=6550c5ae41c2c11e vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\Downloads\Java Runtime Environment 32 Bit - CHIP-Downloader.exe"
sh=6CF8A9F031B45F70BE3E66E7ACC7449CDA15FA34 ft=1 fh=2de4b6f517306153 vn="Win32/Toolbar.Widgi evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\Downloads\PDFCreator-1_2_3_setup.exe"
sh=AD6D8BBC3E219F9EDF7C9E11B65D205E881B40BE ft=1 fh=7f24f00e5c3b1806 vn="Win32/Toggle.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\Downloads\pdf_repair_toolbox.exe"
sh=D04D5A5EC70904A85A32560A0BEBD2D51A6D2E39 ft=1 fh=cd89c64429bc06c5 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\Downloads\Trillian - CHIP-Installer.exe"
sh=C8185EBDC7E7BE0EE45AA76FB47479F1F37921F6 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\Downloads\Desktopedit\sTabLauncherV2.2.3.msi"
sh=3F9B782A3A10640435A5816153177BFAF5B54C6A ft=1 fh=e12ebc21bb0e5ce5 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\FALL4mods\Nexus Mod Manager - CHIP-Installer.exe"
sh=C8185EBDC7E7BE0EE45AA76FB47479F1F37921F6 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.H evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\2b8e09f.msi"
Code:
ATTFilter
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016
durchgeführt von Martin (Administrator) auf MYRMIX (01-12-2016 15:28:03)
Gestartet von C:\Users\Martin\Desktop
Geladene Profile: Martin (Verfügbare Profile: Martin)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 10 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Chip Digital GmbH) C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Drakonia Configurator\hid.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(The Privoxy team - www.privoxy.org) C:\Program Files (x86)\Privoxy\privoxy.exe
() C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1354712 2016-08-30] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-09-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [GamingMouse] => C:\Program Files (x86)\Drakonia Configurator\hid.exe [248832 2013-10-29] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Run: [World of Warships] => K:\Games\WOWS_PublicTest\WargamingGameUpdater.exe [3134216 2016-11-07] (Wargaming.net)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Privoxy.lnk [2012-04-03]
ShortcutTarget: Privoxy.lnk -> C:\Program Files (x86)\Privoxy\privoxy.exe (The Privoxy team - www.privoxy.org)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter - Verknüpfung.lnk [2012-04-01]
ShortcutTarget: Rainmeter - Verknüpfung.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21
Tcpip\..\Interfaces\{AE141692-DE9B-4CC3-93A4-62B71E738879}: [DhcpNameServer] 195.34.133.21 212.186.211.21
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-5781ab34
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5781ab34&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000 -> {A0C59A24-F50F-433C-928B-8235295514F4} URL = hxxps://at.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-23] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-23] (Oracle Corporation)
FireFox:
========
FF DefaultProfile: a9urom3s.default-1384358611811
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 [2016-12-01]
FF NewTab: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> Bing Powered Search
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> Bing Powered Search
FF Homepage: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> www.google.at
FF Keyword.URL: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> user_pref("keyword.URL", true);
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ftp", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.socks", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ssl", "180.250.69.58"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> backup.ssl_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ftp", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> http", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> http_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> share_proxy_settings", true
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> socks", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ssl", "182.30.2.37"
FF NetworkProxy: Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811 -> ssl_port", 8080
FF Extension: (ADB Helper) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\adbhelper@mozilla.org [2016-11-03]
FF Extension: (Advanced Cookie Manager) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\cookiemgr@jayapal.com [2016-02-22]
FF Extension: (Valence) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\fxdevtools-adapters@mozilla.org [2016-02-23]
FF Extension: (ExHentai Easy) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid0-db0owQRjcx0mRj5LBNH2MHAwEkc@jetpack [2013-11-24] [ist nicht signiert]
FF Extension: (YouTube Center) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\jid1-cwbvBTE216jjpg@jetpack.xpi [2016-04-28]
FF Extension: (Shumway) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\shumway@research.mozilla.org [2015-10-15] [ist nicht signiert]
FF Extension: (ProxTube - Gesperrte YouTube Videos entsperren) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2016-10-10]
FF Extension: (NoScript) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-11-28]
FF Extension: (Adblock Plus) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\a9urom3s.default-1384358611811\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1031562343-2424694273-2990312000-1000: @my.com/Games -> C:\Users\Martin\AppData\Local\MyComGames\NPMyComDetector.dll [2016-06-11] (MY.COM B.V.)
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-08-21] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-01-02] (BitRaider, LLC)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-07-19] (BitRaider, LLC)
R2 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [120888 2016-08-30] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-08-30] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-08-08] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-27] ()
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-31] (Disc Soft Ltd)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-04-27] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S0 mv91xx; system32\DRIVERS\mv91xx.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-01 15:09 - 2016-12-01 15:27 - 00000000 ____D C:\ProgramData\HitmanPro
2016-12-01 15:09 - 2016-12-01 15:09 - 11581544 _____ (SurfRight B.V.) C:\Users\Martin\Desktop\HitmanPro_x64.exe
2016-12-01 15:07 - 2016-12-01 14:43 - 00004070 _____ C:\Users\Martin\Desktop\ESETlog.txt
2016-12-01 10:28 - 2016-12-01 10:28 - 02870984 _____ (ESET) C:\Users\Martin\Desktop\esetsmartinstaller_deu.exe
2016-12-01 00:32 - 2016-12-01 10:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-11-29 17:06 - 2016-11-29 17:19 - 00022248 _____ C:\Users\Martin\Desktop\SystemLook.txt
2016-11-29 17:05 - 2016-11-29 17:05 - 00165376 _____ C:\Users\Martin\Desktop\SystemLook_x64.exe
2016-11-29 17:00 - 2016-12-01 10:24 - 00003325 _____ C:\Users\Martin\Desktop\Fixlog.txt
2016-11-28 17:10 - 2016-11-29 17:22 - 00058107 _____ C:\Users\Martin\Desktop\Addition.txt
2016-11-28 17:09 - 2016-12-01 15:28 - 00017315 _____ C:\Users\Martin\Desktop\FRST.txt
2016-11-28 17:00 - 2016-11-28 17:00 - 00131659 _____ C:\Users\Martin\Desktop\JRT.txt
2016-11-28 16:57 - 2016-11-28 16:57 - 01631928 _____ (Malwarebytes) C:\Users\Martin\Desktop\JRT.exe
2016-11-28 16:55 - 2016-11-28 16:55 - 00003516 _____ C:\Users\Martin\Desktop\mbam.txt
2016-11-28 16:30 - 2016-11-28 16:54 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-28 16:30 - 2016-11-28 16:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-11-28 16:30 - 2016-11-28 16:30 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-11-28 16:30 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-11-28 16:30 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-11-28 16:29 - 2016-11-28 16:29 - 22851472 _____ (Malwarebytes ) C:\Users\Martin\Desktop\mbam-setup-2.2.1.1043.exe
2016-11-28 16:18 - 2016-11-28 16:22 - 00000000 ____D C:\AdwCleaner
2016-11-28 16:14 - 2016-11-28 16:14 - 03910208 _____ C:\Users\Martin\Desktop\AdwCleaner_6.030.exe
2016-11-27 20:36 - 2016-11-27 20:36 - 00276696 _____ C:\Windows\Minidump\112716-17487-01.dmp
2016-11-27 15:00 - 2016-11-27 15:00 - 00026564 _____ C:\ComboFix.txt
2016-11-27 14:48 - 2016-11-27 15:00 - 00000000 ____D C:\Qoobox
2016-11-27 14:48 - 2016-11-27 14:59 - 00000000 ____D C:\Windows\erdnt
2016-11-27 14:48 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2016-11-27 14:48 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2016-11-27 14:48 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2016-11-27 14:48 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2016-11-27 14:46 - 2016-11-27 14:46 - 05659307 ____R (Swearware) C:\Users\Martin\Desktop\ComboFix.exe
2016-11-26 11:52 - 2016-11-28 17:07 - 00000000 ____D C:\Users\Martin\rootkit
2016-11-26 11:51 - 2016-11-26 11:55 - 00063263 _____ C:\Users\Martin\Downloads\Addition.txt
2016-11-26 11:50 - 2016-11-26 11:56 - 00027727 _____ C:\Users\Martin\Downloads\FRST.txt
2016-11-26 11:48 - 2016-12-01 15:28 - 00000000 ____D C:\FRST
2016-11-26 11:44 - 2016-11-26 11:44 - 02412032 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2016-11-26 11:20 - 2016-11-26 11:20 - 00388608 _____ (Trend Micro Inc.) C:\Users\Martin\Downloads\HijackThis.exe
2016-11-20 19:17 - 2016-11-20 19:45 - 00000890 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2016-11-20 19:17 - 2016-11-20 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2016-11-20 19:16 - 2016-11-20 19:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2016-11-20 19:15 - 2016-11-20 19:15 - 00000000 ____D C:\Program Files (x86)\Chip Digital GmbH
2016-11-20 18:45 - 2016-11-22 14:13 - 00000000 ____D C:\Users\Martin\FALL4mods
2016-11-18 17:22 - 2016-11-18 17:22 - 00276696 _____ C:\Windows\Minidump\111816-21699-01.dmp
2016-11-18 01:57 - 2016-12-01 10:27 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\Mozilla
2016-11-11 14:05 - 2016-11-11 14:05 - 00000781 _____ C:\Users\Public\Desktop\WOWS_PublicTest.lnk
2016-11-10 22:06 - 2016-11-11 13:38 - 03186048 _____ (Wargaming ) C:\Users\Martin\Downloads\WoWS_PublicTest.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-01 10:34 - 2009-07-14 05:45 - 00022208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-01 10:34 - 2009-07-14 05:45 - 00022208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-01 10:31 - 2010-11-21 07:50 - 00713806 _____ C:\Windows\system32\perfh007.dat
2016-12-01 10:31 - 2010-11-21 07:50 - 00153922 _____ C:\Windows\system32\perfc007.dat
2016-12-01 10:31 - 2009-07-14 06:13 - 01648056 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-01 10:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-01 10:25 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-01 10:24 - 2016-08-05 12:03 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-12-01 10:20 - 2012-04-25 16:00 - 00225280 ___SH C:\Users\Martin\Thumbs.db
2016-12-01 10:17 - 2014-02-20 11:17 - 00002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 3.lnk
2016-12-01 10:17 - 2014-02-20 11:17 - 00002003 _____ C:\Users\Public\Desktop\Nitro Reader.lnk
2016-12-01 10:12 - 2012-04-25 21:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-01 00:38 - 2011-11-15 21:03 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\Temp
2016-11-30 11:14 - 2015-10-29 13:29 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2016-11-29 21:59 - 2011-12-19 22:22 - 00000000 ____D C:\Users\Martin\AppData\Roaming\TS3Client
2016-11-28 16:51 - 2015-02-19 19:26 - 00000000 ____D C:\Users\Martin\DAI
2016-11-28 16:51 - 2014-04-01 15:41 - 00000000 ____D C:\Users\Martin\Siemens
2016-11-28 16:51 - 2013-04-18 10:33 - 00000000 ____D C:\Users\Martin\MC
2016-11-28 16:51 - 2012-05-12 09:53 - 00000000 ____D C:\Users\Martin\Skyrim
2016-11-28 16:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SchCache
2016-11-28 16:30 - 2012-04-20 09:49 - 00001106 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-11-28 16:30 - 2012-04-20 09:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2016-11-28 16:30 - 2012-04-20 09:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-11-27 20:36 - 2016-08-06 11:05 - 673605975 _____ C:\Windows\MEMORY.DMP
2016-11-27 20:36 - 2012-08-15 14:01 - 00000000 ____D C:\Windows\Minidump
2016-11-27 15:00 - 2012-01-17 16:42 - 00000000 ____D C:\Users\Martin\AppData\Local\Apps\2.0
2016-11-27 14:58 - 2011-11-15 16:52 - 00000000 ____D C:\Users\Martin
2016-11-27 14:58 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2016-11-26 11:44 - 2013-07-28 12:16 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-26 11:44 - 2011-11-15 21:17 - 00000000 ____D C:\Program Files (x86)\JDownloader
2016-11-26 11:43 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-11-26 02:49 - 2016-08-18 19:08 - 00000000 ____D C:\Users\Martin\AppData\Local\JDownloader v2.0
2016-11-25 19:17 - 2012-07-14 13:43 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2016-11-21 20:07 - 2015-08-11 22:48 - 00000000 ___RD C:\Users\Martin\wows
2016-11-20 19:45 - 2015-11-11 12:42 - 00000000 ____D C:\Users\Martin\AppData\Local\Fallout4
2016-11-20 19:17 - 2012-01-07 19:18 - 00000000 ____D C:\Users\Martin\Documents\Nexus Mod Manager
2016-11-20 19:17 - 2012-01-07 19:18 - 00000000 ____D C:\Users\Martin\AppData\Local\Black_Tree_Gaming
2016-11-20 19:15 - 2016-02-12 14:34 - 00000000 ____D C:\Users\Martin\AppData\Local\Downloaded Installations
2016-11-12 18:59 - 2015-12-18 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2016-11-11 14:05 - 2012-07-28 22:00 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-11-11 14:05 - 2011-11-21 16:17 - 00000000 ____D C:\Games
2016-11-08 10:42 - 2014-02-20 16:15 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-08 10:42 - 2014-02-20 16:15 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-08 10:42 - 2011-11-16 20:36 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2016-11-08 10:42 - 2011-11-15 18:31 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-08 10:42 - 2011-11-15 18:31 - 00000000 ____D C:\Windows\system32\Macromed
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-09-15 14:05 - 2016-05-02 18:56 - 0000132 _____ () C:\Users\Martin\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-09-15 15:59 - 2015-09-15 15:59 - 0006682 _____ () C:\Users\Martin\AppData\Local\recently-used.xbel
2012-05-11 13:46 - 2012-05-11 18:13 - 0007596 _____ () C:\Users\Martin\AppData\Local\Resmon.ResmonCfg
2014-10-27 10:08 - 2014-10-27 10:08 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Martin\Drakonia Configurator.exe
C:\Users\Martin\dscaler4115.exe
C:\Users\Martin\jre-7u40-windows-x64.exe
C:\Users\Martin\Steam-reg.reg
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-10-27 13:47
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016
durchgeführt von Martin (01-12-2016 15:29:13)
Gestartet von C:\Users\Martin\Desktop
Windows 7 Professional Service Pack 1 (X64) (2011-11-15 15:52:25)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1031562343-2424694273-2990312000-500 - Administrator - Disabled)
Gast (S-1-5-21-1031562343-2424694273-2990312000-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1031562343-2424694273-2990312000-1002 - Limited - Enabled)
Martin (S-1-5-21-1031562343-2424694273-2990312000-1000 - Administrator - Enabled) => C:\Users\Martin
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
7-Zip 9.38 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0938-000001000000}) (Version: 9.38.00.0 - Igor Pavlov)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
AFPL Ghostscript 8.54 (HKLM-x32\...\AFPL Ghostscript 8.54) (Version: - )
AFPL Ghostscript Fonts (HKLM-x32\...\AFPL Ghostscript Fonts) (Version: - )
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
Armored Warfare MyCom (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Armored Warfare MyCom) (Version: 1.62 - My.com B.V.)
Armored Warfare MyCom Beta (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Armored Warfare MyCom Beta) (Version: 1.59 - My.com B.V.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.0.0 - Asmedia Technology)
AutoCAD 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack - English (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 3.0.159.0 - Autodesk)
Autodesk AutoCAD 2015 - English (HKLM\...\AutoCAD 2015 - English) (Version: 20.0.51.0 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
AutoIt v3.3.8.1 (HKLM-x32\...\AutoItv3) (Version: - AutoIt Team)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Bing Powered Search (HKLM-x32\...\BingPoweredSearch) (Version: - )
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH)
Cisco Systems VPN Client 5.0.07.0440 (HKLM\...\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}) (Version: 5.0.7 - Cisco Systems, Inc.)
CPUID HWMonitor 1.22 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
Crossfire 2.0 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Crossfire 2.0) (Version: 2.00.00.00 - SWAT-Portal)
Curse Client (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dragon Age Redesigned Oghren© (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned Oghren©) (Version: - )
Dragon Age Redesigned© Zevran (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Zevran) (Version: - )
Dragon Age Redesigned© (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned©) (Version: - )
Dragon Age Redesigned© Leliana (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Leliana) (Version: - )
Dragon Age Redesigned© Sten (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Sten) (Version: - )
Dragon Age Redesigned© Wynne (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Dragon Age Redesigned© Wynne) (Version: - )
Drakonia Configurator (HKLM-x32\...\{2EAD3327-2F92-455F-A675-E5CC4980B67A}}_is1) (Version: - )
Explorer Suite III (HKLM\...\Explorer Suite_is1) (Version: - )
FAM 1.0.0.0 (HKLM-x32\...\FAM) (Version: 1.0.0.0 - Korrd)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Free CBR Reader (HKLM-x32\...\{B9240DAE-EFA1-4A0E-824F-17B3F99194F8}) (Version: 1.0.0 - Free Picture Solutions)
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Freelancer (HKLM-x32\...\Freelancer 1.0) (Version: - )
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
gmax (HKLM-x32\...\{3FA7A919-87DA-42B1-814B-86DE8DCA17C2}) (Version: 4.4.0.125 - Discreet)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
GUILD WARS (HKLM-x32\...\Guild Wars) (Version: - )
HardCMP v1.0.0.23 (HKLM-x32\...\HardCMP_is1) (Version: 1.0.0.23 - )
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
IsoBuster 3.0 (HKLM-x32\...\IsoBuster_is1) (Version: 3.0 - Smart Projects)
Java 3D 1.5.1 (HKLM-x32\...\{32A9C5B3-D166-4C6D-A11E-A54473151000}) (Version: 1.5.1 - Sun Microsystems, Inc.)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Minion (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{Minion}}_is1) (Version: 2.0 - ZAM Network LLC)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 50.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 de)) (Version: 50.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2.6177 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mumble 1.2.3 (HKLM-x32\...\{C3E9887A-23BA-4777-8080-191A5AFCAB74}) (Version: 1.2.3 - Thorvald Natvig)
My.com Game Center (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\MyComGames) (Version: 3.162 - My.com B.V.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.9 - Black Tree Gaming)
Nitro Reader 3 (HKLM\...\{9EA981E5-EE67-4662-86F1-58937D31FE07}) (Version: 3.5.6.5 - Nitro)
NVIDIA PhysX (HKLM-x32\...\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}) (Version: 9.09.0814 - NVIDIA Corporation)
OMC ModPack Client Version 1.1.11.6 (HKLM-x32\...\{E2F3187C-2B94-486F-8914-E69211487FB6}_is1) (Version: 1.1.11.6 - Odem Mortis)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
paint.net (HKLM\...\{A1D05314-DC32-4668-A97E-51060EC8BCCE}) (Version: 4.0.12 - dotPDN LLC)
Parsec (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\a53dc3b81e52c50e) (Version: 1.0.0.42 - Parsec)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games)
paw·ned‹4›2 – Die Antwort auf alle Buildfragen (HKLM-x32\...\pawned42) (Version: - JN-GAMES Software)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
Pdfedit (HKLM-x32\...\{6C11089A-E23F-4E9B-B12C-316BF1A4376B}) (Version: 4.5.0.0 - PdfEdit team)
Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.6 - )
PowerDVD (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: - )
Privoxy (remove only) (HKLM-x32\...\Privoxy) (Version: - )
RAD Video Tools (HKLM-x32\...\RADVideo) (Version: - )
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 2.2 r1116 - )
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6235 - Realtek Semiconductor Corp.)
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)
Skype™ 7.23 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.23.105 - Skype Technologies S.A.)
Slime Rancher (HKLM-x32\...\Slime Rancher0.2.4b) (Version: 0.2.4b - TheRaven1)
Space Engineers (HKLM\...\Steam App 244850) (Version: - Keen Software House)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.05.0001 - Electronic Arts)
sTabLauncher (HKLM-x32\...\{9E5A4758-0189-419B-A6ED-FE4CBD255F05}) (Version: 2.2.3 - Sergio Santos)
Star Citizen Launcher (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\Star Citizen Launcher) (Version: 00.01.00.00 - Cloud Imperium Games)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab (HKLM-x32\...\{F89CDED6-B1F1-489F-BA44-698BF6A737C2}) (Version: 6.1.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Witcher Enhanced Edition (HKLM-x32\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.00.0000 - CD Projekt Red)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.)
VLC media player 2.0.2 (HKLM-x32\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
War Thunder Launcher 1.0.1.386 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: 0.0.0.0 - Blizzard Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WindowsAndroid version 4.0.3 (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{7E07052F-A4CE-4932-B066-B9203888439F}_is1) (Version: 4.0.3 - SocketeQ, Inc.)
WinRAR 5.30 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
World of Warships (HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net)
YACReader 8.5.0 (HKLM-x32\...\YACReader_is1) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{06d45639-4c61-4cab-be15-52f5e6e72d31}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{27e52464-33a3-42ab-a482-c84fab56362a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{4e9b62d8-f542-423b-8e8e-2007daeac423}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{7acd7f3b-8bb8-430f-8499-dd8077c7af97}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{7d430c4d-1b80-464c-8f5d-2d99d4ff9c85}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{8059b7ca-030b-489d-b211-5b961893bedf}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{b8be70ea-432e-4a55-ba5c-a83cd1e376b6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{b9540fcf-2d9b-4e81-8557-2c9592685a9a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{e26b586f-8643-46af-a2fc-bc81c5389766}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\en-US\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000_Classes\CLSID\{e85372c0-2724-41f4-a715-0806ee361bb0}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {305492CB-4722-4BA3-BF71-A11429E75A10} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)
Task: {35419A1B-98CE-4D48-91FD-1FBF82A10B24} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-09-16] (Advanced Micro Devices, Inc.)
Task: {AAE2BC6B-1119-4222-B6C7-017DDD173F9B} - System32\Tasks\{652BC46E-1D96-4931-B893-AE3A21457C8E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.158/de/eula
Task: {B29F8036-B722-44B1-8DEC-AE2FBD8EE6EA} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-08-30] (Microsoft Corporation)
Task: {B3F91BB8-7CC1-4BE6-B368-4204269BAFB6} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-09-22] (Oracle Corporation)
Task: {EF75F260-60A6-4F74-882C-2A4CF98BD56F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: {F0B7CF59-E530-41A3-A21B-92FF80E15166} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-08-30] (Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-11-24 20:35 - 2005-03-12 01:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2013-03-22 17:18 - 2015-08-08 17:04 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2016-09-13 01:01 - 2016-09-13 01:01 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2015-11-22 18:53 - 2013-10-29 13:43 - 00248832 _____ () C:\Program Files (x86)\Drakonia Configurator\hid.exe
2015-11-22 18:53 - 2012-12-11 11:14 - 00240640 _____ () C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
2011-03-04 12:49 - 2011-03-04 12:49 - 00202752 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2015-11-22 18:53 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Drakonia Configurator\HidDevice.dll
2011-12-27 08:40 - 2011-12-27 08:40 - 00086528 _____ () C:\Program Files (x86)\Privoxy\mgwz.dll
2015-11-22 18:53 - 2011-11-22 14:18 - 00249856 _____ () C:\Program Files (x86)\Drakonia Configurator\language.dll
2016-10-16 11:54 - 2016-10-16 11:54 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f91bd970f20123a46b575cf6e92bc441\IsdiInterop.ni.dll
2011-11-15 17:06 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\...\sony.com -> sony.com
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2016-11-27 14:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1031562343-2424694273-2990312000-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 195.34.133.21 - 212.186.211.21
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^vpngui.exe.lnk => C:\Windows\pss\vpngui.exe.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Martin\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: GamingMouse => C:\Program Files (x86)\Drakonia Configurator\hid.exe
MSCONFIG\startupreg: Remote Control Editor => "C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe"
MSCONFIG\startupreg: RemoteControl => "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
MSCONFIG\startupreg: RGSC => K:\Games\GTA4\Rockstar Games Social Club\RGSCLauncher.exe /silent
MSCONFIG\startupreg: Smart File Advisor => "C:\Program Files (x86)\Smart File Advisor\sfa.exe" /checkassoc
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{DA14B3E4-1977-4874-9BC8-8D78BDEFA0FD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{D45D251F-9F78-419B-B3FB-CC129056CC7C}C:\games\call of duty black ops\blackops.exe] => (Block) C:\games\call of duty black ops\blackops.exe
FirewallRules: [UDP Query User{115987AB-3EE6-42AB-81E0-B6C843F4B95B}C:\games\call of duty black ops\blackops.exe] => (Block) C:\games\call of duty black ops\blackops.exe
FirewallRules: [{D023DD3D-B9E3-4FD4-A706-20EA6612D3D3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{10F598B7-6248-4641-A32C-7B8FAAB3B384}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [TCP Query User{15CF0E2B-A339-4B42-99D5-37CA542D4ABD}K:\games\gw2\gw2.exe] => (Allow) K:\games\gw2\gw2.exe
FirewallRules: [UDP Query User{32719093-8BD2-44A4-856C-49B1EA2D33BE}K:\games\gw2\gw2.exe] => (Allow) K:\games\gw2\gw2.exe
FirewallRules: [{254B1476-B09C-4F89-A9F6-82A0F56FD0B5}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{D5872796-7876-49F7-A2D8-8FF6D5A53523}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{CA94F41A-DD1B-4A72-86DE-1032FE2B366D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6FD7189D-1EBA-47A4-A5EB-BF06EC520BBC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DBFEB9BB-2B08-494C-8C03-EE196D5B1F96}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B0ECFFA5-FCEA-4F5E-BDB7-F52E27F0C431}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2D37DAE8-DD97-4929-8CD2-F5A8E96A2A74}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{14E6B066-CB4B-4F42-8C65-A30BD8CB40EA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B5E570ED-F1A3-4F9D-B837-FF53434C629B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{32EF9C71-C0A9-4FC5-9335-654F2485208E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{95F75607-BD3A-4130-849D-35460CDFFF67}] => (Allow) LPort=80
FirewallRules: [{D5CA12CD-BD78-4A0D-8C42-96AC5B89A8DB}] => (Allow) LPort=443
FirewallRules: [{6971AD85-B1AE-4DFB-B505-CA0FBA19DF34}] => (Allow) LPort=20010
FirewallRules: [{A0FD53BC-5301-453D-9458-D8690DA6BB3A}] => (Allow) LPort=3478
FirewallRules: [{C9B4DDF2-352C-4876-9231-4759D64BD32A}] => (Allow) LPort=7850
FirewallRules: [{6BE2B612-FEC8-44EA-8511-E6821D6D8B95}] => (Allow) LPort=7852
FirewallRules: [{126E1A5D-D8E5-4B2E-A48C-35CF5EE98F8C}] => (Allow) LPort=7853
FirewallRules: [{01208F69-21AE-4235-B5EF-F23299D59698}] => (Allow) LPort=27022
FirewallRules: [{9406B5A7-ED28-45B9-9945-DB2D0112F1B1}] => (Allow) LPort=6881
FirewallRules: [{A30E663C-AF63-402A-961B-4FAB7B8F6295}] => (Allow) LPort=33333
FirewallRules: [{F8B8FA6D-E5C6-4F82-9F61-EEF5831AB045}] => (Allow) LPort=20443
FirewallRules: [{197DC96A-400A-4B7F-BF17-096C617FDC52}] => (Allow) LPort=8090
FirewallRules: [{315A91A7-50CD-4AA0-9DA4-7B3EA5AF4E41}] => (Allow) LPort=50248
FirewallRules: [{647CF977-885E-487B-AECF-0D0BCFE394FB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{BFF7822D-29BB-435E-B0CC-E6FB6386D6B7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{19C193B3-0E36-4FC9-B776-EF594F2E06D7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CCFA21AF-6946-4394-9393-A7914C1EAB6A}] => (Allow) LPort=2869
FirewallRules: [{69AD3371-0624-45F5-B3F4-EDF4EB7B9AEA}] => (Allow) LPort=1900
FirewallRules: [{24E4719D-875C-4164-92CD-2358293AF128}] => (Allow) C:\Program Files (x86)\OMC ModPack Client\OMC ModPack Client.exe
FirewallRules: [{65BDC62F-A6D0-4638-B54B-1A5E9635D7D4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{17401A7C-6DB7-40CD-8447-D6B647F506C6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4DD8C035-CD15-442C-BCBB-FDC26E1DE05D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{377EDF59-81A6-4C6E-9217-72E77BF00BAC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{E0998469-C626-45BA-9023-75797B0D51F7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{F4B02B17-DF19-4690-B6A3-67F46E14107D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{7FE67A19-1C7C-47AF-886D-E639BF16019C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{897D2F00-3723-4C6C-B2E3-F9E10B22A695}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{E63EFA4F-52DD-4E50-98F4-C64486DE5FFA}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{C5BA1463-92BA-436F-AC64-9C92FFF45D03}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{2630B555-48AF-4038-B00E-B7D7FE02BF8E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{32C8E90C-6216-433E-9875-8ACACA120F19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{08AD94ED-4C34-474D-A3E2-63105AB508F1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8BA530C5-C118-43C2-BA5F-846FEBCC7E1D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E05AE212-44BA-4CA4-BCB3-06BDF2683ADA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D230EB6-8F4E-46C7-A4EF-DA3C02267FE5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{05FF1BE1-D9EA-4086-BAF0-54F754F95969}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{62F7182C-FD69-434C-8A3A-2C2BF7AE516A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{5EAD725D-4F20-4D72-8883-11872479E347}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{9A3D1993-D693-465A-A1CD-CE941E320268}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{ABE41180-295F-42A5-97F5-96096DE702EF}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{692AD4BF-5BA0-414C-9421-6D95E92989C5}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{6E847FBB-0774-4493-A233-2174541C47DE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{FE1762B0-077E-4E00-BF76-23E75A326709}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1A163A24-C1B9-43BE-9A54-BD8DC369BE08}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3C4E0A4-631F-494A-BF04-4442AF1A7E45}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{189D7710-D8B9-4F62-9A90-D41D995B9F6C}C:\users\martin\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\martin\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{6711ABB2-D72E-4416-B773-CD004256953C}C:\users\martin\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\martin\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{96861C9B-1464-4C4C-B036-84D8033746A3}K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{F0C2660F-3934-4181-8948-81663C7B4FAB}K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [TCP Query User{F1E2D9C4-30A9-44DC-9BB6-E63650A9A8CB}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [UDP Query User{F7AB5B48-81C1-4362-9BB9-3785D2587A4A}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe
FirewallRules: [TCP Query User{94D18C8F-86D3-4AC4-98A3-2145FE0C6DCE}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [UDP Query User{732EAB2F-453C-4DF1-9872-F7CBAD021540}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe
FirewallRules: [TCP Query User{A56EEAA9-67C5-4219-87F8-9BDE6D1AF9C6}K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{705B4100-C489-4C32-8B09-0449A4B51187}K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe] => (Allow) K:\games\aw\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [{BD12A005-5430-4622-9F42-99B38B26F5F8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{033717DE-391B-4088-95DF-E6BE2102BD1B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [TCP Query User{107DFFE1-EC96-4538-90EB-483687386B28}K:\games\wows_publictest\wowslauncher.exe] => (Allow) K:\games\wows_publictest\wowslauncher.exe
FirewallRules: [UDP Query User{98C38A1F-A0D5-4A4A-AFB4-85EBEA8AA13B}K:\games\wows_publictest\wowslauncher.exe] => (Allow) K:\games\wows_publictest\wowslauncher.exe
FirewallRules: [{2B51E7DB-C122-42CD-BBE0-4AE609DC6D32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{BB518C50-7E28-4A63-A098-742922983C7D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{A6035418-4970-479E-9EA4-85749B68085E}] => (Allow) K:\Games\ESTU\Launcher\GameConsultant.exe
FirewallRules: [{1F20723E-7CE5-464E-8542-72EC791C4AC8}] => (Allow) K:\Games\ESTU\Launcher\Bethesda.net_Launcher.exe
FirewallRules: [TCP Query User{D4FDF617-63A5-46BE-A60E-960B2E4F1E2E}K:\games\warship\wowslauncher.exe] => (Allow) K:\games\warship\wowslauncher.exe
FirewallRules: [UDP Query User{D7E165A1-902B-4F4B-B2A9-D3AD6A00AD50}K:\games\warship\wowslauncher.exe] => (Allow) K:\games\warship\wowslauncher.exe
FirewallRules: [{D627856E-3ACF-4865-AFEA-ACF0EFFADBC0}] => (Allow) K:\Games\WT\WarThunder\launcher.exe
FirewallRules: [{C0806AFA-854B-4D6A-B5E6-96548D732351}] => (Allow) K:\Games\WT\WarThunder\launcher.exe
FirewallRules: [{A3F76B1A-5757-4FAF-9B82-9C9E68966F07}] => (Allow) K:\Games\WT\WarThunder\aces.exe
FirewallRules: [{D7BF61B9-24DB-47C1-AD5A-A1CC0346C734}] => (Allow) K:\Games\WT\WarThunder\aces.exe
FirewallRules: [TCP Query User{2FD75038-0456-428B-8104-7BBDAB2E2D71}K:\games\wt\warthunder\win64\aces.exe] => (Allow) K:\games\wt\warthunder\win64\aces.exe
FirewallRules: [UDP Query User{A82A83EA-8EB2-4583-B15C-60CEEA771357}K:\games\wt\warthunder\win64\aces.exe] => (Allow) K:\games\wt\warthunder\win64\aces.exe
FirewallRules: [TCP Query User{F905E323-B4DF-4C40-9231-941118005F79}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{3B08B716-9064-4E1C-B210-D840F0041E08}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{E60A25E8-D512-4DEF-998C-C98D84AF8B5A}C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [UDP Query User{6C728D7F-4FB7-44B4-ACA6-00ECAEBA1BBD}C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [TCP Query User{F0570CD4-A0DD-4F17-A6D8-EF1564F8BF3D}C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe
FirewallRules: [UDP Query User{A38A26FB-4783-48AC-A954-8934A8A6B9E0}C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe] => (Allow) C:\users\martin\downloads\downloader_warcraft3_the_frozen_throne_engb.exe
FirewallRules: [{9455FA43-B14A-4CA0-8904-3CC6F639720B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{F153E4D7-8DD4-4D5B-80E8-087C75626B6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [TCP Query User{491CFD22-984D-4134-8D92-A3F1F5B6F4A5}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{99640C1F-820D-42F7-BEE2-EE224A842DCB}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [{D25E39C0-0429-4FA7-B241-549A93469372}] => (Allow) C:\Games\WOWS_PublicTest\WoWsLauncher.exe
FirewallRules: [{04239541-694A-4378-8948-1C13D266D278}] => (Allow) C:\Games\WOWS_PublicTest\WoWsLauncher.exe
FirewallRules: [{68A16BAF-1A67-478C-AA18-8C42C3613E2F}] => (Allow) C:\Games\WOWS_PublicTest\worldofwarships.exe
FirewallRules: [{C934DB75-C881-48FF-919A-C1E86685AFCF}] => (Allow) C:\Games\WOWS_PublicTest\worldofwarships.exe
==================== Wiederherstellungspunkte =========================
18-11-2016 15:28:11 DirectX wurde installiert
24-11-2016 13:22:52 Windows Update
27-11-2016 00:28:35 DirectX wurde installiert
28-11-2016 16:58:19 JRT Pre-Junkware Removal
01-12-2016 10:14:28 Windows Update
01-12-2016 15:26:26 Prüfpunkt von HitmanPro
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/01/2016 03:07:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Martin\Desktop\esetsmartinstaller_deu.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (12/01/2016 03:07:14 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (12/01/2016 10:29:03 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Martin\Desktop\esetsmartinstaller_deu.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (12/01/2016 10:28:59 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Martin\Desktop\esetsmartinstaller_deu.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (12/01/2016 10:27:03 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (12/01/2016 10:14:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/30/2016 02:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/30/2016 11:14:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Fallout4.exe, Version: 1.7.12.0, Zeitstempel: 0x57ab87bf
Name des fehlerhaften Moduls: Fallout4.exe, Version: 1.7.12.0, Zeitstempel: 0x57ab87bf
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004dbb29
ID des fehlerhaften Prozesses: 0xf1c
Startzeit der fehlerhaften Anwendung: 0x01d24aea5978e563
Pfad der fehlerhaften Anwendung: K:\Games\Fallout 4\Fallout4.exe
Pfad des fehlerhaften Moduls: K:\Games\Fallout 4\Fallout4.exe
Berichtskennung: cd3979b2-b6e5-11e6-8fe6-5404a66b46f9
Error: (11/30/2016 09:44:42 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (11/29/2016 05:04:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Systemfehler:
=============
Error: (12/01/2016 10:37:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/01/2016 10:37:37 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Martin\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (12/01/2016 10:37:37 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Martin\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (12/01/2016 10:37:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/01/2016 10:37:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/01/2016 10:37:37 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Martin\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (12/01/2016 10:37:37 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Martin\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (12/01/2016 10:37:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/01/2016 10:37:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/01/2016 10:37:36 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Martin\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
CodeIntegrity:
===================================
Date: 2016-11-27 14:58:08.488
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2016-11-27 14:58:08.426
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-16 20:00:39.437
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-16 20:00:39.367
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-15 21:57:34.851
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-15 21:57:34.774
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\DScaler\DSDrv4.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.833
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Martin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.785
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Martin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.719
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-10-11 14:48:49.672
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 8168.77 MB
Verfügbarer physikalischer RAM: 5324.87 MB
Summe virtueller Speicher: 16335.71 MB
Verfügbarer virtueller Speicher: 13790.79 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:491.96 GB) (Free:116.05 GB) NTFS
Drive k: (Volume) (Fixed) (Total:439.45 GB) (Free:197.8 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0D7E7020)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=492 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=439.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
Ich habe ein Problem, dass aber schon recht lange existiert und das ich bisher umgehen konnte, aber ich denke das ist Hardwarebasiert. Beim hochfahren wird der Vorgang oft unterbrochen, da anscheinend die rpm eines Lüfters langsamer anfährt als gewünscht (wird im BIOS rot angezeigt bis etwa 600rpm, hatte aber noch nie Temperaturprobleme) Um das zu umgehen, gehe ich ins BIOS, ohne Änderungen vorzunehmen und fahre einfach weiter hoch. Das BIOS selbst hat folgendes Problem: Ich kann den Mauszeiger nur schwer kontrollieren und nichts anklicken, da er von Ecke zu Ecke springt (als ob man beim Bildschirm die falsche Auflösung gewählt hat). Tastatursteuerung funktioniert aber noch. Habe deswegen nichts unternommen, da ich mich so gut wie gar nicht damit auskenne. Das Problem gibt es schon seit etwa 1-2 Jahren. |
|
01.12.2016, 16:41
| #13 | |||||||||||
| /// TB-Ausbilder | Windows 7: DCOM Prozesstart unerwartet beendet Servus, dein beschriebenes Problem klingt wirklich eher nach einem Hardwareproblem. Leider fällt mir dazu keine Lösung ein. Zitat:
Reste entfernen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
C:\Program Files (x86)\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe
C:\Program Files (x86)\sTabLauncher\Sponsor\Babylon9_setup_15500.exe
C:\Users\Martin\Downloads\cbrreader_setup*.exe
C:\Users\Martin\Downloads\isobuster_3_0.exe
C:\Users\Martin\Downloads\*CHIP-Downloader.exe
C:\Users\Martin\Downloads\PDFCreator-1_2_3_setup.exe
C:\Users\Martin\Downloads\pdf_repair_toolbox.exe
C:\Users\Martin\Downloads\Desktopedit\sTabLauncherV2.2.3.msi
C:\Windows\Installer\2b8e09f.msi
Reboot:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird! Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.  Cleanup: Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.  Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:
Microsoft Security Essentials (MSE) / Windows Defender (WD) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE/WD entschieden hast, brauchst du nicht extra MSE/WD zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür. Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren. NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen:
Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.  Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
01.12.2016, 17:27
| #14 |
| | Windows 7: DCOM Prozesstart unerwartet beendet Fixlog: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016
durchgeführt von Martin (01-12-2016 17:17:57) Run:3
Gestartet von C:\Users\Martin\Desktop
Geladene Profile: Martin (Verfügbare Profile: Martin)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
C:\Program Files (x86)\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe
C:\Program Files (x86)\sTabLauncher\Sponsor\Babylon9_setup_15500.exe
C:\Users\Martin\Downloads\cbrreader_setup*.exe
C:\Users\Martin\Downloads\isobuster_3_0.exe
C:\Users\Martin\Downloads\*CHIP-Downloader.exe
C:\Users\Martin\Downloads\PDFCreator-1_2_3_setup.exe
C:\Users\Martin\Downloads\pdf_repair_toolbox.exe
C:\Users\Martin\Downloads\Desktopedit\sTabLauncherV2.2.3.msi
C:\Windows\Installer\2b8e09f.msi
Reboot:
end
*****************
Prozess erfolgreich geschlossen.
C:\Program Files (x86)\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe => erfolgreich verschoben
C:\Program Files (x86)\sTabLauncher\Sponsor\Babylon9_setup_15500.exe => erfolgreich verschoben
=========== "C:\Users\Martin\Downloads\cbrreader_setup*.exe" ==========
C:\Users\Martin\Downloads\cbrreader_setup(1).exe => erfolgreich verschoben
C:\Users\Martin\Downloads\cbrreader_setup.exe => erfolgreich verschoben
========= Ende -> "C:\Users\Martin\Downloads\cbrreader_setup*.exe" ========
C:\Users\Martin\Downloads\isobuster_3_0.exe => erfolgreich verschoben
=========== "C:\Users\Martin\Downloads\*CHIP-Downloader.exe" ==========
C:\Users\Martin\Downloads\Java Runtime Environment 32 Bit - CHIP-Downloader.exe => erfolgreich verschoben
========= Ende -> "C:\Users\Martin\Downloads\*CHIP-Downloader.exe" ========
C:\Users\Martin\Downloads\PDFCreator-1_2_3_setup.exe => erfolgreich verschoben
C:\Users\Martin\Downloads\pdf_repair_toolbox.exe => erfolgreich verschoben
C:\Users\Martin\Downloads\Desktopedit\sTabLauncherV2.2.3.msi => erfolgreich verschoben
C:\Windows\Installer\2b8e09f.msi => erfolgreich verschoben
Das System musste neu gestartet werden.
==== Ende von Fixlog 17:17:57 ====
Habe mir schon lange angewöhnt, Passwörter nie zu speichern und ändere die wichtigen auch regelmäßig. Ich verwende eigentlich nur Mozilla Firefox (weswegen mich die vielen IE-Einträge gewundert haben) mit ABP. Ich verwende jetzt DelFix und bringe MSE auf den neuesten Stand (die Updates stocken bei mir dort manchmal beim Herunterladen). Danach editiere ich den Beitrag hier nochmal. |
|
02.12.2016, 16:26
| #15 |
| /// TB-Ausbilder | Windows 7: DCOM Prozesstart unerwartet beendet Passt alles? |
|
| Themen zu Windows 7: DCOM Prozesstart unerwartet beendet |
| akamai, bho, converter, desktop, flash player, helper, hijack, hijackthis, homepage, hängt, internet explorer, logfile, mozilla, problem gelöst, prozess, realtek, registry, rootkit, scan, security, senden, software, svchost.exe, system, usb, windows |
und 
und speichere die Logdatei auf Deinem Desktop.
