Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)
-   -   Windows-Explorer Funktioniert nicht mehr? (https://www.trojaner-board.de/157592-windows-explorer-funktioniert-mehr.html)

Math20 14.08.2014 18:58

Windows-Explorer Funktioniert nicht mehr?
 
Hallo Trojaner Forum,

Und zwar tritt seit längerem ein Problem auf, wenn ich das Microsoft Menü öffne, und dann auf ''Dokumente'' oder ''Bilder'', oder ''Computer'' etc. öffne. Vorher war es so, dass wenn ich ''Bilder''
geöffnet habe, kommen folgende NArichten, es sind 2 :

1. ''Windows-Explorer Funktioniert nicht mehr'' (es wird nach einem Problem gesucht)

2. ''Windows Explorer wird neu gestartet''

Ich Frage mich was Windows Explorer damit zu tun hat? Ist da überhaupt der Browser gemeint? Ich bin verwirrt.
Nachdem ich diese Fenster schließe oder wenn ich warte, dann schließt es sich von sellbst, dann refresht es die untere Balkenleiste, also die Leiste, wo das WIndows Zeichen ist, indem man z.b. den Rechner herunterfährt. Dabei werden die gerade geöffneten Dateien geschlossen, und man muss sie ernuet öffnen, in der Hoffnung, dass die Naricht nicht wieder kommt, was ab und zu vorkam.

Nachdem ich auf folgende Seite gestoßen bin,

hxxp://techfrage.de/question/6934/anleitung-blockandsurf-browser-virus-entfernen/

habe ich die Anforderungen erfüllt, jedoch nicht alle. Und zwar Schritt 1; 2.1 (Malwarebytes Anti Malware) ; Schritt 3 (jeweils Opera, Internet Explorer und google CHrom) , bei Schritt 4.1
war nichts.

Seitdem ich diese Schritt durchgeführt habe kommt diese Fenster nicht mehr so penetrant, dennoch kommt es und es nervt allmählich. Durch diese Hilfe wurde mein Rechner mithilfe des ''Malwarebytes Anti Malware'' ziemlic gut geleert, d.h. das untere anderem nun keine nervige Werbungen auf jeder Seiter erscheint, was das surfen demnach verlangsamt hat trotz adblock. Außerdem hat sich die Prozessanwendugen reduziert. Von 137 auf 118, wenn man den Task Manager startet.
Ich habe versucht bzw. gegoogelt, das Problem irgendwie zu handhaben, und bin dabei auf
diese Seite gestoßen: Tipps zur Vorgehensweise, wenn Internet*Explorer nicht funktioniert - Windows-Hilfe . Dabei habe ich den Schritt gemacht, indem ich Windows ugedatet habe mit 13 Anwedungen und neu gestartet, was das Problem nicht löste, und ich habe jetzt WIndows Explorer 11 deaktiviert (Obwohl mein Windows Explorer Browser jetzt 5 ist aktuell, weiß aber nicht ob es damit gemeint ist) und es hat auch nicht funktioniert.
Ich habe dieses Problem auch schon in einem anderen Forum gestellt und mir wurde lediglich geraten als Lösung, dass ich eine Neuinstellation durchführen soll, was ich aber nicht möchte.


Würde mich über Hilfe freuen: Math20

Keckrem 14.08.2014 21:20

:hallo:

Zitat:

Ist da überhaupt der Browser gemeint?
Nein, ist er nicht. Gemeint ist: Windows-Explorer ? Wikipedia

Du meinst iexplore.exe.

Zitat:

Malwarebytes Anti Malware
Bitte das Log nachreichen! :)

Math20 14.08.2014 23:31

Meinst du mit Log, alles was in Quarantäne gesteckt wurde?

Keckrem 14.08.2014 23:35

Genau das. :)

Math20 15.08.2014 00:43

Da habe ich bereits alle gelöscht, kurz nachdem ich diese in die Quarantäne verbant habe.

Keckrem 15.08.2014 00:54

Wenn du Malwarebytes öffnest, dann unter Verlauf -> Anwendungsprotokolle schaust. Findest du da kein Suchlaufprotokoll?

Math20 15.08.2014 14:03

Wenn ich Verlauf -> Anwedungsprotokolle und dann auf dem Suchlauf von gestern auf Einsicht klicke, dann ist dieses leer.

cosinus 15.08.2014 18:28

Bei MBAM musst du die Protokolle exportieren. Hast du das gemacht?

Hier mal grundsätzlich die Anleitung zu MBAM - was du machen musst wären die letzten beide Schritte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Math20 15.08.2014 19:25

Wenn ich dieses Protokoll abspeichern möchte, als .txt, dann kommt immer ''Malwarebytes funktioniert nicht mehr'' Das Programm wird aufgrund eines Problems nicht richtig ausgeführt. Das Programm wird geschlossen und SIe werden benarichtigt, wenneine Lösung verfügbar ist.

Keckrem 15.08.2014 19:36

Hab ich schon öfter gehört, versuch mal es nach *.xml zu exportieren. Ist dann zwar nicht so leserlich, aber immerhin.

Math20 15.08.2014 19:56

Kann die Datei nicht im Anhang hochladen, da .xml

Soll ich es hier in Abschnitten posten? Wenn ich alles posten möchte, dann passiert gar nichts.

Keckrem 15.08.2014 20:26

Ja, splitten. Und bitte in Code-Tags!

Wird so gemacht:

[CODE]Hier steht der Text[/CODE]

Und sieht so aus:

Code:

Hier steht der Text

Math20 15.08.2014 20:35

Code:

<?xml version="1.0" encoding="UTF-8" ?>
<mbam-log>
<header>
<date>2014/08/14 15:58:41 +0200</date>
<logfile>mbam-log-2014-08-14 (15-58-38).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.00.2.1012</version>
<malware-database>v2014.08.14.06</malware-database>
<rootkit-database>v2014.08.04.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x64</arch>
<username>Matthias</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>447943</objects>
<time>3250</time>
<processes>16</processes>
<modules>43</modules>
<keys>329</keys>
<values>39</values>
<datas>29</datas>
<folders>157</folders>
<files>1505</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<process><path>C:\ProgramData\WPM\wprotectmanager.exe</path><vendor>PUP.Optional.WpManager</vendor><action>delete-on-reboot</action><pid>1780</pid><hash>f28ce1e5d3a8c076c43236353cc516ea</hash></process>
<process><path>C:\ProgramData\IBUpdaterService\ibsvc.exe</path><vendor>PUP.BundleInstaller.IB</vendor><action>delete-on-reboot</action><pid>2260</pid><hash>6a146660eb90f83e3a479925718f629e</hash></process>
<process><path>C:\Program Files (x86)\PlurPush\updatePlurPush.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><pid>3560</pid><hash>611daa1c7803f24441da4725cd3452ae</hash></process>
<process><path>C:\Program Files (x86)\PlurPush\bin\utilPlurPush.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><pid>3672</pid><hash>0975c006e19ace68d94271fb31d0a45c</hash></process>
<process><path>C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><pid>5932</pid><hash>1e607c4a4932a49278f94ba9aa5a7789</hash></process>
<process><path>C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><pid>5940</pid><hash>e8966e581c5f70c674fd27cd33d1dd23</hash></process>
<process><path>C:\Users\Matthias\AppData\Local\LPT\srptm.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><pid>14764</pid><hash>8af472543645ba7cb2c22adad132d52b</hash></process>
<process><path>C:\Program Files (x86)\LPT\srpts.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><pid>2300</pid><hash>f6881ea86a110531d99c1aeafd06936d</hash></process>
<process><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.BrowserAdapter.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><pid>7648</pid><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></process>
<process><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.BRT.Helper.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><pid>6636</pid><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></process>
<process><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.PurBrowse64.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><pid>6232</pid><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></process>
<process><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfdc171.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><pid>16076</pid><hash>afcfb412a5d6d264144730cc4db553ad</hash></process>
<process><path>C:\ProgramData\IBUpdaterService\ibsvc.exe</path><vendor>Adware.InstallBrain</vendor><action>delete-on-reboot</action><pid>2260</pid><hash>69156c5ae19a0a2c1b22c8324fb405fb</hash></process>
<process><path>C:\Program Files (x86)\BlockAndSurfS\BlockAndSurf.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><pid>5480</pid><hash>69154d7986f589ad50d6618b867ccf31</hash></process>
<process><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfg.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><pid>2800</pid><hash>a0de695dcbb0221433a74a73659dee12</hash></process>
<process><path>C:\Users\Matthias\AppData\Local\t4pc_en_8\upt4pc_en_8.exe</path><vendor>PUP.Optional.Tuto4PC.A</vendor><action>delete-on-reboot</action><pid>3996</pid><hash>f58955719fdc4ceafc69a531639f9b65</hash></process>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgUpdateSupport.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>0f6fdfe72f4cbe78630ec430d92b4bb5</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgsimcommon.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>cab4ac1ae794fc3a3d34d024947015eb</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgcommon.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>710d3d898af1d85e0e63d61ee1237a86</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgcommunication.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>6a14972f6e0dc670244da35129db38c8</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mghooking.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a2dc56706a1166d0323fbb39db29ee12</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgxml_wrapper.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>7509e5e1c1baed49630e06ee31d3db25</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Messenger\mgconfig.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>c4ba52742b503ff7165bee06c93b41bf</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Communicator\mgcommon.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>cfaf586e2655a591244dd51f59ab16ea</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>c9b53195f08bfe3876fbb63ee32126da</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>4638dbebcbb041f52a47e014a55f1fe1</hash></module>
<module><path>C:\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>77071fa707748bab73febb3930d41ae6</hash></module>
<module><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Common.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></module>
<module><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Communication.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></module>
<module><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Communication.NamedPipe.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></module>
<module><path>C:\Users\Matthias\AppData\Local\LPT\srpt.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></module>
<module><path>C:\Users\Matthias\AppData\Local\LPT\srptc.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></module>
<module><path>C:\Program Files (x86)\LPT\Smartbar.Common.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></module>
<module><path>C:\Program Files (x86)\LPT\Smartbar.Communication.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></module>
<module><path>C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></module>
<module><path>C:\Program Files (x86)\LPT\srpt.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></module>
<module><path>C:\Program Files (x86)\LPT\srptc.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></module>
<module><path>C:\Program Files (x86)\PlurPush\bin\PlurPushBAApp.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></module>
<module><path>C:\Program Files (x86)\PlurPush\bin\PlurPushDsp.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></module>
<module><path>C:\Program Files (x86)\PlurPush\bin\PlurPushDsp.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></module>
<module><path>C:\Program Files (x86)\PlurPush\bin\{552199fb-9890-4055-9aaf-b2f6d51d46e9}.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></module>
<module><path>C:\Program Files (x86)\PlurPush\bin\{552199fb-9890-4055-9aaf-b2f6d51d46e9}.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></module>
<module><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfdc171.dll</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><hash>a0de695dcbb0221433a74a73659dee12</hash></module>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Wpm</path><vendor>PUP.Optional.WpManager</vendor><action>success</action><hash>f28ce1e5d3a8c076c43236353cc516ea</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WPM</path><vendor>PUP.Optional.WpManager</vendor><action>success</action><hash>f28ce1e5d3a8c076c43236353cc516ea</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IBUpdaterService</path><vendor>PUP.BundleInstaller.IB</vendor><action>success</action><hash>6a146660eb90f83e3a479925718f629e</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Updater Service</path><vendor>PUP.BundleInstaller.IB</vendor><action>success</action><hash>6a146660eb90f83e3a479925718f629e</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update PlurPush</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>611daa1c7803f24441da4725cd3452ae</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util PlurPush</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>0975c006e19ace68d94271fb31d0a45c</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{0FA593AC-4E65-4005-9A86-084D5127784A}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0FA593AC-4E65-4005-9A86-084D5127784A}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{53F69EA0-3FD6-4874-BFEC-14449BFCA2AD}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{53F69EA0-3FD6-4874-BFEC-14449BFCA2AD}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\SeeSimilar.Tool.1</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\SeeSimilar.Tool</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\SeeSimilar.Tool</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\SeeSimilar.Tool.1</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7549CA81-7BB5-41AF-AF7D-4689F5CF8340}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\SeeSimilar.ScriptHostObject.1</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\SeeSimilar.ScriptHostObject</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\SeeSimilar.ScriptHostObject</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7549CA81-7BB5-41AF-AF7D-4689F5CF8340}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7549CA81-7BB5-41AF-AF7D-4689F5CF8340}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\SeeSimilar.ScriptHostObject.1</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{7549CA81-7BB5-41AF-AF7D-4689F5CF8340}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{7549CA81-7BB5-41AF-AF7D-4689F5CF8340}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>delete-on-reboot</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{7549CA81-7BB5-41AF-AF7D-4689F5CF8340}</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>delete-on-reboot</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{7549CA81-7BB5-41AF-AF7D-4689F5CF8340}\INPROCSERVER32</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>b6c80bbb2f4c92a429c9a6fd0ef438c8</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>b6c80bbb2f4c92a429c9a6fd0ef438c8</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>b6c80bbb2f4c92a429c9a6fd0ef438c8</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>b6c80bbb2f4c92a429c9a6fd0ef438c8</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>a2dc9e283348c571ea2000a34cb6d62a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>a2dc9e283348c571ea2000a34cb6d62a</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}</path><vendor>PUP.Optional.QuickShare.A</vendor><action>success</action><hash>98e625a1314ad462d8c1a00249b936ca</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\IESmartBar.BHO</path><vendor>PUP.Optional.QuickShare.A</vendor><action>success</action><hash>98e625a1314ad462d8c1a00249b936ca</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}</path><vendor>PUP.Optional.QuickShare.A</vendor><action>success</action><hash>98e625a1314ad462d8c1a00249b936ca</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}</path><vendor>PUP.Optional.QuickShare.A</vendor><action>success</action><hash>98e625a1314ad462d8c1a00249b936ca</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO</path><vendor>PUP.Optional.QuickShare.A</vendor><action>success</action><hash>98e625a1314ad462d8c1a00249b936ca</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}</path><vendor>PUP.Optional.QuickShare.A</vendor><action>success</action><hash>98e625a1314ad462d8c1a00249b936ca</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}</path><vendor>PUP.Optional.QuickShare.A</vendor><action>delete-on-reboot</action><hash>98e625a1314ad462d8c1a00249b936ca</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}</path><vendor>PUP.Optional.QuickShare.A</vendor><action>delete-on-reboot</action><hash>98e625a1314ad462d8c1a00249b936ca</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}</path><vendor>PUP.Optional.BrowseFox.A</vendor><action>success</action><hash>b5c9d5f184f7d16508223f64a65c6e92</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}</path><vendor>PUP.Optional.BrowseFox.A</vendor><action>success</action><hash>b5c9d5f184f7d16508223f64a65c6e92</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject.1</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject.1</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}</path><vendor>PUP.Optional.Iminent.A</vendor><action>delete-on-reboot</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}</path><vendor>PUP.Optional.Iminent.A</vendor><action>delete-on-reboot</action><hash>57277a4c611a5adc9bdc148eae54fb05</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{F3FEE66E-E034-436a-86E4-9690573BEE8A}</path><vendor>PUP.Optional.YTDToolbar</vendor><action>success</action><hash>a8d6784e84f721157c86a3ca4fb3c937</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}</path><vendor>PUP.Optional.YTDToolbar</vendor><action>delete-on-reboot</action><hash>a8d6784e84f721157c86a3ca4fb3c937</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}</path><vendor>PUP.Optional.YTDToolbar</vendor><action>delete-on-reboot</action><hash>a8d6784e84f721157c86a3ca4fb3c937</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}</path><vendor>PUP.Optional.YTDToolbar</vendor><action>delete-on-reboot</action><hash>a8d6784e84f721157c86a3ca4fb3c937</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}</path><vendor>PUP.Optional.YTDToolbar</vendor><action>delete-on-reboot</action><hash>a8d6784e84f721157c86a3ca4fb3c937</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}</path><vendor>PUP.Optional.YTDToolbar</vendor><action>success</action><hash>a8d6784e84f721157c86a3ca4fb3c937</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>641aac1aa1da51e57faf267d659d936d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>641aac1aa1da51e57faf267d659d936d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>641aac1aa1da51e57faf267d659d936d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{291BCCC1-6890-484a-89D3-318C928DAC1B}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>eb9326a0d0abe551bb36d3d003ffe020</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\esrv.BabylonESrvc.1</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>eb9326a0d0abe551bb36d3d003ffe020</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\esrv.BabylonESrvc</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>eb9326a0d0abe551bb36d3d003ffe020</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.BabylonESrvc</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>eb9326a0d0abe551bb36d3d003ffe020</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.BabylonESrvc.1</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>eb9326a0d0abe551bb36d3d003ffe020</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>8fef83439fdcd85e53cc72fc29d914ec</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>8fef83439fdcd85e53cc72fc29d914ec</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>8fef83439fdcd85e53cc72fc29d914ec</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>8fef83439fdcd85e53cc72fc29d914ec</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>8fef83439fdcd85e53cc72fc29d914ec</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>8fef83439fdcd85e53cc72fc29d914ec</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>0c723a8c0477d264aa4b564ddb27c040</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\b</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>0c723a8c0477d264aa4b564ddb27c040</hash></key>

Code:

<key><path>HKLM\SOFTWARE\CLASSES\b</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>0c723a8c0477d264aa4b564ddb27c040</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\b</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>0c723a8c0477d264aa4b564ddb27c040</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{EEE6C35E-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C358-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C359-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EEE6C358-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EEE6C359-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{EEE6C35E-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\SWEETIE.IEToolbar.1</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\SWEETIE.IEToolbar</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\SWEETIE.IEToolbar</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\SWEETIE.IEToolbar.1</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35B-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>delete-on-reboot</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35B-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>delete-on-reboot</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Toolbar3.SWEETIE.1</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Toolbar3.SWEETIE</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.SWEETIE</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{EEE6C35C-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.SWEETIE.1</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35C-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>delete-on-reboot</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35C-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>delete-on-reboot</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{6E8BF012-2C85-4834-B10A-1B31AF173D70}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{706D4A4B-184A-4434-B331-296B07493D2D}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{8BE10F21-185F-4CA0-B789-9921674C3993}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{94C0B25D-3359-4B10-B227-F96A77DB773F}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{B173667F-8395-4317-8DD6-45AD1FE00047}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{B32672B3-F656-46E0-B584-FE61C0BB6037}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{BFE569F7-646C-4512-969B-9BE3E580D393}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{C2996524-2187-441F-A398-CD6CB6B3D020}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{E047E227-5342-4D94-80F7-CFB154BF55BD}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{706D4A4B-184A-4434-B331-296B07493D2D}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8BE10F21-185F-4CA0-B789-9921674C3993}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{94C0B25D-3359-4B10-B227-F96A77DB773F}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B173667F-8395-4317-8DD6-45AD1FE00047}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B32672B3-F656-46E0-B584-FE61C0BB6037}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BFE569F7-646C-4512-969B-9BE3E580D393}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C2996524-2187-441F-A398-CD6CB6B3D020}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E047E227-5342-4D94-80F7-CFB154BF55BD}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{6E8BF012-2C85-4834-B10A-1B31AF173D70}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>fc82eadc48331a1c678c4360d32fd32d</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}</path><vendor>PUP.Optional.Snapdo.T</vendor><action>delete-on-reboot</action><hash>88f64b7bc0bb92a4a3e0089e92705da3</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}</path><vendor>PUP.Optional.Snapdo.T</vendor><action>delete-on-reboot</action><hash>88f64b7bc0bb92a4a3e0089e92705da3</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}</path><vendor>PUP.Optional.Snapdo.T</vendor><action>delete-on-reboot</action><hash>88f64b7bc0bb92a4a3e0089e92705da3</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}</path><vendor>PUP.Optional.Snapdo.T</vendor><action>success</action><hash>88f64b7bc0bb92a4a3e0089e92705da3</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82249076-D5C8-431D-982B-023779779587}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>ed917551a7d465d1aef6dec67e84a65a</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82249076-D5C8-431D-982B-023779779587}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>ed917551a7d465d1aef6dec67e84a65a</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}</path><vendor>PUP.Optional.Delta.A</vendor><action>delete-on-reboot</action><hash>f6888046e29938fe75954a5816ecac54</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}</path><vendor>PUP.Optional.Delta.A</vendor><action>delete-on-reboot</action><hash>f6888046e29938fe75954a5816ecac54</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}</path><vendor>PUP.Optional.Delta.A</vendor><action>delete-on-reboot</action><hash>80fefec899e23cfa5faaaef4d032b947</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}</path><vendor>PUP.Optional.Delta.A</vendor><action>delete-on-reboot</action><hash>80fefec899e23cfa5faaaef4d032b947</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0af350d9-3916-454b-ac53-0b0b65f41301}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>dea0f5d11764003684cb297a05fdf40c</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>b0cef2d43f3caf87fa56efb4679b4db3</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>96e88640eb905cda9d57dcc7946ec838</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>a0de4e78b1caad89b0a1e8bb79899a66</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\sweet-page uninstaller</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>c2bc4383c8b3f0467d50aae68a77e818</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{552199fb-9890-4055-9aaf-b2f6d51d46e9}Gw64</path><vendor>PUP.Optional.Sanbreel.A</vendor><action>success</action><hash>a1dd17afbfbcb87eef74edf3f30f26da</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LPTSystemUpdater</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PlurPush</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{ac225167-00fc-452d-94c5-bb93600e7d9a}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{552199fb-9890-4055-9aaf-b2f6d51d46e9}w64</path><vendor>PUP.Optional.Sanbreel.A</vendor><action>success</action><hash>d5a991351a61e0560d3ac97735cfaf51</hash></key>
<key><path>HKLM\SOFTWARE\DomaIQ</path><vendor>PUP.Optional.DomaIQ.A</vendor><action>success</action><hash>b7c7c204ee8dde5879bd78950003ad53</hash></key>
<key><path>HKLM\SOFTWARE\Iminent</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>cdb17254a5d696a05cdd69a219eac838</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.DownloadArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>1668d9ed1a617cba9dbc081972923dc3</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.LinkToPromoteArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>37477d4919622412d188f829c73deb15</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.RawDataArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>bdc1dde9dc9f1d196aef38e9b0542ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.TinyUrlArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>b7c72f97b7c4d3634e0bba6713f1e51b</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.ViralLinkArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>4c32ba0c671489adbe9b0b1642c236ca</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ClientCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>afcf9d29324930064e7251ccd430d927</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ContractBase</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>aed0bd098fec55e1dee270ad8084ee12</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>9ae47e48e89341f52c9472ab27dd4eb2</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>a5d9ad19f18a092d467ac15cc53f56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>631b438365166ccacef2a776e71dbf41</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GameOverCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>b2cc6f573c3f1620d4ecc35a857f0bf5</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetCreditCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>087696305d1e38fe16aa32eb0bf949b7</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>b7c77056f685d95da719ba636e968878</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>56289b2b4a317cba16aa23fab74dc937</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>2a54ae181c5ff93db10f21fcdc283fc1</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>9de13c8a0c6fdc5a912f21fc758f9c64</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>413d75513d3e80b6239d45d89f65d12f</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.InstallationContextResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>4e3001c55a2179bda9173be29a6a7090</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>9ce24c7af58687aff1cfb8650ff56898</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>6a146b5b09723df9f8c840dd84802dd3</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>2b53497d9edd61d57c44b06d887c24dc</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>3747873fe3985fd703bd899456ae8d73</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LogoutCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>601e80463e3d5adcf7c91a0340c4ef11</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>a9d5e6e095e668ced0f0a27b8381649c</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.MyAccountCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>cdb15d697a01c4724b75d34ae81c3fc1</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.PlayContentCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>6b136b5bb8c34bebbc04f22b41c3c33d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.PostContentCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>017dd8eeec8f74c203bdc25b1aea857b</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>bac46e58b6c5e55118a8928b2ada18e8</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.SetVariableCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>334b93339be02e0813ad2eefb35156aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>d1ade5e1d7a414223090c25b2ed628d8</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>ea94398d6615e84e893759c448bca858</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.TestContentCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>6717e9ddb5c61026219fa37aa163fe02</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>a5d93294ec8f5ed8ead6809df50f30d0</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>1668c7ff651631058838130a4ababb45</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.WarmUpCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>0876f5d13249e65004bce23b0ef6cb35</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.WelcomeCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>f589fdc92c4f51e5f0d032eb73915fa1</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ServerCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>f18d20a6e09b979f6b550419f212fc04</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ServerResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>84fab511671440f67050031aa36130d0</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.LightContent</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>512d9b2bd4a72f0703bdd548ff05b54b</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.LightUri</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>d5a9c8fe453616203f812fee52b2c53b</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Iminent.Mediator.MediatorServiceProxy</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>ed91844282f9da5cf3cde03d70942ad6</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c1bdae189be0b086c516ed382adab64a</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook.1</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>d0ae7c4a1e5d48ee7269061f24e0ca36</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>5f1f9e2874076dc9bf857daccb392dd3</hash></key>
<key><path>HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>592525a1ccaf24122bbccc31f60c10f0</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path><vendor>PUP.Optional.Qone8</vendor><action>success</action><hash>7707facc6417a591c544c86412f2ad53</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\FrEeSoFtOdAy</path><vendor>PUP.Optional.FreeSoftToday.A</vendor><action>success</action><hash>c2bc3492aad10036ebbc697af50d837d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\FrEeSoFtToDaY</path><vendor>Adware.EoRezo</vendor><action>success</action><hash>f38be7df7ffcd85eef6549dd5ba91be5</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\FREE_SOFTTODAY</path><vendor>PUP.Optional.Eorezo.A</vendor><action>success</action><hash>88f68343dba0270fd7f6cf165ba738c8</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\FREE_SOFT_TODAY</path><vendor>PUP.Optional.FreeSoftToday.A</vendor><action>success</action><hash>6816d8eee794cf67dfb0024016eee31d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\PlurPush</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>334ba81ee2990630996f7fa923e1bf41</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\Plus-HD-9.1</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>314da3236219300627e1789543c05fa1</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\sweet-pageSoftware</path><vendor>PUP.Optional.SweetPage.A</vendor><action>success</action><hash>a3dbd8ee3d3e71c5c22e87adc63e4fb1</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\T4pc</path><vendor>PUP.Optional.Tuto4PC.A</vendor><action>success</action><hash>a3db20a69dde82b4e68d1bc34eb457a9</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.DownloadArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>7c02458183f86fc7a7b2cb5648bc946c</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.LinkToPromoteArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>57276264d0ab81b53623a9788381be42</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.RawDataArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>5826f6d0fb80d066db7e35ec27dd9e62</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.TinyUrlArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>75097b4bf2892d0972e7c35e1ee63cc4</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.ViralLinkArgs</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>3d41279fb4c7bb7b2d2cf829b25237c9</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.ClientCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>bdc1a91d5f1cd0665a665fbea1632fd1</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.ContractBase</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>ed91f0d6a8d3e94d6b5563ba34d022de</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>c9b53d89c4b75bdb328ea37ae0241be5</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>3648fcca8cef989ef3cd78a539cbc838</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>403e9234a5d636000ab6ab727b89758b</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GameOverCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>df9ffdc92f4cd264f3cdc25bca3a8977</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetCreditCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>4c32ccfaabd0aa8c0bb544d9b74d827e</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>afcfe7dfed8e69cd20a0001dfb0931cf</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>3a44af17f4876bcb546ca37a82823cc4</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>621c25a1bbc00531269a2af3b84c24dc</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>91edbe08e19a0e28655be4390bf9b24e</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>9ce27650f685ce685967d4495aaaaa56</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.InstallationContextResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>057975515b20ea4c11af71ac1fe53fc1</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>09755175accf1620e3dd031a9b69dc24</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>c3bb2b9bafcc68ce4779a974e91bcf31</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>cbb3f6d091ea71c514ac829b62a23ac6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>106eb4127506979f328eca53e71dce32</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LogoutCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>126c6c5a681368ce11af7ba2de269070</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>b3cbebdbf8830333328e56c755affd03</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.MyAccountCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>126c5a6c1c5f67cf90309a835ca88a76</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.PlayContentCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>e09ec600a5d605319927b8659074f60a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.PostContentCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>b2ccfaccbcbf71c56b5551cca163b24e</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>28562f972556c274b60ab469c440b848</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.SetVariableCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>ccb28e38a4d7b38304bcc7563fc5ef11</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>bdc1378f3e3dfc3a3f817f9e8282d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>1965ba0c0774eb4beed2ab727193c53b</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.TestContentCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>a3db13b3c3b80e28546c918cda2af40c</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>6d11b1155c1f092db30da87515eff20e</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>5a241ea87efd38fedee28d90de2625db</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.WarmUpCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>add1a4226a11d3637c44f726966e3bc5</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.WelcomeCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>7905a52195e6ec4abc040c11679d8779</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.ServerCommand</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>2b53d1f5f9821422fcc4f4290cf857a9</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.ServerResult</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>6f0f2d991f5c85b16060fb22e91b05fb</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.LightContent</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>fb839a2c0873d462d5eb21fc8f756898</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.LightUri</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>433b2a9c681387afc8f86ab33bc9b24e</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.MediatorServiceProxy</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>146aa42209726ccad6ea5dc0a0643cc4</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>e49abc0a57241026aa31ea3beb195ca4</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook.1</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>b3cbb80e2952be781cbfd64f59ab1de3</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>b6c87e48c0bbda5c1e26b178f70db848</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>87f726a0f58695a1f4bf964c29d9857b</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\19979</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>7c029e284338b284e9fe7984e91902fe</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path><vendor>PUP.Optional.Qone8</vendor><action>success</action><hash>3648b3137b00c670ed1cd4586a9aff01</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>4e30586e42396cca0617c22fc93939c7</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>0f6f24a296e55dd9bcf81a29719356aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>5d21a71fc0bb7db9981d360db54f1fe1</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>5628d3f3f38888ae438f0fd7db278779</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\SWEETIM</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>aad47551186338fe9ea76bb621e342be</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd</path><vendor>PUP.Optional.SystemSpeedup</vendor><action>success</action><hash>7608b610f982cf679b3e1aca9a6818e8</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\UMBRELLA</path><vendor>PUP.Optional.Umbrella.A</vendor><action>success</action><hash>ea943294562584b2b23daf723bc915eb</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BlockAndSurf</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>afcfb412a5d6d264144730cc4db553ad</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IBUpdaterService</path><vendor>Adware.InstallBrain</vendor><action>success</action><hash>69156c5ae19a0a2c1b22c8324fb405fb</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Updater Service</path><vendor>Adware.InstallBrain</vendor><action>success</action><hash>69156c5ae19a0a2c1b22c8324fb405fb</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\BlockAndSurf</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><hash>c2bc15b16f0c2d09eaa476699e6413ed</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings</path><vendor>PUP.Optional.Spigot.A</vendor><action>delete-on-reboot</action><hash>88f61ea896e5cf67e1aa112f758f7c84</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PlurPush</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d3abd5f1ed8e60d6ba4de93f54b06799</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarBackup</path><vendor>PUP.Optional.SmartBar</vendor><action>delete-on-reboot</action><hash>245a6066dba083b36b3b89afa85c0bf5</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarLog</path><vendor>PUP.Optional.SmartBar</vendor><action>delete-on-reboot</action><hash>a9d57e48f68547ef2580b682cf35f808</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag</path><vendor>PUP.Optional.Tuto4PC.A</vendor><action>delete-on-reboot</action><hash>1b63fbcbe497c6704f9a3c07ff05d22e</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\BlockAndSurf</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><hash>cbb32c9ad1aad6606529a83701017987</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent</path><vendor>PUP.Optional.Iminent.A</vendor><action>delete-on-reboot</action><hash>95e90cba5229fa3cf300cf262bd77b85</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path><vendor>PUP.Optional.Qone8</vendor><action>delete-on-reboot</action><hash>5f1ff7cfc4b7ba7c47c12b0124e021df</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings</path><vendor>PUP.Optional.BProtector.A</vendor><action>delete-on-reboot</action><hash>433b4e78d6a594a2a9dff92a49bb649c</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PERFORMERSOFT LLC\Video Performer</path><vendor>PUP.Optional.VideoPerformer.A</vendor><action>delete-on-reboot</action><hash>057907bf403b93a3e0c9b92a639ff50b</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR</path><vendor>PUP.Optional.ShoppingHelper.A</vendor><action>delete-on-reboot</action><hash>cbb3547206751d19e02d8cb64eb6e41c</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader</path><vendor>PUP.Optional.Softonic.A</vendor><action>delete-on-reboot</action><hash>3549972fed8e231373edfffa1fe3ed13</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM</path><vendor>PUP.Optional.SweetIM.A</vendor><action>delete-on-reboot</action><hash>6f0fb511f08bd95dcf7529f841c36997</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd</path><vendor>PUP.Optional.SystemSpeedup</vendor><action>delete-on-reboot</action><hash>a5d9f1d51962ce6801d712d22ad8e61a</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent</path><vendor>PUP.Optional.Iminent.A</vendor><action>delete-on-reboot</action><hash>2b53bf07e09b91a5c7731fec42c1837d</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings</path><vendor>PUP.Optional.Spigot.A</vendor><action>delete-on-reboot</action><hash>d1ad09bd94e7f3438209b68ae71dc63a</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>1965e5e1314a0036b0db96aa37cd14ec</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{EEE6C35F-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C35A-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EEE6C35A-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{EEE6C35F-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IECT3312329</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>5b238442d0abed491cd0c5f19171d828</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Plus-HD-9.1</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>611d289e3942fb3b2709a716a65c50b0</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D5B592B1-D572-EF9F-EF4F-05BF14D59119}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{0D1BAF83-B813-73EC-B53C-FEECD350AD29}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3BFBF8E0-E5A3-7D02-A811-E410CF655E8A}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{0D1BAF83-B813-73EC-B53C-FEECD350AD29}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D5B592B1-D572-EF9F-EF4F-05BF14D59119}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B9F96C29-EF68-DC05-B0EA-18D228284D82}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{2A9BD1ED-FB0F-8AD9-4D0B-A656B68A2D0B}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E0D24EEF-22FB-DA72-D359-22D97171AA66}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{2A9BD1ED-FB0F-8AD9-4D0B-A656B68A2D0B}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B9F96C29-EF68-DC05-B0EA-18D228284D82}</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{66b103a7-d772-4fcd-ace4-16f79a9056e0}</path><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{66B103A7-D772-4FCD-ACE4-16F79A9056E0}</path><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{07943FEB-C228-40C6-ACA1-6A8C4284B5A5}</path><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\Toolbar.CT3312329</path><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar.CT3312329</path><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{07943FEB-C228-40C6-ACA1-6A8C4284B5A5}</path><vendor>PUP.Optional.AppBario.A</vendor><action>delete-on-reboot</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{07943FEB-C228-40C6-ACA1-6A8C4284B5A5}</path><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{66B103A7-D772-4FCD-ACE4-16F79A9056E0}</path><vendor>PUP.Optional.AppBario.A</vendor><action>delete-on-reboot</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<key><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{66B103A7-D772-4FCD-ACE4-16F79A9056E0}</path><vendor>PUP.Optional.AppBario.A</vendor><action>delete-on-reboot</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></key>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>SweetIM</valuename><vendor>PUP.Optional.SweetIM</vendor><action>success</action><valuedata>C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe</valuedata><hash>1e607c4a4932a49278f94ba9aa5a7789</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>Sweetpacks Communicator</valuename><vendor>PUP.Optional.SweetIM</vendor><action>success</action><valuedata>C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe</valuedata><hash>e8966e581c5f70c674fd27cd33d1dd23</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS</path><valuename>{F3FEE66E-E034-436A-86E4-9690573BEE8A}</valuename><vendor>PUP.Optional.YTDToolbar</vendor><action>delete-on-reboot</action><valuedata></valuedata><hash>a8d6784e84f721157c86a3ca4fb3c937</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS</path><valuename>{F3FEE66E-E034-436A-86E4-9690573BEE8A}</valuename><vendor>PUP.Optional.YTDToolbar</vendor><action>success</action><valuedata></valuedata><hash>a8d6784e84f721157c86a3ca4fb3c937</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR</path><valuename>{EEE6C35B-6118-11DC-9C72-001320C79847}</valuename><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><valuedata></valuedata><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{F3FEE66E-E034-436a-86E4-9690573BEE8A}</path><valuename></valuename><vendor>PUP.Optional.YTDToolbar</vendor><action>success</action><valuedata></valuedata><hash>dea005c1fc7fb87e6b9781ecd13102fe</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{F3FEE66E-E034-436a-86E4-9690573BEE8A}</path><valuename></valuename><vendor>PUP.Optional.YTDToolbar</vendor><action>success</action><valuedata></valuedata><hash>047afcca3744ad89c73b72fb56acfc04</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE</path><valuename>path</valuename><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><valuedata>C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe</valuedata><hash>87f726a0f58695a1f4bf964c29d9857b</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>fst_de_37</valuename><vendor>PUP.Optional.FirstSeenToday.A</vendor><action>success</action><valuedata></valuedata><hash>5e20eed876050f27b14d6c8a8181b34d</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>t4pc_en_4</valuename><vendor>PUP.Optional.Tuto4PC.A</vendor><action>success</action><valuedata></valuedata><hash>98e6557153280d29f37ea737aa584db3</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>fst_de_40</valuename><vendor>PUP.Optional.FirstSeenToday.A</vendor><action>success</action><valuedata></valuedata><hash>4539a3238cef44f22fcff8fef1115ca4</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>fst_de_60</valuename><vendor>PUP.Optional.FirstSeenToday.A</vendor><action>success</action><valuedata></valuedata><hash>c3bbd9ed572487af49b5c432bd4504fc</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>t4pc_en_6</valuename><vendor>PUP.Optional.Tuto4PC.A</vendor><action>success</action><valuedata></valuedata><hash>c1bda81e79021c1aff72994541c1768a</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>fst_de_70</valuename><vendor>PUP.Optional.FirstSeenToday.A</vendor><action>success</action><valuedata></valuedata><hash>c9b5794d0f6c3105f20c8b6b6f9351af</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>t4pc_en_7</valuename><vendor>PUP.Optional.Tuto4PC.A</vendor><action>success</action><valuedata></valuedata><hash>2a54d2f42e4d280eb6bb499556aca35d</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>fst_de_89</valuename><vendor>PUP.Optional.FirstSeenToday.A</vendor><action>success</action><valuedata></valuedata><hash>6c12309692e90531d02e3bbbbf436d93</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>fst_de_92</valuename><vendor>PUP.Optional.FirstSeenToday.A</vendor><action>success</action><valuedata></valuedata><hash>552981458af1fb3bec12c92de121a858</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>seesimilar@SeeSimilar.com</valuename><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><valuedata>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com</valuedata><hash>bcc2fdc95724261068aca739cc36a15f</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT</path><valuename>InstallDir</valuename><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><valuedata>C:\PROGRA~2\SearchProtect</valuedata><hash>5628d3f3f38888ae438f0fd7db278779</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\SWEETIM</path><valuename>simapp_id</valuename><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><valuedata>{62EB56FA-52C7-11E2-9EC7-14DAE9CEA621}</valuedata><hash>aad47551186338fe9ea76bb621e342be</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\UMBRELLA</path><valuename>MUpdBlock</valuename><vendor>PUP.Optional.Umbrella.A</vendor><action>success</action><valuedata>{


Math20 15.08.2014 20:39

Code:

&quot;MASSUPDATE&quot; : {
      &quot;CHROME_MBAR&quot; : {
        &quot;Checked&quot; : 1,
        &quot;RetryIdx&quot; : 0,
        &quot;Version&quot; : 1
      },
      &quot;FIREFOX_MBAR&quot; : {
        &quot;Checked&quot; : 1,
        &quot;RetryIdx&quot; : 0,
        &quot;Version&quot; : 0,
        &quot;cmd&quot; : &quot;&quot;,
        &quot;url&quot; : &quot;hxxp://vzapp.iminent.com/vz/C2C3AC84-2B90-47A7-8E0B-A48CBCAC2CEC/1/MbarFfx.exe&quot;
      },
      &quot;IEXPLORE_BHO&quot; : {
        &quot;Checked&quot; : 1,
        &quot;RetryIdx&quot; : 0,
        &quot;Version&quot; : 4
      }
  }
}
</valuedata><hash>ea943294562584b2b23daf723bc915eb</hash></value>
<value><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LPTSYSTEMUPDATER</path><valuename>ImagePath</valuename><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><valuedata>&quot;C:\Program Files (x86)\LPT\srpts.exe&quot;</valuedata><hash>83fb46802f4cfc3a82f59b6931d27090</hash></value>
<value><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPM</path><valuename>ImagePath</valuename><vendor>PUP.Optional.WpManager.A</vendor><action>success</action><valuedata>C:\ProgramData\WPM\wprotectmanager.exe -service</valuedata><hash>bac40abc5f1c6ec88d50af81dc2822de</hash></value>
<value><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>DefaultScope</valuename><vendor>PUP.Optional.Snapdo.T</vendor><action>delete-on-reboot</action><valuedata>{006ee092-9658-4fd6-bd8e-a21a348e59f5}</valuedata><hash>86f8a71f5526e3539d1735adbb47837d</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>DefaultScope</valuename><vendor>PUP.Optional.Snapdo.T</vendor><action>delete-on-reboot</action><valuedata>{006ee092-9658-4fd6-bd8e-a21a348e59f5}</valuedata><hash>f28c388e9fdc5cda21936b77ed1536ca</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>bProtector Start Page</valuename><vendor>PUP.BProtector</vendor><action>delete-on-reboot</action><valuedata>hxxp://search.babylon.com/?affID=120519&amp;babsrc=HP_ss_gin2g&amp;mntrId=2484742F6850BCB7</valuedata><hash>522cab1bdc9fc96d77c17ba5788c57a9</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>bProtectorDefaultScope</valuename><vendor>PUP.BProtector</vendor><action>delete-on-reboot</action><valuedata>{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}</valuedata><hash>0975c9fddf9c999d99a049d7c4406a96</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>BackgroundContainer</valuename><vendor>PUP.Optional.Conduit</vendor><action>delete-on-reboot</action><valuedata>&quot;C:\Windows\SysWOW64\Rundll32.exe&quot; &quot;C:\Users\Matthias\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll&quot;,DllRun</valuedata><hash>5e2061651a61ab8b79f38ba3f90b30d0</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>Browser Infrastructure Helper</valuename><vendor>PUP.Optional.SmartBar.A</vendor><action>delete-on-reboot</action><valuedata>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.exe startup</valuedata><hash>86f8e1e5bcbf280e6ca1f629b4505aa6</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>BlockAndSurf</valuename><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><valuedata>C:\Program Files (x86)\BlockAndSurfS\BlockAndSurf.exe</valuedata><hash>69154d7986f589ad50d6618b867ccf31</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>seesimilar@SeeSimilar.com</valuename><vendor>PUP.Optional.SeeSimilar</vendor><action>delete-on-reboot</action><valuedata>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com</valuedata><hash>5c221caa55260a2c799c647ca75b827e</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR</path><valuename>Publisher</valuename><vendor>PUP.Optional.ShoppingHelper.A</vendor><action>delete-on-reboot</action><valuedata>ShoppingHelper</valuedata><hash>cbb3547206751d19e02d8cb64eb6e41c</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM</path><valuename>simapp_id</valuename><vendor>PUP.Optional.SweetIM.A</vendor><action>delete-on-reboot</action><valuedata>{62EB56FA-52C7-11E2-9EC7-14DAE9CEA621}</valuedata><hash>6f0fb511f08bd95dcf7529f841c36997</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS</path><valuename>C:\PROGRAM FILES (X86)\SWEETIM\TOOLBARS\INTERNET EXPLORER\MGHELPERAPP.EXE</valuename><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><valuedata>1</valuedata><hash>c6b8a5212853f145fbe07244ad55aa56</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS</path><valuename>C:\PROGRAM FILES (X86)\SWEETIM\TOOLBARS\INTERNET EXPLORER\MGTOOLBARPROXY.DLL</valuename><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><valuedata>1</valuedata><hash>c6b8a5212853f145fbe07244ad55aa56</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE</path><valuename>upt4pc_en_8.exe</valuename><vendor>PUP.Optional.Tuto4PC.A</vendor><action>success</action><valuedata>C:\Users\Matthias\AppData\Local\t4pc_en_8\upt4pc_en_8.exe -runonce</valuedata><hash>f58955719fdc4ceafc69a531639f9b65</hash></value>
<value><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path><valuename>{66B103A7-D772-4FCD-ACE4-16F79A9056E0}</valuename><vendor>PUP.Optional.AppBario.A</vendor><action>delete-on-reboot</action><valuedata>ァアfrラヘOャ・新・ID</valuedata><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR</path><valuename>{66B103A7-D772-4FCD-ACE4-16F79A9056E0}</valuename><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><valuedata>appbarioDE 1 Toolbar</valuedata><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS</path><valuename>{66B103A7-D772-4FCD-ACE4-16F79A9056E0}</valuename><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><valuedata></valuedata><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></value>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Search_URL</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/web/?type=ds&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&amp;q={searchTerms}</valuedata><baddata>hxxp://www.sweet-page.com/web/?type=ds&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>bac4facc69122412e432755b18ece61a</hash></data>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Page_URL</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</valuedata><baddata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</baddata><gooddata>www.google.com</gooddata><hash>d3abae18a2d904327d98ede32fd5b64a</hash></data>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Start Page</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</valuedata><baddata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</baddata><gooddata>www.google.com</gooddata><hash>0b735175fc7ff046c94ee3edf4108f71</hash></data>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Search Page</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/web/?type=ds&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&amp;q={searchTerms}</valuedata><baddata>hxxp://www.sweet-page.com/web/?type=ds&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>413d31952a515dd9b1455f6550b4dd23</hash></data>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>DefaultScope</valuename><vendor>PUP.Optional.Qone8</vendor><action>replaced</action><valuedata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</valuedata><baddata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</baddata><gooddata>{0633EE93-D776-472f-A0FF-E1416B8B2E3A}</gooddata><hash>245ad1f5bcbf8da98926ebe45ca824dc</hash></data>
<data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Search_URL</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/web/?type=ds&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&amp;q={searchTerms}</valuedata><baddata>hxxp://www.sweet-page.com/web/?type=ds&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>582611b5f982a096ff17c20ec143669a</hash></data>
<data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Page_URL</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</valuedata><baddata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</baddata><gooddata>www.google.com</gooddata><hash>e5996e581e5d6dc9aa6bd4fc6e968779</hash></data>
<data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Start Page</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</valuedata><baddata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</baddata><gooddata>www.google.com</gooddata><hash>3648ad19adceb680c156ddf37c887f81</hash></data>
<data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Search Page</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/web/?type=ds&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&amp;q={searchTerms}</valuedata><baddata>hxxp://www.sweet-page.com/web/?type=ds&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>681615b1d7a4b284a74f6c582fd5f30d</hash></data>
<data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>DefaultScope</valuename><vendor>PUP.Optional.Qone8</vendor><action>replaced</action><valuedata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</valuedata><baddata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</baddata><gooddata>{0633EE93-D776-472f-A0FF-E1416B8B2E3A}</gooddata><hash>f08e992d34472e08f6b9824d27dddf21</hash></data>
<data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL</path><valuename>Default</valuename><vendor>PUP.Optional.SnapDo.A</vendor><action>replaced</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>0a745e68ea911224b00b7a4ba95b40c0</hash></data>
<data><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Start Page</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSMMFj9a0kTjUE-mXqusFW0bttzWS4clLPJnhjSqKiYOg7CprZcMGjveMMJmRawBo,</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSMMFj9a0kTjUE-mXqusFW0bttzWS4clLPJnhjSqKiYOg7CprZcMGjveMMJmRawBo,</baddata><gooddata>www.google.com</gooddata><hash>7fff5b6b0f6c0f27ec36ba1506fea060</hash></data>
<data><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Search Bar</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>334b9e287803c571bd63fed150b424dc</hash></data>
<data><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Search Page</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>fc82ccfa89f23afc51d08c433bc9d828</hash></data>
<data><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH</path><valuename>Default_Search_URL</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>b0ce9e28314a6accbc674986cd375da3</hash></data>
<data><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH</path><valuename>SearchAssistant</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>b8c64581dd9e3df9de46359ab25251af</hash></data>
<data><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL</path><valuename>Default</valuename><vendor>PUP.Optional.SnapDo.A</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>0579e8de681350e62d8f873ef50fe31d</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Search Page</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>3b43a422b0cbce68130e3c9364a0be42</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Start Page</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSMMFj9a0kTjUE-mXqusFW0bttzWS4clLPJnhjSqKiYOg7CprZcMGjveMMJmRawBo,</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSMMFj9a0kTjUE-mXqusFW0bttzWS4clLPJnhjSqKiYOg7CprZcMGjveMMJmRawBo,</baddata><gooddata>www.google.com</gooddata><hash>423c96309edd2c0a948e755aea1adf21</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Search Bar</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>15693a8cc9b2ec4a8f91834c20e41ee2</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH</path><valuename>Default_Search_URL</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>cab4b115a9d2ef47ef34715e08fc50b0</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH</path><valuename>SearchAssistant</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>146af7cfd9a26dc91410f4dbd82cbb45</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL</path><valuename>Default</valuename><vendor>PUP.Optional.SnapDo.A</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>4a3465613f3c71c5417b5d68bf458e72</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Search Page</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>f18dd0f6b2c995a150d106c9b45033cd</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Page_URL</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>delete-on-reboot</action><valuedata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</valuedata><baddata>hxxp://www.sweet-page.com/?type=hp&amp;ts=1401755786&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS</baddata><gooddata>www.google.com</gooddata><hash>7fff873fcbb0d165bc55a62a48bcec14</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Search Bar</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>621c9531d1aafc3a5dc3c50a58aca957</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH</path><valuename>Default_Search_URL</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>9de13492017a78be061d2aa5f1137789</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH</path><valuename>SearchAssistant</valuename><vendor>PUP.Optional.Snapdo</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>136bd3f399e265d1998befe0cd37629e</hash></data>
<data><path>HKU\S-1-5-21-4002615419-2591733308-3372411449-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL</path><valuename>Default</valuename><vendor>PUP.Optional.SnapDo.A</vendor><action>delete-on-reboot</action><valuedata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</valuedata><baddata>hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>b2cc71554c2f71c54f6dac1921e3a35d</hash></data>
<folder><path>C:\Users\Matthias\AppData\Local\LPT</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\LPT\Configs</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\LPT\Resources</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></folder>
<folder><path>C:\Program Files (x86)\LPT</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></folder>
<folder><path>C:\Program Files (x86)\LPT\Configs</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></folder>
<folder><path>C:\Program Files (x86)\LPT\Resources</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></folder>
<folder><path>C:\Program Files (x86)\PlurPush</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></folder>
<folder><path>C:\Program Files (x86)\PlurPush\bin</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></folder>
<folder><path>C:\Program Files (x86)\PlurPush\bin\certUtil</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></folder>
<folder><path>C:\Program Files (x86)\PlurPush\bin\plugins</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></folder>
<folder><path>C:\Program Files (x86)\PlurPush\bin\TEMP</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\Main</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\Main\bin</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\Main\rep</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\SearchProtect</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\SearchProtect\rep</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\bin</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\dialogs</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\libs</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protection</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Program Files (x86)\SearchProtect\UI\rep</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\ar</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Configs</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\de</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\es</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\fr</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\he</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\it</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\nl</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\pt</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\ru</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\tr</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Common</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\Configs</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\ServicesPlugins</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\Configs</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\Profiles</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\RollBack</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\11.43.63.16271</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\11.49.63.16848</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\OpenCandy</path><vendor>PUP.Optional.OpenCandy</vendor><action>success</action><hash>a8d6992d0279122495cdecca35cd4ab6</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\OpenCandy\539011ADBB644866A305543C6D87BC3B</path><vendor>PUP.Optional.OpenCandy</vendor><action>success</action><hash>a8d6992d0279122495cdecca35cd4ab6</hash></folder>
<folder><path>C:\Program Files (x86)\SweetIM\Toolbars</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></folder>
<folder><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></folder>
<folder><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></folder>
<folder><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></folder>
<folder><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></folder>
<folder><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></folder>
<folder><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></folder>
<folder><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></folder>
<folder><path>C:\ProgramData\Conduit\IE</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>5b238442d0abed491cd0c5f19171d828</hash></folder>
<folder><path>C:\ProgramData\Conduit\IE\CT3312329</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>5b238442d0abed491cd0c5f19171d828</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\TBHostSupport</path><vendor>PUP.Optional.Conduit</vendor><action>success</action><hash>8af44e78403b82b4a530d8dfcf33f50b</hash></folder>
<folder><path>C:\Users\Matthias\AppData\LocalLow\PriceGong</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></folder>
<folder><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk</path><vendor>PUP.Optional.SlickSavings.A</vendor><action>success</action><hash>5b23695d0f6c73c387857b40ea18758b</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.3_0</path><vendor>PUP.Optional.SlickSavings.A</vendor><action>success</action><hash>5b23695d0f6c73c387857b40ea18758b</hash></folder>
<folder><path>C:\Program Files (x86)\Plus-HD-9.1</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>611d289e3942fb3b2709a716a65c50b0</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\PriceMeterUpdater</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>9ae40abcb2c93afcab9064590002be42</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\PriceMeterUpdater\UpdateProc</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>9ae40abcb2c93afcab9064590002be42</hash></folder>
<folder><path>C:\Program Files (x86)\PriceMeterLiveUpdate</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>38467551611a32044def5e5f20e27888</hash></folder>
<folder><path>C:\Program Files (x86)\PriceMeterLiveUpdate\CrashReports</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>38467551611a32044def5e5f20e27888</hash></folder>
<folder><path>C:\Program Files (x86)\BlockAndSurf-soft</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><hash>a0de695dcbb0221433a74a73659dee12</hash></folder>
<folder><path>C:\Program Files (x86)\BlockAndSurfS</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></folder>
<folder><path>C:\Program Files (x86)\Common Files\Spigot\Search Settings</path><vendor>PUP.Optional.Spigot.A</vendor><action>delete-on-reboot</action><hash>790584421a61181e52c3328f8979e51b</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\LocalLow\BabylonToolbar</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>9ae4bb0b3546fd390a29a3259171e719</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\LocalLow\BabylonToolbar\BabylonToolbar</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>9ae4bb0b3546fd390a29a3259171e719</hash></folder>
<folder><path>C:\Program Files (x86)\Common Files\Spigot\GC</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>6915bd09fe7d55e1d2ddd0f9679b9868</hash></folder>
<folder><path>C:\ProgramData\IePluginServices</path><vendor>PUP.Optional.IePluginServices.A</vendor><action>success</action><hash>235b14b282f97eb85ad401cb946e8080</hash></folder>
<folder><path>C:\ProgramData\IePluginServices\update</path><vendor>PUP.Optional.IePluginServices.A</vendor><action>success</action><hash>235b14b282f97eb85ad401cb946e8080</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\SearchProtect</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\SearchProtect\SearchProtect</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\SearchProtect\SearchProtect\rep</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\SearchProtect\SearchProtect\STG</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\SearchProtect\UI</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\SearchProtect\UI\rep</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\SearchProtect</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\SearchProtect\Logs</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\SearchProtect\SearchProtect</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\SearchProtect\SearchProtect\Logs</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\SearchProtect\SearchProtect\rep</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\SearchProtect\UI</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\Local\SearchProtect\UI\rep</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></folder>
<folder><path>C:\Users\Gast\AppData\LocalLow\Search Settings</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>8af4b115215af145673c07c7a35f9070</hash></folder>
<folder><path>C:\Users\Gast\AppData\LocalLow\Search Settings\res</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>8af4b115215af145673c07c7a35f9070</hash></folder>
<folder><path>C:\Users\Gast\AppData\LocalLow\Search Settings\temp</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>8af4b115215af145673c07c7a35f9070</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\LocalLow\Search Settings</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>1a64596d651676c0e4bff0decc36d927</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\LocalLow\Search Settings\res</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>1a64596d651676c0e4bff0decc36d927</hash></folder>
<folder><path>C:\Users\Matthias^2\AppData\LocalLow\Search Settings\temp</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>1a64596d651676c0e4bff0decc36d927</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\Systweak\ssd</path><vendor>PUP.Optional.SystemSpeedup</vendor><action>success</action><hash>9ee0388e512a73c3083d9b341fe3639d</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\freeSOFTtoday</path><vendor>PUP.Optional.FreeSoftToday.A</vendor><action>success</action><hash>601e25a1c7b4a690803ad9f66e940bf5</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\freeSOFTtoday\freeSOFTtoday</path><vendor>PUP.Optional.FreeSoftToday.A</vendor><action>success</action><hash>601e25a1c7b4a690803ad9f66e940bf5</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\freeSOFTtoday\freeSOFTtoday\1.0</path><vendor>PUP.Optional.FreeSoftToday.A</vendor><action>success</action><hash>601e25a1c7b4a690803ad9f66e940bf5</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\Download</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\Install</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\Offline</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\Offline\{97E78EDE-4562-4C09-8012-7B47C2158B9C}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></folder>
<folder><path>C:\ProgramData\IBUpdaterService</path><vendor>PUP.Optional.IBUpdater.A</vendor><action>delete-on-reboot</action><hash>add10fb7f982f4422b49c90a40c2c63a</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\mz</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\skin</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\img</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\img\weather</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\en-US</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\es-419</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\es-ES</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-BE</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-CA</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-CH</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-FR</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-LU</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\it-CH</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\it-IT</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\pl</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\pt</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\pt-BR</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\ru</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\ru-MO</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\tr-TR</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\vi-VI</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\zh-CN</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\zh-TW</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Roaming\SupTab</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>007e289e1269f93d1eaabb198979649c</hash></folder>
<folder><path>C:\Users\Matthias\AppData\Local\t4pc_en_8</path><vendor>PUP.Optional.Tuto4PC.A</vendor><action>delete-on-reboot</action><hash>f58955719fdc4ceafc69a531639f9b65</hash></folder>
<file><path>C:\ProgramData\WPM\wprotectmanager.exe</path><vendor>PUP.Optional.WpManager</vendor><action>delete-on-reboot</action><hash>f28ce1e5d3a8c076c43236353cc516ea</hash></file>
<file><path>C:\ProgramData\IBUpdaterService\ibsvc.exe</path><vendor>PUP.BundleInstaller.IB</vendor><action>delete-on-reboot</action><hash>6a146660eb90f83e3a479925718f629e</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a1dd7d49d8a349ed373a24d0e3218f71</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\updatePlurPush.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>611daa1c7803f24441da4725cd3452ae</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\utilPlurPush.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>0975c006e19ace68d94271fb31d0a45c</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>1e607c4a4932a49278f94ba9aa5a7789</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\mgUpdateSupport.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>0f6fdfe72f4cbe78630ec430d92b4bb5</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\mgsimcommon.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>cab4ac1ae794fc3a3d34d024947015eb</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\mgcommon.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>710d3d898af1d85e0e63d61ee1237a86</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\mgcommunication.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>6a14972f6e0dc670244da35129db38c8</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\mghooking.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>a2dc56706a1166d0323fbb39db29ee12</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\mgxml_wrapper.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>7509e5e1c1baed49630e06ee31d3db25</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Messenger\mgconfig.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>c4ba52742b503ff7165bee06c93b41bf</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>e8966e581c5f70c674fd27cd33d1dd23</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Communicator\mgcommon.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>cfaf586e2655a591244dd51f59ab16ea</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>c9b53195f08bfe3876fbb63ee32126da</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>4638dbebcbb041f52a47e014a55f1fe1</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>delete-on-reboot</action><hash>77071fa707748bab73febb3930d41ae6</hash></file>
<file><path>C:\Program Files (x86)\SeeSimilar\ScriptHost64.dll</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></file>
<file><path>C:\Program Files (x86)\SeeSimilar\ScriptHost.dll</path><vendor>PUP.Optional.BestToolBars.A</vendor><action>success</action><hash>5e20b5111863c571bf1aef9445bc03fd</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SupTab.dll</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>8fef83439fdcd85e53cc72fc29d914ec</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>99e5ad191467de58c3b085eb36cc2ad6</hash></file>


Math20 15.08.2014 20:41

Code:

<file><path>C:\ProgramData\YTD YouTube Downloader &amp; Converter\ytd_installer.exe</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>e896dbebd6a5f442e7bf04229a660cf4</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\BabSolution\Shared\BUSolution.dll</path><vendor>PUP.Optional.BabSolution.A</vendor><action>success</action><hash>fa84cef89ae160d6d9a30017be4312ee</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\sweet-page\UninstallManager.exe</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>c2bc4383c8b3f0467d50aae68a77e818</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Temp\dsrlte.exe</path><vendor>PUP.Optional.PayByAds.A</vendor><action>success</action><hash>b7c710b6abd04ee8f4069568c53f817f</hash></file>
<file><path>C:\Windows\Temp\nsyD0CA.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>780607bff883e056295137fd857c4eb2</hash></file>
<file><path>C:\Windows\Temp\nsyD55D.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>bcc2f7cf0a711a1cd3a758dce021847c</hash></file>
<file><path>C:\Windows\Temp\nsz5F49.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>c6b8b61082f9f541493144f0ba475ea2</hash></file>
<file><path>C:\Windows\Temp\nsnA373.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>285617af84f713235921f242b64b3fc1</hash></file>
<file><path>C:\Windows\Temp\nsnD0D9.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>8df15175304b11253e3c2c0802ff16ea</hash></file>
<file><path>C:\Windows\Temp\nso64E4.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>97e7b90d1e5d360085f578bc1ee39d63</hash></file>
<file><path>C:\Windows\Temp\nss9F9D.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>7608972fadce999d6416e84c42bf26da</hash></file>
<file><path>C:\Windows\Temp\nssB58C.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>85f91aacdba06cca2159211357aaf10f</hash></file>
<file><path>C:\Windows\Temp\nssC8BD.exe</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>bac4e4e2e19a25116406b5744db47d83</hash></file>
<file><path>C:\Windows\Temp\nssF97F.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>fb838f3717648fa7d7a37bb955ac5aa6</hash></file>
<file><path>C:\Windows\Temp\nst41A.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>5f1f5e680873191daecc260e8180d030</hash></file>
<file><path>C:\Windows\Temp\nsiA354.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>5925a521dc9f89ada8d241f359a8f50b</hash></file>
<file><path>C:\Windows\Temp\nst5536.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>6a14f3d3a3d8b284f981bb79b34e9868</hash></file>
<file><path>C:\Windows\Temp\nst6730.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>b3cb675f9cdfe254700aad87ca374eb2</hash></file>
<file><path>C:\Windows\Temp\nst75CF.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>ff7fba0c8bf07abcb3c75bd95fa236ca</hash></file>
<file><path>C:\Windows\Temp\nstB752.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>b3cb487e6e0db482ceac35ff6e93b54b</hash></file>
<file><path>C:\Windows\Temp\nsy75A0.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>85f96462dd9e2d09582281b3aa5743bd</hash></file>
<file><path>C:\Windows\Temp\nsy86B1.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>81fd0bbb136885b198e290a4ef12a55b</hash></file>
<file><path>C:\Windows\Temp\nsiC2B7.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>dda140861863f640a9d1ff3552af02fe</hash></file>
<file><path>C:\Windows\Temp\nsiD5C.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f985a620a1da0234b6c437fdfd048c74</hash></file>
<file><path>C:\Windows\Temp\nsiD8F5.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>39452f97fc7fb1856713ca6a4ab77d83</hash></file>
<file><path>C:\Windows\Temp\nsj9F94.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>c8b6eadcbac1fe38a6d48ca81fe2bb45</hash></file>
<file><path>C:\Windows\Temp\nskBDAF.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>c2bc18aef38841f57109cb6906fb7f81</hash></file>
<file><path>C:\Windows\Temp\nsn3B8D.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>e896dceab8c39c9a106aa58f25dcd828</hash></file>
<file><path>C:\Windows\Temp\nsn70DF.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>0d710eb899e2f73fed8dc0747a875ca4</hash></file>
<file><path>C:\Windows\Temp\nsn88E2.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>4e307452f18afd39d5a53103629f827e</hash></file>
<file><path>C:\Windows\Temp\nsd5007.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>b9c56e58b1caee48205a55df857ce719</hash></file>
<file><path>C:\Windows\Temp\nsi1599.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>dea04b7be9922a0c6911e94b8c75629e</hash></file>
<file><path>C:\Users\Matthias\Downloads\etypesetup.exe</path><vendor>PUP.Optional.Somoto</vendor><action>success</action><hash>09751ea8aecd3afc7f992ec6857f3bc5</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (1).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>3945339364171b1bbd5352feba4a24dc</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (10).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>1d619432d4a776c0fbad7a23f80950b0</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (11).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>82fcb2146a11bc7ac5e3613c9968b24e</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (12).exe</path><vendor>PUP.Optional.Outbrowse</vendor><action>success</action><hash>98e67551cab1ee48808c554d9a673ec2</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (2).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>a9d503c3cfac83b35db3e36dc044956b</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (3).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>e6985f6798e35adc0808e7696f9525db</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (4).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>1965b214e2999e9836da90c0c044d52b</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (5).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>dba3893dd4a7e650cd436ce4f41017e9</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (6).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>27573a8cd5a60a2ca070143c32d2a759</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (7).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>136bd8ee5f1ca69055bba9a79c68ae52</hash></file>
<file><path>C:\Users\Matthias\Downloads\setup (8).exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>f28cb80e1863fe38e3cb424344bdfc04</hash></file>
<file><path>C:\Users\Matthias\Downloads\Setup (9).exe</path><vendor>PUP.Optional.Firseria</vendor><action>success</action><hash>2d510cba3c3f85b1bbfc546a54b0c937</hash></file>
<file><path>C:\Users\Matthias\Downloads\DTLite4471-0333.exe</path><vendor>PUP.Optional.OpenCandy</vendor><action>success</action><hash>2f4f1fa7b4c7ae88c020797b4bb9a25e</hash></file>
<file><path>C:\Users\Matthias\Downloads\VideoPerformerSetup.exe</path><vendor>PUP.BundleInstaller.IB</vendor><action>success</action><hash>631b26a0e09bcc6a057c0faf808029d7</hash></file>
<file><path>C:\Users\Matthias\Downloads\iLividSetup-r400-n-bc (1).exe</path><vendor>PUP.Optional.Bandoo</vendor><action>success</action><hash>c2bc8f3799e2d5619c322aeaf40d49b7</hash></file>
<file><path>C:\Users\Matthias\Downloads\iLividSetup-r400-n-bc.exe</path><vendor>PUP.Optional.Bandoo</vendor><action>success</action><hash>106e7650b0cb0531884657bdbf42b14f</hash></file>
<file><path>C:\Users\Matthias\Downloads\iLividSetup.exe</path><vendor>PUP.Optional.Bandoo</vendor><action>success</action><hash>f985e6e0a2d996a07b5366ae1ce5847c</hash></file>
<file><path>C:\Users\Matthias\Downloads\VideoSpin_2_0_Setup.exe</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>6a148c3a08730d29038af2639170be42</hash></file>
<file><path>C:\Users\Matthias\Downloads\Java.exe</path><vendor>PUP.Optional.BundleInstaller.A</vendor><action>success</action><hash>027ca22482f9092d35db6a2dda2a4db3</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\BrowserHelper.exe</path><vendor>PUP.Optional.SnapDo.A</vendor><action>success</action><hash>bac45d69fc7fbf77daeb7915f908e719</hash></file>
<file><path>C:\Windows\Installer\46bbe.msi</path><vendor>PUP.Optional.SnapDo.A</vendor><action>success</action><hash>f886a91de893003682432f5f02ff936d</hash></file>
<file><path>C:\Windows\Installer\203d403.msi</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>4d31606687f4ce6838392ec6a163d12f</hash></file>
<file><path>C:\Windows\Installer\203d40c.msi</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>f08ed0f6542744f2145ddb199f65827e</hash></file>
<file><path>C:\Windows\Installer\203d415.msi</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>5628c7ff29521521046d37bd8b7914ec</hash></file>
<file><path>C:\Windows\Installer\203d41e.msi</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>6b13ebdbf08b3105195822d25fa58080</hash></file>
<file><path>C:\Windows\Installer\26e29af.msi</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>5e208244e79452e47d3f6dcbc04128d8</hash></file>
<file><path>C:\Windows\System32\drivers\{552199fb-9890-4055-9aaf-b2f6d51d46e9}Gw64.sys</path><vendor>PUP.Optional.Sanbreel.A</vendor><action>success</action><hash>a1dd17afbfbcb87eef74edf3f30f26da</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage</path><vendor>PUP.Optional.Boost.A</vendor><action>delete-on-reboot</action><hash>d1adeadcb0cbe650503abf23867cb050</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage-journal</path><vendor>PUP.Optional.Boost.A</vendor><action>success</action><hash>c9b5e1e5c3b8261043473fa339c98080</hash></file>
<file><path>C:\Windows\System32\Tasks\e75f5e4d-8113-409a-8cd5-3dd1ed9ef810-5</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>c8b6477fd5a6270fb5f90bd77191a65a</hash></file>
<file><path>C:\Windows\System32\Tasks\Price Meter Updater</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>83fbd4f2fe7d3ef80745469d48ba07f9</hash></file>
<file><path>C:\Windows\Tasks\Price Meter Updater.job</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>ff7fd8ee7a0188ae9faef0f341c18878</hash></file>
<file><path>C:\Windows\System32\Tasks\EPUpdater</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>dea00cbae7941d19125adc0b58aa4fb1</hash></file>
<file><path>C:\Windows\System32\Tasks\BlockAndSurf Update</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>5529596d5724bc7a9152955205fdc43c</hash></file>
<file><path>C:\Windows\System32\Tasks\BlockAndSurf_wd</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>f48acff7384387af667e7f685ba7f010</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage</path><vendor>PUP.Optional.BetterDeals.A</vendor><action>success</action><hash>9fdfd5f1304b80b6be47e20bb54dbb45</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal</path><vendor>PUP.Optional.BetterDeals.A</vendor><action>success</action><hash>314dedd986f5fb3b986d37b6ef13dd23</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\BabMaint.exe</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>621c1bab9ae1cc6a2c4ba24c0ff34bb5</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.babylon.com_0.localstorage</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>bdc102c42259f5419fd9faf41ee41fe1</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.babylon.com_0.localstorage-journal</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>225cc9fd7506979fd3a55698a75bd62a</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage</path><vendor>PUP.Optional.LiveLyrics.A</vendor><action>success</action><hash>1d61edd9fb808da93c006d830af8b64a</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage-journal</path><vendor>PUP.Optional.LiveLyrics.A</vendor><action>success</action><hash>3e4034925a218aac0834e70927db1de3</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_app.mam.conduit.com_0.localstorage</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>a6d8a422d1aa5bdbedfe9b5610f24eb2</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_app.mam.conduit.com_0.localstorage-journal</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>18664c7adf9ca78f9f4cac45b949fc04</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fastcontent.conduit.com_0.localstorage</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>fd818b3b8eed300644a850a1828027d9</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fastcontent.conduit.com_0.localstorage-journal</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>621c52743b403600509c9061fc068779</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage</path><vendor>PUP.Optional.Superfish.A</vendor><action>delete-on-reboot</action><hash>5e20ab1b73081f17320d6191986a49b7</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal</path><vendor>PUP.Optional.Superfish.A</vendor><action>delete-on-reboot</action><hash>c6b825a14734f343ab94cf235ba7ac54</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>d0ae12b4b9c22610bb5bc03342c011ef</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage-journal</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>e698b6100b7096a08e88ca297e84aa56</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>97e754727ffc350142ac7083d03213ed</hash></file>
<file><path>C:\Windows\Tasks\BlockAndSurf Update.job</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>dca284421b6087af005900fc15edb64a</hash></file>
<file><path>C:\Windows\Tasks\BlockAndSurf_wd.job</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>0f6ffcca6219b08687d239c3b84a25db</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\PublisherSettings.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\FiddlerCore.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\HtmlAgilityPack.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\linmsl.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\LPTInstaller.msi</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\lrrot.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\NewConfig.txt</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Newtonsoft.Json.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Common.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Communication.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Communication.NamedPipe.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Infrastructure.Utilities.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyService.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Personalization.Common.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\sppsm.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\spusm.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srbs.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srbu.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\sreu.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srpdm.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srprl.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srpt.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srptc.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srptm.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srptm.exe.config</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\srut.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\UserSettings.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\XMLOperations.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Configs\BrowserSettings.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Configs\LPTMapping.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Configs\Timers.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\LPT\Resources\LPT.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>8af472543645ba7cb2c22adad132d52b</hash></file>
<file><path>C:\Program Files (x86)\LPT\PublisherSettings.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Smartbar.Common.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\spusm.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\FiddlerCore.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\HtmlAgilityPack.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\linmsl.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\LPTInstaller.msi</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\lrrot.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\NewConfig.txt</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Newtonsoft.Json.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Smartbar.Communication.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Smartbar.Infrastructure.Utilities.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyService.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Smartbar.Personalization.Common.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\sppsm.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srbs.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srbu.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\sreu.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srpdm.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srprl.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srpt.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srptc.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srptm.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srptm.exe.config</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srpts.exe</path><vendor>PUP.Optional.Linkury.A</vendor><action>delete-on-reboot</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srpts.exe.config</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\srut.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\System.Data.SQLite.dll</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\UserSettings.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\XMLOperations.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Configs\BrowserSettings.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Configs\LPTMapping.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Configs\Timers.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Program Files (x86)\LPT\Resources\LPT.xml</path><vendor>PUP.Optional.Linkury.A</vendor><action>success</action><hash>f6881ea86a110531d99c1aeafd06936d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pricegong.conduitapps.com_0.localstorage</path><vendor>PUP.Optional.Pricegong</vendor><action>success</action><hash>8af4ffc7f586a78f831f28e017ece020</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pricegong.conduitapps.com_0.localstorage-journal</path><vendor>PUP.Optional.Pricegong</vendor><action>success</action><hash>1c62586e92e986b0c7db5bad51b227d9</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\bprotector web data</path><vendor>PUP.Optional.BProtector.A</vendor><action>success</action><hash>502e9e287605ed49f396e93afe060af6</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\bprotector web data</path><vendor>PUP.Optional.BProtector.A</vendor><action>success</action><hash>a7d78244592255e18900c063ea1a1be5</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences</path><vendor>PUP.Optional.BProtector.A</vendor><action>success</action><hash>c2bc3591a9d2cd690d7dd94a9272a957</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences</path><vendor>PUP.Optional.BProtector.A</vendor><action>success</action><hash>93ebc9fde596be780b7fef34a064a55b</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\PlurPush.ico</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\7za.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\PlurPushUn.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\PlurPushUninstall.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\updatePlurPush.InstallState</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.PurBrowseG.zip</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\7za.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\BrowserAdapter.7z</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\BrowserAdapterS.7z</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certutil.zip</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\Interop.NetFwTypeLib.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\msvcr100.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\Pac.js</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\pac9064.js</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.BrowserAdapter.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.BRT.Helper.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.BRT.zip</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.DspSvc.zip</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.PurBrowse.zip</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPush.PurBrowse64.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPushBAApp.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPushDsp.bmp</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\PlurPushDsp.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\utilPlurPush.InstallState</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\{552199fb-9890-4055-9aaf-b2f6d51d46e9}.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>delete-on-reboot</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\certutil.exe</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\freebl3.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\libnspr4.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\libplc4.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\libplds4.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\nss3.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\nssckbi.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\nssdbm3.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\nssutil3.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\smime3.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\softokn3.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\sqlite3.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\certUtil\ssl3.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.Bromon.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.BroStats.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.BrowserAdapter.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.BrowserAdapterS.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.BRT.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.CompatibilityChecker.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.DspSvc.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.FFUpdate.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.IEUpdate.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.OfSvc.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.PurBrowse.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.PurBrowseG.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\PlurPush\bin\plugins\PlurPush.Repmon.dll</path><vendor>PUP.Optional.PlurPush.A</vendor><action>success</action><hash>d8a615b1bfbc51e5b74f66c256ae867a</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\EULA.txt</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\defaults.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>29551da91b60e94d125d47e3da2ab54b</hash></file>
<file><path>C:\Windows\System32\Tasks\BackgroundContainer Startup Task</path><vendor>PUP.Optional.Conduit</vendor><action>success</action><hash>90eeccfa6d0e2511fcd0c2688a7a9070</hash></file>
<file><path>C:\Windows\System32\drivers\{552199fb-9890-4055-9aaf-b2f6d51d46e9}w64.sys</path><vendor>PUP.Optional.Sanbreel.A</vendor><action>success</action><hash>d5a991351a61e0560d3ac97735cfaf51</hash></file>
<file><path>C:\Windows\Tasks\e75f5e4d-8113-409a-8cd5-3dd1ed9ef810-5.job</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>9be38a3c780301352efb330e58ac24dc</hash></file>
<file><path>C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>1b63fec8fb80ea4c6cd37bc6ee1641bf</hash></file>
<file><path>C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>93ebc1050873e650132d330e1ee64cb4</hash></file>
<file><path>C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>7905299d0279e4527dc42d14dc2820e0</hash></file>
<file><path>C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>80fe2a9c136862d477cb9fa22ed66a96</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfdc171.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>afcfb412a5d6d264144730cc4db553ad</hash></file>
<file><path>C:\ProgramData\IBUpdaterService\ibsvc.exe</path><vendor>Adware.InstallBrain</vendor><action>delete-on-reboot</action><hash>69156c5ae19a0a2c1b22c8324fb405fb</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.exe</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>86f8e1e5bcbf280e6ca1f629b4505aa6</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\BlockAndSurf.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><hash>69154d7986f589ad50d6618b867ccf31</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\BrowserHelper.exe.config</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\ChromeHost.exe</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\DomainBlackList.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\FiddlerCore.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\HtmlAgilityPack.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Interop.SHDocVw.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Interop.WMPLib.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\lrcnt.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Lrcnta.exe</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\lrrot.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\MACTrackBarLib.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Microsoft.mshtml.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Common.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Microsoft.Practices.ObjectBuilder.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\MouseKeyboardActivityMonitor.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\NDde.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\NewConfig.txt</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Newtonsoft.Json.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\ProductsRemovalTool.exe</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\RegAsm.exe</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sb.host.json</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Communication.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Communication.NamedPipe.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.exe.config</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Monetization.Proxy.ProxyRemover.exe</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Monetization.Proxy.ProxyService.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Resources.Translations.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\SmartbarInstallationIcon.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\SmartbarShortcutIcon.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.config</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\IEButton.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sgml.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Common.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\smta.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\smti.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\smtu.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\spbe.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\spbl.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sppsm.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\spsm.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\spusm.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srau.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srbhu.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srbs.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srbu.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sreu.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srgu.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srns.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srom.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srpdm.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srprl.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srpu.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srsbs.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srsbsau.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srsl.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sruhs.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srus.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\srut.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\System.Data.SQLite.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\XMLOperations.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sgmu.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sidb.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\siem.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sipb.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\sismlp.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.html</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\manifest.json</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.htm</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.html</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.html</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS\border.css</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fb.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fblike.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\gmail.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\google.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\googleplus.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\left.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\mgsplusvideo.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\pinit.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\right.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\searchBox.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\twitter.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\alxbl.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\BackPageRemove.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\defaultBlockList.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\documentEvents.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\externalJS.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\FBImagePreview.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\filters.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\generalBackButtonDetection.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\InternalJS.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\jquery-1.9.0.min.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\PluginWrapper.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\publisherDefinitions.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\ta.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\tabReload.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\TopFrameJS.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\trans.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper128.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper16.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper48.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Configs\QueryParameters.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\Configs\XmlSideBySideProtocol.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome.manifest</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\install.rdf</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>


Math20 15.08.2014 20:43

Code:

<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\BackPageRemove.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\externalJS.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FBImagePreview.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.css</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.xul</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\InternalJS.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\jquery-1.5.1.min.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\publisherDefinitions.js</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fb.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fblike.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\gmail.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\googleplus.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\left.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\mgsplusvideo.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\pinit.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\right.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\searchBox.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\twitter.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper128.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper16.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper_small.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\ISmartbarFireFoxRemotePlugin.xpt</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_25.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_26.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_27.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_28.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_29.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\Configs\UserInfo.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0A.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8f.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367D.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2B.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>


Math20 15.08.2014 20:44

Code:

<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876F.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cd.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212E.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580de.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29B.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7b.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3D.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02A.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02AHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02APress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0A.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BE.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9F.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FD.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6A.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6AHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6APress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBE.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>


Math20 15.08.2014 20:45

Code:

<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066B.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1.PNG</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1HOVER.PNG</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1PRESS.PNG</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EAB.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367D.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2B.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876F.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cd.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212E.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29B.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BC.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aef.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefPress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FHover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.ico</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056press.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\youtube.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\youtubehover.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\iconsWide\youtubepress.png</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.DMP.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.MessengerPlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.NotepadPlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.ScreenCapturePlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WeatherPlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WordPlugin.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Common\ServicesPlugins\spup.dll</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\Configs\IconsSettings.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\Configs\LocalMethods.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\Configs\ProfileManager.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\Configs\PublisherSettings.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\Configs\UserSettings.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\DistributionFiles\Profiles\3C6BEA24-8B0E-4EDE-82EC-536F56750CD5.xml</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\11.43.63.16271\user.config</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\11.49.63.16848\user.config</path><vendor>PUP.Optional.SmartBar.A</vendor><action>success</action><hash>07778244eb90aa8ce859e4d2b151c33d</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\OpenCandy\539011ADBB644866A305543C6D87BC3B\TuneUpUtilities2012_de-DE.exe</path><vendor>PUP.Optional.OpenCandy</vendor><action>success</action><hash>a8d6992d0279122495cdecca35cd4ab6</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\ClearHist.exe</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\default.xml</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgcommon.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgconfig.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mghooking.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mglogger.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf\logger.xml</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcm90.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcp90.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcr90.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\eye_icon.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_32x32.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\about.html</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\affid.dat</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\basis.xml</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\bing.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\clear-history.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim-over.gif</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim.gif</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier.js</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\dating.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\dictionary.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\eye_icon_over.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\e_cards.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\find.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\free_stuff.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\games.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\glitter.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\google.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\help.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\highlight.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\locales.xml</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_16x16.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_21x18.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_about.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\more-search-providers.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\music.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\news.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\options.html</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\photos.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\search-current-site.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\shopping.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\sweetim_text.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\video.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\web-search.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\web-toolbar.js</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\yahoo.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_bing.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_current.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_dictionary.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_google.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_hover.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_left.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_photo.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_video.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_web.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_yahoo.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_bing.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_current.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_dictionary.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_google.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_hover.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_left.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_photo.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_video.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_web.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_yahoo.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_bing.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_current.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_dictionary.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_google.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_hover.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_left.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_photo.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_video.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_web.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_yahoo.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>c6b8a5212853f145fbe07244ad55aa56</hash></file>
<file><path>C:\ProgramData\Conduit\IE\CT3312329\configutaion.json</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>5b238442d0abed491cd0c5f19171d828</hash></file>
<file><path>C:\ProgramData\Conduit\IE\CT3312329\SetupIcon.ico</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>5b238442d0abed491cd0c5f19171d828</hash></file>
<file><path>C:\ProgramData\Conduit\IE\CT3312329\UninstallerUI.exe</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>5b238442d0abed491cd0c5f19171d828</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\TBHostSupport\TBHostSupport.dll</path><vendor>PUP.Optional.Conduit</vendor><action>success</action><hash>8af44e78403b82b4a530d8dfcf33f50b</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\TBHostSupport\TBHostSupport_0.dll</path><vendor>PUP.Optional.Conduit</vendor><action>success</action><hash>8af44e78403b82b4a530d8dfcf33f50b</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\1.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\2260.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\2486.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\407.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\4489.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\a.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\b.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\c.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\d.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\e.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\f.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\g.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\h.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\i.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\j.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\k.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\l.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\m.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\n.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\o.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\p.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\q.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\r.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\s.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\t.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\u.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\v.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\w.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\wlu.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\x.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\y.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias\AppData\LocalLow\PriceGong\Data\z.txt</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>38460db90a7176c0d312853432d0718f</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.3_0\manifest.json</path><vendor>PUP.Optional.SlickSavings.A</vendor><action>success</action><hash>5b23695d0f6c73c387857b40ea18758b</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.3_0\ss-128.png</path><vendor>PUP.Optional.SlickSavings.A</vendor><action>success</action><hash>5b23695d0f6c73c387857b40ea18758b</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.3_0\ss-48.png</path><vendor>PUP.Optional.SlickSavings.A</vendor><action>success</action><hash>5b23695d0f6c73c387857b40ea18758b</hash></file>
<file><path>C:\Program Files (x86)\Plus-HD-9.1\52916.crx</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>611d289e3942fb3b2709a716a65c50b0</hash></file>
<file><path>C:\Program Files (x86)\Plus-HD-9.1\52916.xpi</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>611d289e3942fb3b2709a716a65c50b0</hash></file>
<file><path>C:\Program Files (x86)\Plus-HD-9.1\Uninstall.exe</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>611d289e3942fb3b2709a716a65c50b0</hash></file>
<file><path>C:\Program Files (x86)\Plus-HD-9.1\utils.exe</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>611d289e3942fb3b2709a716a65c50b0</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\PriceMeterUpdater\UpdateProc\config.dat</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>9ae40abcb2c93afcab9064590002be42</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\PriceMeterUpdater\UpdateProc\info.dat</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>9ae40abcb2c93afcab9064590002be42</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\PriceMeterUpdater\UpdateProc\STTL.DAT</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>9ae40abcb2c93afcab9064590002be42</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\PriceMeterUpdater\UpdateProc\TTL.DAT</path><vendor>PUP.Optional.PriceMeter.A</vendor><action>success</action><hash>9ae40abcb2c93afcab9064590002be42</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\171.crx</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\171.dat</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\171.dll</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\171.xpi</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\a.db</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\b.db</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfA98.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfdc171.bin</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfdc171.dll</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfdc171.ini</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfg.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>delete-on-reboot</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurf-soft\Sqlite3.dll</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>a0de695dcbb0221433a74a73659dee12</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\174.crx</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\174.dat</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\174.dll</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\174.xpi</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\a.db</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\b.db</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\BlockAndSurfA.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\BlockAndSurfB72.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\BlockAndSurfbx174.bin</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\BlockAndSurfbx174.dll</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\BlockAndSurfbx174.exe</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\BlockAndSurfS\Sqlite3.dll</path><vendor>PUP.Optional.BlockAndSurf.A</vendor><action>success</action><hash>1e601caa6c0f64d223b718a541c1dc24</hash></file>
<file><path>C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth178.dll.old</path><vendor>PUP.Optional.Spigot.A</vendor><action>delete-on-reboot</action><hash>790584421a61181e52c3328f8979e51b</hash></file>
<file><path>C:\Program Files (x86)\Common Files\Spigot\Search Settings\wthx178.dll.old</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>790584421a61181e52c3328f8979e51b</hash></file>
<file><path>C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>6915bd09fe7d55e1d2ddd0f9679b9868</hash></file>
<file><path>C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>6915bd09fe7d55e1d2ddd0f9679b9868</hash></file>
<file><path>C:\ProgramData\IePluginServices\update\conf</path><vendor>PUP.Optional.IePluginServices.A</vendor><action>success</action><hash>235b14b282f97eb85ad401cb946e8080</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\SearchProtect\SearchProtect\CRASH_DUMP_P25264_T25268_D2014_06_08_T03_55_14.dmp</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\SearchProtect\SearchProtect\CRASH_REPORT_P25264_T25268_D2014_06_08_T03_55_14.txt</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\SearchProtect\UI\rep\UIRepository.dat</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f28ce2e45e1d62d441ee76560df5768a</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\SearchProtect\UI\rep\UIRepository.dat</path><vendor>PUP.Optional.SearchProtect.A</vendor><action>success</action><hash>f18d992da3d880b6c06f20acdc26ab55</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Systweak\ssd\SSDPTstub.exe</path><vendor>PUP.Optional.SystemSpeedup</vendor><action>success</action><hash>9ee0388e512a73c3083d9b341fe3639d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\freeSOFTtoday\freeSOFTtoday\1.0\freeSOFTtoday.cyl</path><vendor>PUP.Optional.FreeSoftToday.A</vendor><action>success</action><hash>601e25a1c7b4a690803ad9f66e940bf5</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>c4ba12b4bdbe1c1a295523adf70bfb05</hash></file>
<file><path>C:\ProgramData\IBUpdaterService\repository.xml</path><vendor>PUP.Optional.IBUpdater.A</vendor><action>success</action><hash>add10fb7f982f4422b49c90a40c2c63a</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome.manifest</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\icon.png</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\install.rdf</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\background.html</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\button.xml</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\config.js</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\content.js</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\framework.js</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\framework.png</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\framework.xul</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\i128.ico</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\i128.png</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\i16.ico</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\i16.png</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\i32.ico</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\i32.png</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\i48.ico</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\i48.png</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\jquery-1.9.1.min.js</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\options.xul</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\settings.json</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\mz\background.js</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\content\mz\content.js</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\seesimilar@SeeSimilar.com\chrome\skin\framework.css</path><vendor>PUP.Optional.SeeSimilar</vendor><action>success</action><hash>a0de3b8b621984b2e8c2953ebd45b050</hash></file>
<file><path>C:\Program Files (x86)\SupTab\DpInterface32.dll</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\DpInterface64.dll</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\DpInterfacef32.dll</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\ient.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\install.data</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\RSHP.exe</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SearchProtect32.dll</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SpAPPSv32.dll</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SpAPPSv64.dll</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\uninstall.exe</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\WebDataJs</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\data.html</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\indexIE.html</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\indexIE8.html</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\main.css</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\ver.txt</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\arrow.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\default_add_logo.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\default_logo.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\googlelogo.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\googlelogo2.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\google_trends.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\icon128.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\icon16.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\icon48.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\loading.gif</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\logo32.ico</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\weather\0.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\common.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>


Math20 15.08.2014 20:48

Code:

<file><path>C:\Program Files (x86)\SupTab\web\js\ga.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\ie8.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\js.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\library.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\xagainit.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>621c893ddaa1e0563b8ccb097a8835cb</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\t4pc_en_8\upt4pc_en_8.cyl</path><vendor>PUP.Optional.Tuto4PC.A</vendor><action>success</action><hash>f58955719fdc4ceafc69a531639f9b65</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\t4pc_en_8\upt4pc_en_8.exe</path><vendor>PUP.Optional.Tuto4PC.A</vendor><action>delete-on-reboot</action><hash>f58955719fdc4ceafc69a531639f9b65</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\t4pc_en_8\user_profil.cyp</path><vendor>PUP.Optional.Tuto4PC.A</vendor><action>success</action><hash>f58955719fdc4ceafc69a531639f9b65</hash></file>
<file><path>C:\Program Files (x86)\appbarioDE_1\prxtbappb.dll</path><vendor>PUP.Optional.AppBario.A</vendor><action>success</action><hash>e19d2c9a9fdc3006288b10c5fb09738d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><baddata>  &quot;homepage&quot;: &quot;hxxp://www.sweet-page.com/?type=hppp&amp;ts=1403428326&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&quot;,</baddata><gooddata></gooddata><hash>ed91eadccbb0a690e3b4f20fd431f30d</hash></file>
<file><path>C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><baddata>      &quot;startup_urls&quot;: [ &quot;hxxp://www.sweet-page.com/?type=hppp&amp;ts=1403428326&amp;from=cor&amp;uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&quot; ],</baddata><gooddata></gooddata><hash>5f1f8a3caecdd165a9f115ecf60f06fa</hash></file>
<file><path>C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.Snapdo.A</vendor><action>replaced</action><baddata>{&quot;sync&quot;:{&quot;suppress_start&quot;:true}, &quot;default_apps_install_state&quot;:3, &quot;plugins&quot;:{&quot;plugins_list&quot;:[{&quot;name&quot;:&quot;Shockwave Flash&quot;, &quot;version&quot;:&quot;11.6.602.180&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.43\\PepperFlash\\pepflashplayer.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Chrome Remote Desktop Viewer&quot;, &quot;version&quot;:&quot;&quot;, &quot;path&quot;:&quot;internal-remoting-viewer&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Native Client&quot;, &quot;version&quot;:&quot;&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.43\\ppGoogleNaClPluginChrome.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Chrome PDF Viewer&quot;, &quot;version&quot;:&quot;&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.43\\pdf.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Adobe Acrobat&quot;, &quot;version&quot;:&quot;10.0.0.396&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Java Deployment Toolkit 6.0.220.4&quot;, &quot;version&quot;:&quot;6.0.220.4&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Java(TM) Platform SE 6 U22&quot;, &quot;version&quot;:&quot;6.0.220.4&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Microsoft Office 2010&quot;, &quot;version&quot;:&quot;14.0.4761.1000&quot;, &quot;path&quot;:&quot;C:\\PROGRA~2\\MICROS~1\\Office14\\NPSPWRAP.DLL&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Google Update&quot;, &quot;version&quot;:&quot;1.3.21.135&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Update\\1.3.21.135\\npGoogleUpdate3.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;McAfee Security Scanner +&quot;, &quot;version&quot;:&quot;3,0,318,0&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\McAfee Security Scan\\3.0.318\\npMcAfeeMss.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Silverlight Plug-In&quot;, &quot;version&quot;:&quot;5.1.20125.0&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Microsoft Silverlight\\5.1.20125.0\\npctrl.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Zeon Plus&quot;, &quot;version&quot;:&quot;2. 0. 0. 0&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Nuance\\PDF Reader\\bin\\nppdf.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Pando Web Plugin&quot;, &quot;version&quot;:&quot;2.3.3.8&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Pando Networks\\Media Booster\\npPandoWebPlugin.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Windows Live\u00c2\u2122 Photo Gallery&quot;, &quot;version&quot;:&quot;15.4.3508.1109_ship.wlx.w4m4 (ship)&quot;, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Shockwave for Director&quot;, &quot;version&quot;:&quot;11.0r465&quot;, &quot;path&quot;:&quot;C:\\Windows\\SysWOW64\\Adobe\\Director\\np32dsw.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Shockwave Flash&quot;, &quot;version&quot;:&quot;11,6,602,180&quot;, &quot;path&quot;:&quot;C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_11_6_602_180.dll&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Adobe Flash Player&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Adobe Reader&quot;, &quot;enabled&quot;:false}, {&quot;name&quot;:&quot;Adobe Shockwave Player&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Chrome PDF Viewer&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Chrome Remote Desktop Viewer&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Google Update&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Java(TM)&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;McAfee Security Scanner +&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Microsoft Office&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Native Client&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Pando Web Plugin&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Silverlight&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Windows Live\u00c2\u2122 Photo Gallery&quot;, &quot;enabled&quot;:true}, {&quot;name&quot;:&quot;Zeon Plus&quot;, &quot;enabled&quot;:true}], &quot;removed_old_component_pepper_flash_settings&quot;:true, &quot;enabled_nacl&quot;:true, &quot;migrated_to_pepper_flash&quot;:true, &quot;enabled_internal_pdf3&quot;:true, &quot;last_internal_directory&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.43&quot;}, &quot;cloud_print&quot;:{&quot;email&quot;:&quot;&quot;}, &quot;homepage_is_newtabpage&quot;:false, &quot;session&quot;:{&quot;urls_to_restore_on_startup&quot;:[&quot;hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSMMFj9a0kTjUE-mXqusFW0bttzWS4clLPJnhjSqKiYOg7CprZcMGjveMMJmRawBo,&quot;], &quot;restore_on_startup&quot;:4}, &quot;profile&quot;:{&quot;avatar_index&quot;:0, &quot;exit_type&quot;:&quot;Normal&quot;, &quot;content_settings&quot;:{&quot;clear_on_exit_migrated&quot;:true, &quot;pref_version&quot;:1}, &quot;exited_cleanly&quot;:true, &quot;reset_prompt_memento&quot;:&quot;878eca1b75e448c4128a01e7ff2e4d15&quot;, &quot;name&quot;:&quot;Erster Nutzer&quot;, &quot;is_managed&quot;:false}, &quot;countryid_at_install&quot;:17477, &quot;download&quot;:{&quot;directory_upgrade&quot;:true, &quot;extensions_to_open&quot;:&quot;&quot;}, &quot;extensions&quot;:{&quot;autoupdate&quot;:{&quot;last_check&quot;:&quot;13009150063267979&quot;, &quot;next_check&quot;:&quot;13009325474578934&quot;}, &quot;settings&quot;:{&quot;bndahdijlcnncjbpammoedeapmlobllc&quot;:{&quot;blacklist&quot;:true}, &quot;pihcfdffalbcnmbghijdfcaanagapelf&quot;:{&quot;blacklist&quot;:true}, &quot;lndempehphjoeimfchjflohpmhamiamf&quot;:{&quot;blacklist&quot;:true}, &quot;diinokaoicgobepmadnmedlhdfnpehcj&quot;:{&quot;blacklist&quot;:true}, &quot;mfncimdpmknolnnnccdmkpnpkaofonkc&quot;:{&quot;blacklist&quot;:true}, &quot;boaoagnmpennjoigkkmnjhecapibhfko&quot;:{&quot;blacklist&quot;:true}, &quot;ggkpicnfnljflddbdoeeaajjgepapcbf&quot;:{&quot;blacklist&quot;:true}, &quot;ojglppmhgfohhfeinlhklglifnbfebak&quot;:{&quot;blacklist&quot;:true}, &quot;fpbkafpphnhlpakobppekmkebmbhkoco&quot;:{&quot;blacklist&quot;:true}, &quot;ghgphbmpcfgkfneodjpbdanmdoemklio&quot;:{&quot;blacklist&quot;:true}, &quot;dmabikjmolgegjajdhmgpmgffajlmmkb&quot;:{&quot;blacklist&quot;:true}, &quot;ehgoiaffgjoinpkllmmnikghgpghnabc&quot;:{&quot;blacklist&quot;:true}, &quot;efbeabpbbkahnnjalakldjfhljboclkf&quot;:{&quot;blacklist&quot;:true}, &quot;cmjphjljejnfgdbkdgdlclaabimpknna&quot;:{&quot;blacklist&quot;:true}, &quot;icihfeaofpcfehanhbnjigdlpfahjlee&quot;:{&quot;blacklist&quot;:true}, &quot;loldehkdjdncebfnncknlkdchjclifbn&quot;:{&quot;blacklist&quot;:true}, &quot;nibohffepnilngkecenfdgnokfhmnkod&quot;:{&quot;blacklist&quot;:true}, &quot;jafnimahlamccccjbkhjjpeiipiedpik&quot;:{&quot;blacklist&quot;:true}, &quot;goedioiidkokkbobdnopnlnaaalniegm&quot;:{&quot;blacklist&quot;:true}, &quot;ookcgejbfhcmcanfkfmmmpahflnlajbl&quot;:{&quot;blacklist&quot;:true}, &quot;cbhhdkemlehgodemcigfabmcdnohhhef&quot;:{&quot;blacklist&quot;:true}, &quot;flalbhkmnijcnpialgakicllnabckmhi&quot;:{&quot;blacklist&quot;:true}, &quot;iljfgjkppapinhcgonhjnipfppfmfedh&quot;:{&quot;blacklist&quot;:true}, &quot;bmjhmeeepkkbmjdajachipfgihmpokpd&quot;:{&quot;blacklist&quot;:true}, &quot;gnapdhmknipknfmhhnhdmhakdfhgeing&quot;:{&quot;blacklist&quot;:true}, &quot;jkihmglffmfjedfbpbpdbbimcodjbmdh&quot;:{&quot;blacklist&quot;:true}, &quot;ennkphjdgehloodpbhlhldgbnhmacadg&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;api&quot;:[&quot;app.currentWindowInternal&quot;, &quot;app.runtime&quot;, &quot;app.window&quot;], &quot;explicit_host&quot;:[&quot;chrome://settings-frame/*&quot;]}, &quot;location&quot;:5, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.172\\resources\\settings_app&quot;, &quot;events&quot;:[&quot;app.runtime.onLaunched&quot;], &quot;running&quot;:false, &quot;install_time&quot;:&quot;13008500344820762&quot;, &quot;creation_flags&quot;:1, &quot;page_ordinal&quot;:&quot;n&quot;, &quot;manifest&quot;:{&quot;name&quot;:&quot;Settings&quot;, &quot;display_in_new_tab_page&quot;:false, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB&quot;, &quot;app&quot;:{&quot;background&quot;:{&quot;scripts&quot;:[&quot;settings_app.js&quot;]}}, &quot;icons&quot;:{&quot;128&quot;:&quot;settings_app_icon_128.png&quot;, &quot;48&quot;:&quot;settings_app_icon_48.png&quot;, &quot;32&quot;:&quot;settings_app_icon_32.png&quot;, &quot;16&quot;:&quot;settings_app_icon_16.png&quot;}, &quot;display_in_launcher&quot;:true, &quot;version&quot;:&quot;0.1&quot;, &quot;permissions&quot;:[&quot;chrome://settings-frame/&quot;], &quot;description&quot;:&quot;Settings&quot;, &quot;manifest_version&quot;:2}, &quot;was_installed_by_default&quot;:false, &quot;from_webstore&quot;:false, &quot;app_launcher_ordinal&quot;:&quot;t&quot;}, &quot;nckmikohoilfkcoahbjpbgbpegcjgngm&quot;:{&quot;blacklist&quot;:true}, &quot;dkhkecikbdfpoiopnnpoeglbdphgflmf&quot;:{&quot;blacklist&quot;:true}, &quot;jbnafcjbcfgejacaanogofkkehcomamp&quot;:{&quot;blacklist&quot;:true}, &quot;amoobcjlpgloocplpikcldcpjjdnoeii&quot;:{&quot;blacklist&quot;:true}, &quot;jkmhalpofmlfeglboejbchpoijnkmcgh&quot;:{&quot;blacklist&quot;:true}, &quot;hcpndbchnlgojmnijaldkicigmihmdca&quot;:{&quot;blacklist&quot;:true}, &quot;bccdgfmbcjkfkinkkagaflgdaoaamogo&quot;:{&quot;blacklist&quot;:true}, &quot;kdpcgcpfnkolljkhgdbbgimplfkhakec&quot;:{&quot;blacklist&quot;:true}, &quot;kljhmdlkclaglodecegamnpioaflmage&quot;:{&quot;blacklist&quot;:true}, &quot;nloaaepkhcnmoakooihnefhhggbmemed&quot;:{&quot;blacklist&quot;:true}, &quot;kfodnkhdfdgeaegehjjnkjkieloddelg&quot;:{&quot;blacklist&quot;:true}, &quot;gchbiabnbdikkgfhnkclecjncojnkmhb&quot;:{&quot;blacklist&quot;:true}, &quot;jpeijjbllejgmokmahkeommcodahoobm&quot;:{&quot;blacklist&quot;:true}, &quot;bldgnkigdcpgnbfehgbameigoohecdfl&quot;:{&quot;blacklist&quot;:true}, &quot;lcmpleboacinanffcdgenhhbkboclkjb&quot;:{&quot;blacklist&quot;:true}, &quot;kkhomejdleoonmbdhcigkhkjcghngncf&quot;:{&quot;blacklist&quot;:true}, &quot;jpgidahfcgiajlcbleeiaibpmmblcmnb&quot;:{&quot;blacklist&quot;:true}, &quot;fbjjhbijaiopkcdolheliknnjlkaekeb&quot;:{&quot;blacklist&quot;:true}, &quot;pkhidkonipdjidjglnkfcfhnkfnlefbk&quot;:{&quot;blacklist&quot;:true}, &quot;pgelifedkjaohmjehecojkfldinjlamn&quot;:{&quot;blacklist&quot;:true}, &quot;hjnigaibahdeadcdnpnommdehajodlhc&quot;:{&quot;blacklist&quot;:true}, &quot;lookpbabilcplifjdeifacodednpacmk&quot;:{&quot;blacklist&quot;:true}, &quot;gkjmgdpdndoaiholejnmdbbpdaafahmm&quot;:{&quot;blacklist&quot;:true}, &quot;kbmkecfipofebpaikgifajmahdmadlnb&quot;:{&quot;blacklist&quot;:true}, &quot;mafccdbbhekjhemajjejkaidndokeena&quot;:{&quot;blacklist&quot;:true}, &quot;ogjbodghhojomghbdfnlkppdagkfjede&quot;:{&quot;blacklist&quot;:true}, &quot;hecijapnccjhonbmacmkmffooodfokoo&quot;:{&quot;blacklist&quot;:true}, &quot;lnjgjionmhobdfdegbciceafphgemjnc&quot;:{&quot;blacklist&quot;:true}, &quot;kcfnnanmpghdnoompcfclakpacapnfbn&quot;:{&quot;blacklist&quot;:true}, &quot;eijbdinddjecmebnlienfoijpjjobkjh&quot;:{&quot;blacklist&quot;:true}, &quot;jjnkfllhcgkgnfbekpnmoikpfihpjfli&quot;:{&quot;blacklist&quot;:true}, &quot;pgmfkblbflahhponhjmkcnpjinenhlnc&quot;:{&quot;blacklist&quot;:true}, &quot;mlmegahemifabfmdnndafagnncfbnahn&quot;:{&quot;blacklist&quot;:true}, &quot;ebhdpnhjbfkchfamjcpebpeddhhicnab&quot;:{&quot;blacklist&quot;:true}, &quot;nmmnodocfckpoddcgihiihcdinaonckb&quot;:{&quot;blacklist&quot;:true}, &quot;lceaiepehinnomgijphkmjccbigkljkj&quot;:{&quot;blacklist&quot;:true}, &quot;jhhabiomopkibeecgngiggmopkeofacl&quot;:{&quot;blacklist&quot;:true}, &quot;hmmoglffhpmacaacfbbmbbkcbdkjphnc&quot;:{&quot;blacklist&quot;:true}, &quot;gandihaiobadcggbfkhpbkocmiemjlnf&quot;:{&quot;blacklist&quot;:true}, &quot;ahfgeienlihckogmohjhadlkjgocpleb&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;api&quot;:[&quot;appNotifications&quot;, &quot;management&quot;, &quot;webstorePrivate&quot;]}, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.172\\resources\\web_store&quot;, &quot;location&quot;:5, &quot;was_installed_by_default&quot;:false, &quot;install_time&quot;:&quot;13008500344820762&quot;, &quot;creation_flags&quot;:1, &quot;page_ordinal&quot;:&quot;n&quot;, &quot;manifest&quot;:{&quot;name&quot;:&quot;Chrome Web Store&quot;, &quot;app&quot;:{&quot;urls&quot;:[&quot;https://chrome.google.com/webstore&quot;], &quot;launch&quot;:{&quot;web_url&quot;:&quot;https://chrome.google.com/webstore&quot;}}, &quot;version&quot;:&quot;0.1&quot;, &quot;description&quot;:&quot;Web Store&quot;, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB&quot;, &quot;permissions&quot;:[&quot;appNotifications&quot;, &quot;webstorePrivate&quot;, &quot;management&quot;], &quot;icons&quot;:{&quot;128&quot;:&quot;webstore_icon_128.png&quot;, &quot;16&quot;:&quot;webstore_icon_16.png&quot;}}, &quot;from_webstore&quot;:false, &quot;app_launcher_ordinal&quot;:&quot;n&quot;}, &quot;acchaoeabgiclhngknbkegekbfphgndl&quot;:{&quot;blacklist&quot;:true}, &quot;clapnamcglekekmamicmbahkghdcjaeh&quot;:{&quot;blacklist&quot;:true}, &quot;gkjeccpmibljcfpfapfljciimedljpnm&quot;:{&quot;blacklist&quot;:true}, &quot;bnffnggkphadlnoopcoakdnkellnifjp&quot;:{&quot;blacklist&quot;:true}, &quot;acomnmbomlajgjbcijkflekoojdfcldj&quot;:{&quot;blacklist&quot;:true}, &quot;boclfockfmgcppbajihcgajhpggaakgl&quot;:{&quot;blacklist&quot;:true}, &quot;pgldfhecfiofkhnbgcncepnkjkeoahlk&quot;:{&quot;blacklist&quot;:true}, &quot;pjloefkigphblpjminnlpbhjchjafcfc&quot;:{&quot;blacklist&quot;:true}, &quot;hnkcpoijaeegompjgbjjhkdmljldaccg&quot;:{&quot;blacklist&quot;:true}, &quot;amfgdngndpfldigimkcindjalokfnmem&quot;:{&quot;blacklist&quot;:true}, &quot;jljfnkmkkdkppfndippkedacgfkafped&quot;:{&quot;blacklist&quot;:true}, &quot;aohghmighlieiainnegkcijnfilokake&quot;:{&quot;from_bookmark&quot;:false, &quot;location&quot;:1, &quot;ack_external&quot;:true, &quot;path&quot;:&quot;aohghmighlieiainnegkcijnfilokake\\0.5_0&quot;, &quot;exclude_from_sideload_wipeout&quot;:true, &quot;was_installed_by_default&quot;:true, &quot;install_time&quot;:&quot;13008520430696316&quot;, &quot;creation_flags&quot;:137, &quot;page_ordinal&quot;:&quot;n&quot;, &quot;lastpingday&quot;:&quot;13009100403989888&quot;, &quot;state&quot;:1, &quot;from_webstore&quot;:true, &quot;manifest&quot;:{&quot;container&quot;:&quot;GOOGLE_DRIVE&quot;, &quot;name&quot;:&quot;Google Docs&quot;, &quot;app&quot;:{&quot;launch&quot;:{&quot;local_path&quot;:&quot;main.html&quot;}}, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB&quot;, &quot;update_url&quot;:&quot;hxxp://clients2.google.com/service/update2/crx&quot;, &quot;version&quot;:&quot;0.5&quot;, &quot;default_locale&quot;:&quot;en_US&quot;, &quot;current_locale&quot;:&quot;de&quot;, &quot;api_console_project_id&quot;:&quot;619683526622&quot;, &quot;icons&quot;:{&quot;128&quot;:&quot;icon_128.png&quot;, &quot;16&quot;:&quot;icon_16.png&quot;}, &quot;offline_enabled&quot;:true, &quot;description&quot;:&quot;Dokumente erstellen und bearbeiten&quot;, &quot;manifest_version&quot;:2}, &quot;app_launcher_ordinal&quot;:&quot;w&quot;}, &quot;kelljdoinjlkmkncffgadbebgpmlcang&quot;:{&quot;blacklist&quot;:true}, &quot;bhdkpmneahdelgdgfhddianklldfoell&quot;:{&quot;blacklist&quot;:true}, &quot;gngfmjidncdccdlfjcjbnngeaaclfgpl&quot;:{&quot;blacklist&quot;:true}, &quot;gngmkbiihflpghldjnbpemaicedhdddk&quot;:{&quot;blacklist&quot;:true}, &quot;hhlgbfcfbkhlmajakkcjippgpcmejkko&quot;:{&quot;blacklist&quot;:true}, &quot;lambangeielkjcnmioccboaphdfcffib&quot;:{&quot;blacklist&quot;:true}, &quot;jiofcofpcbijcnlpekdkpmgjdppajbjb&quot;:{&quot;blacklist&quot;:true}, &quot;fbhiehmngojjcmljddjmgpmcockbccmo&quot;:{&quot;blacklist&quot;:true}, &quot;kpbfifeiomkhocgkkffocfinoedcjebg&quot;:{&quot;blacklist&quot;:true}, &quot;mknjbohhleiicbpagpgmhoaigbblmnic&quot;:{&quot;blacklist&quot;:true}, &quot;mickhiflmjglhpdpfigpkpjiipfdlphj&quot;:{&quot;blacklist&quot;:true}, &quot;akadaakimgegecohlifeejdnnjbnobop&quot;:{&quot;blacklist&quot;:true}, &quot;fjhfnfakmfcejgmfkmnapemgblmehppf&quot;:{&quot;blacklist&quot;:true}, &quot;pfckhplmfbblecglndaigpojefidapai&quot;:{&quot;blacklist&quot;:true}, &quot;hgbaomphocgmdpmiohjclchaaljpaelp&quot;:{&quot;blacklist&quot;:true}, &quot;oidjdpbndkjhmhmgdoggibcjnippkcgo&quot;:{&quot;blacklist&quot;:true}, &quot;aldalonecchncedclgcndcndgilaclnk&quot;:{&quot;blacklist&quot;:true}, &quot;ijenlpgidnapbndonoinbkhekgjonojg&quot;:{&quot;blacklist&quot;:true}, &quot;kdicckonacionpoompfoopggkgimjpcb&quot;:{&quot;blacklist&quot;:true}, &quot;opnnngnphijodjhemhdafpnnpdjggofe&quot;:{&quot;blacklist&quot;:true}, &quot;kelcbonmemlciepjdmfcifnhloeammhj&quot;:{&quot;blacklist&quot;:true}, &quot;khgjomcpjblpoaipanicbfjfgcfbpegp&quot;:{&quot;blacklist&quot;:true}, &quot;iiiinekimabooeihccihfopoadcaaphn&quot;:{&quot;blacklist&quot;:true}, &quot;mkfokfffehpeedafpekjeddnmnjhmcmk&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;scriptable_host&quot;:[&quot;&lt;all_urls&gt;&quot;], &quot;api&quot;:[&quot;history&quot;, &quot;plugin&quot;, &quot;tabs&quot;]}, &quot;location&quot;:3, &quot;disable_reasons&quot;:16, &quot;was_installed_by_default&quot;:false, &quot;install_time&quot;:&quot;13008500348887766&quot;, &quot;creation_flags&quot;:1, &quot;lastpingday&quot;:&quot;13009100403989888&quot;, &quot;state&quot;:0, &quot;from_webstore&quot;:false, &quot;manifest&quot;:{&quot;plugins&quot;:[{&quot;public&quot;:true, &quot;path&quot;:&quot;npcoplgn.dll&quot;}], &quot;name&quot;:&quot;Norton Identity Protection&quot;, &quot;description&quot;:&quot;Symantec Corporation&quot;, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCN17j8JLKorF+VBEKJgK4pj8g17X7JvJhwca8GU6eC+m33Mp7Wts5uLKDpImOPe0r/0VHiO54Bmwz0E9G67599bllrlhbIjHGKLeicrh4hmOaG1zArNN/DLDDUkcxU50odaPSgDoFUsp6TreA9lwoE5ypYw+lGnbo+BJwNe0hnQQIDAQAB&quot;, &quot;minimum_chrome_version&quot;:&quot;23.0&quot;, &quot;default_locale&quot;:&quot;en&quot;, &quot;current_locale&quot;:&quot;de&quot;, &quot;icons&quot;:{&quot;48&quot;:&quot;images/48_Norton_Ext_Icon.png&quot;}, &quot;version&quot;:&quot;2013.3.2.10&quot;, &quot;content_scripts&quot;:[{&quot;matches&quot;:[&quot;&lt;all_urls&gt;&quot;], &quot;all_frames&quot;:true, &quot;run_at&quot;:&quot;document_start&quot;, &quot;js&quot;:[&quot;docstart.js&quot;, &quot;wcid.js&quot;, &quot;wax.js&quot;]}, {&quot;matches&quot;:[&quot;&lt;all_urls&gt;&quot;], &quot;all_frames&quot;:true, &quot;run_at&quot;:&quot;document_end&quot;, &quot;js&quot;:[&quot;docend.js&quot;]}], &quot;permissions&quot;:[&quot;tabs&quot;, &quot;history&quot;], &quot;browser_action&quot;:{&quot;default_title&quot;:&quot;Norton Toolbar&quot;, &quot;default_popup&quot;:&quot;&quot;, &quot;default_icon&quot;:&quot;images/StatusButton/coBA_unknown.png&quot;}, &quot;background_page&quot;:&quot;background.html&quot;}, &quot;path&quot;:&quot;mkfokfffehpeedafpekjeddnmnjhmcmk\\2013.3.2.10_0&quot;}, &quot;nhbfbnmmdjkjahhfdeklgphihfodfgnb&quot;:{&quot;blacklist&quot;:true}, &quot;fhlkffpjoajppmhcakbkjndbjfljccpi&quot;:{&quot;blacklist&quot;:true}, &quot;hgboiaecclcbjphldpbgfgggcbihmnai&quot;:{&quot;blacklist&quot;:true}, &quot;kbipembkfhbdmkkkfbigmohilmknjnof&quot;:{&quot;blacklist&quot;:true}, &quot;hfpfbhnmbbigpmoodjemilggabklpopj&quot;:{&quot;blacklist&quot;:true}, &quot;bioeopenmokdgbekbgpgnacecjmpckbb&quot;:{&quot;blacklist&quot;:true}, &quot;jdiakcmbpmcnniggjcmcjknnklpdlogc&quot;:{&quot;blacklist&quot;:true}, &quot;hnonhhpgjnjcjfbkjdpfbkfpaodcmncb&quot;:{&quot;blacklist&quot;:true}, &quot;igkdgkdiiolilocklmiolkpoohacojop&quot;:{&quot;blacklist&quot;:true}, &quot;digmihafmlfkgdbjjdgbcojghcgcoeoa&quot;:{&quot;blacklist&quot;:true}, &quot;doneghboglgnflpdicnkaojmmljgejkj&quot;:{&quot;blacklist&quot;:true}, &quot;dgkemngdheppgohkjjelnkjmdeimmfml&quot;:{&quot;blacklist&quot;:true}, &quot;mjhlngjakabhonjagnlimeicooahajpl&quot;:{&quot;blacklist&quot;:true}, &quot;bokkificjhapflinbdejegngffgkcgfe&quot;:{&quot;blacklist&quot;:true}, &quot;gfmmoiakbmdohkgeoekiokjgljcminig&quot;:{&quot;blacklist&quot;:true}, &quot;cniodhfhdiidogekcjkplecimemfocpn&quot;:{&quot;blacklist&quot;:true}, &quot;kdfahjokahcbmecgaandpobmgiiknagf&quot;:{&quot;blacklist&quot;:true}, &quot;echngajnlpjeacbanjejlhcajjfoedcc&quot;:{&quot;blacklist&quot;:true}, &quot;nochkknnbahbhmmknnmdhagelcnfagom&quot;:{&quot;blacklist&quot;:true}, &quot;blpcfgokakmgnkcojhhkbfbldkacnbeo&quot;:{&quot;from_bookmark&quot;:true, &quot;active_permissions&quot;:{&quot;api&quot;:[&quot;appNotifications&quot;]}, &quot;location&quot;:1, &quot;ack_external&quot;:true, &quot;path&quot;:&quot;blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0&quot;, &quot;exclude_from_sideload_wipeout&quot;:true, &quot;was_installed_by_default&quot;:true, &quot;install_time&quot;:&quot;13008500349757766&quot;, &quot;creation_flags&quot;:153, &quot;page_ordinal&quot;:&quot;n&quot;, &quot;lastpingday&quot;:&quot;13009100403989888&quot;, &quot;state&quot;:1, &quot;from_webstore&quot;:true, &quot;manifest&quot;:{&quot;name&quot;:&quot;YouTube&quot;, &quot;app&quot;:{&quot;launch&quot;:{&quot;web_url&quot;:&quot;hxxp://www.youtube.com/&quot;, &quot;container&quot;:&quot;tab&quot;}, &quot;web_content&quot;:{&quot;origin&quot;:&quot;hxxp://www.youtube.com&quot;, &quot;enabled&quot;:true}}, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB&quot;, &quot;default_locale&quot;:&quot;en&quot;, &quot;update_url&quot;:&quot;hxxp://clients2.google.com/service/update2/crx&quot;, &quot;current_locale&quot;:&quot;de&quot;, &quot;icons&quot;:{&quot;128&quot;:&quot;128.png&quot;}, &quot;version&quot;:&quot;4.2.5&quot;, &quot;permissions&quot;:[&quot;appNotifications&quot;], &quot;description&quot;:&quot;Die beliebteste Online-Video-Community der Welt&quot;}, &quot;app_launcher_ordinal&quot;:&quot;z&quot;, &quot;granted_permissions&quot;:{&quot;api&quot;:[&quot;appNotifications&quot;]}}, &quot;aofechiiopolnegcjcddgedjabmkemhf&quot;:{&quot;blacklist&quot;:true}, &quot;ndiogongcmocdgjciemhagfhpjamehpe&quot;:{&quot;blacklist&quot;:true}, &quot;gekkhpjigmckhgmgngadbeknekgpgolb&quot;:{&quot;blacklist&quot;:true}, &quot;ifbkndkaolfbjjhnnhfmkbkoclpdkpli&quot;:{&quot;blacklist&quot;:true}, &quot;eihjeehdobnpkonebmpanonopghepfle&quot;:{&quot;blacklist&quot;:true}, &quot;jabpdgllijbnknhkgjideeajfofafckp&quot;:{&quot;blacklist&quot;:true}, &quot;nbfcehkihbmpebblmfkihadebllgfmgl&quot;:{&quot;blacklist&quot;:true}, &quot;odeckaficnaplobiiaomegfbokokehhb&quot;:{&quot;blacklist&quot;:true}, &quot;onfbaaifbbahonepmednhkjbhdgogkbl&quot;:{&quot;blacklist&quot;:true}, &quot;maakimnachffhlgdhfomaejeeaikgjap&quot;:{&quot;blacklist&quot;:true}, &quot;ejijgghlncnaphklndknkbkclebfboca&quot;:{&quot;blacklist&quot;:true}, &quot;cjohbbapkbkkhpohinffggbphnhoblea&quot;:{&quot;blacklist&quot;:true}, &quot;lnahlgmhpghkhmafjppdidhcoaomipfg&quot;:{&quot;blacklist&quot;:true}, &quot;pkdlpbfmpolnhligegklimbccminkioc&quot;:{&quot;blacklist&quot;:true}, &quot;fclheclkknbgfndeahkfdomollhmfkcn&quot;:{&quot;blacklist&quot;:true}, &quot;dfoegfajplmijblljfancdapbdaopebb&quot;:{&quot;blacklist&quot;:true}, &quot;kojkdbedffnppdoalcfkkeelbhbklhgp&quot;:{&quot;blacklist&quot;:true}, &quot;nnioepmjbjjlflmdgjanlcmbjahljeeo&quot;:{&quot;blacklist&quot;:true}, &quot;oomelpjfeldbopnleifpjibbpekflhlg&quot;:{&quot;blacklist&quot;:true}, &quot;lodollblmkailkkdiijmoccefdfjohgk&quot;:{&quot;blacklist&quot;:true}, &quot;hhjmkijkgojfifipdgmiemghfikbohcm&quot;:{&quot;blacklist&quot;:true}, &quot;oghphhcagopecifjblgdcfihjnlcbcfc&quot;:{&quot;blacklist&quot;:true}, &quot;jmifipgdcllamghkhdplfjffkciekbgo&quot;:{&quot;blacklist&quot;:true}, &quot;fihepkmlkmciffbhijldnpmifhbkiinp&quot;:{&quot;blacklist&quot;:true}, &quot;mndoohjdoechinpkfbkolflbonciahfo&quot;:{&quot;blacklist&quot;:true}, &quot;elcaigjcaijbfpjngaekbblphmfjdhfo&quot;:{&quot;blacklist&quot;:true}, &quot;kgdkcodealpfjolmiagcogfbgmaamegh&quot;:{&quot;blacklist&quot;:true}, &quot;jindbcpkhnnnjgcjgmkjedbibibiojjf&quot;:{&quot;blacklist&quot;:true}, &quot;bkkchglolnigbfncnbnnbhhempjkdpkf&quot;:{&quot;blacklist&quot;:true}, &quot;gdlgbpbmiiagaikjbednkikinokbkbcb&quot;:{&quot;blacklist&quot;:true}, &quot;cbbbpmlnlpnjojeplppgeilanlihoojg&quot;:{&quot;blacklist&quot;:true}, &quot;aphncaagnlabkeipnbbicmcahnamibgb&quot;:{&quot;blacklist&quot;:true}, &quot;dinhjcapnfbffhiihdlnbdfjdjjfhcbk&quot;:{&quot;blacklist&quot;:true}, &quot;bilgncckogfgfipdlejkffnbkgjkmflh&quot;:{&quot;blacklist&quot;:true}, &quot;jfjagidcpadkoaonbogmbgfimmnefeie&quot;:{&quot;blacklist&quot;:true}, &quot;hhfiljkpjapjjphcocclhhaldpfkkjbi&quot;:{&quot;blacklist&quot;:true}, &quot;mmjodihhmnpkldljaifiajmlnpflfhpm&quot;:{&quot;blacklist&quot;:true}, &quot;lnlaeblencbjjjeaanegaldcjfekeled&quot;:{&quot;blacklist&quot;:true}, &quot;dadcalgappognjbjpalfophhcfakoeac&quot;:{&quot;blacklist&quot;:true}, &quot;eiflkkehgogioennialfbilppmegcpoa&quot;:{&quot;blacklist&quot;:true}, &quot;fnhcgnmfccojojojacgeiaaeacefdohb&quot;:{&quot;blacklist&quot;:true}, &quot;kcgplbmkmfcpngilmhjmebdgkkpbdemp&quot;:{&quot;blacklist&quot;:true}, &quot;fnoadkjdjfgafomgmablhmffooijcfbn&quot;:{&quot;blacklist&quot;:true}, &quot;gplgjmecjpbfcdikpbicknafcnfcidek&quot;:{&quot;blacklist&quot;:true}, &quot;gifglngcdbggmlgkcombebegdaoknkho&quot;:{&quot;blacklist&quot;:true}, &quot;kincjchfokkeneeofpeefomkikfkiedl&quot;:{&quot;blacklist&quot;:true}, &quot;oimplfccampifgkgndlamabnkcibkngc&quot;:{&quot;blacklist&quot;:true}, &quot;mlnndjkcclbekgoebkenkdgiggaomaed&quot;:{&quot;blacklist&quot;:true}, &quot;bhmahaiplmeodpakkcchmolaihbhkpdl&quot;:{&quot;blacklist&quot;:true}, &quot;cfogpbanfnocakdckmgafapdlmclpiln&quot;:{&quot;blacklist&quot;:true}, &quot;fnkaadkanmfgpfbmdcllhjdgmdbgljpi&quot;:{&quot;blacklist&quot;:true}, &quot;eemcgdkfndhakfknompkggombfjjjeno&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;api&quot;:[&quot;bookmarks&quot;, &quot;bookmarkManagerPrivate&quot;, &quot;metricsPrivate&quot;, &quot;systemPrivate&quot;, &quot;tabs&quot;], &quot;explicit_host&quot;:[&quot;chrome://favicon/*&quot;, &quot;chrome://resources/*&quot;]}, &quot;location&quot;:5, &quot;was_installed_by_default&quot;:false, &quot;install_time&quot;:&quot;13008500344804762&quot;, &quot;creation_flags&quot;:1, &quot;manifest&quot;:{&quot;description&quot;:&quot;Bookmark Manager&quot;, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB&quot;, &quot;content_security_policy&quot;:&quot;object-src &apos;none&apos;; script-src chrome://resources &apos;self&apos;&quot;, &quot;chrome_url_overrides&quot;:{&quot;bookmarks&quot;:&quot;main.html&quot;}, &quot;name&quot;:&quot;Bookmark Manager&quot;, &quot;version&quot;:&quot;0.1&quot;, &quot;permissions&quot;:[&quot;bookmarks&quot;, &quot;bookmarkManagerPrivate&quot;, &quot;systemPrivate&quot;, &quot;tabs&quot;, &quot;chrome://favicon/&quot;, &quot;chrome://resources/&quot;], &quot;incognito&quot;:&quot;split&quot;, &quot;manifest_version&quot;:2}, &quot;from_webstore&quot;:false, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.172\\resources\\bookmark_manager&quot;}, &quot;benclngoadbppljglhphhnfknoppmjoa&quot;:{&quot;blacklist&quot;:true}, &quot;pcaedgdgamlfffkfblocmakhgieggoak&quot;:{&quot;blacklist&quot;:true}, &quot;gbenikfjhilhpgagllmfgggdjaflbmbi&quot;:{&quot;blacklist&quot;:true}, &quot;ebdcdchjcndpjhehacedepnggfdbfkpn&quot;:{&quot;blacklist&quot;:true}, &quot;iggjepemmdkieakihpomccndhdfcljdp&quot;:{&quot;blacklist&quot;:true}, &quot;npadaghbcdejfngcjpbnoikajdnongca&quot;:{&quot;blacklist&quot;:true}, &quot;ljeihpebkahejeacdalhkhmckmggppif&quot;:{&quot;blacklist&quot;:true}, &quot;hdnbmmfjbblajkjkcaeofolgfnljpnim&quot;:{&quot;blacklist&quot;:true}, &quot;pkbkkendemaimikinaefldfljliecapm&quot;:{&quot;blacklist&quot;:true}, &quot;gklphmokmaaepjgandocpneomjlidjag&quot;:{&quot;blacklist&quot;:true}, &quot;hcapokajkngndbglnfglpfdpoeidmpha&quot;:{&quot;blacklist&quot;:true}, &quot;coobgpohoikkiipiblmjeljniedjpjpf&quot;:{&quot;from_bookmark&quot;:true, &quot;location&quot;:1, &quot;ack_external&quot;:true, &quot;path&quot;:&quot;coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.20_0&quot;, &quot;exclude_from_sideload_wipeout&quot;:true, &quot;was_installed_by_default&quot;:true, &quot;install_time&quot;:&quot;13009131782147888&quot;, &quot;creation_flags&quot;:153, &quot;page_ordinal&quot;:&quot;n&quot;, &quot;lastpingday&quot;:&quot;13009100403989888&quot;, &quot;state&quot;:1, &quot;from_webstore&quot;:true, &quot;manifest&quot;:{&quot;name&quot;:&quot;Google-Suche&quot;, &quot;app&quot;:{&quot;urls&quot;:[&quot;*://www.google.com/search&quot;, &quot;*://www.google.com/webhp&quot;, &quot;*://www.google.com/imgres&quot;], &quot;launch&quot;:{&quot;web_url&quot;:&quot;hxxp://www.google.com/webhp?source=search_app&quot;}}, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB&quot;, &quot;default_locale&quot;:&quot;en&quot;, &quot;update_url&quot;:&quot;hxxp://clients2.google.com/service/update2/crx&quot;, &quot;current_locale&quot;:&quot;de&quot;, &quot;icons&quot;:{&quot;128&quot;:&quot;128.png&quot;, &quot;48&quot;:&quot;48.png&quot;, &quot;32&quot;:&quot;32.png&quot;, &quot;16&quot;:&quot;16.png&quot;}, &quot;version&quot;:&quot;0.0.0.20&quot;, &quot;description&quot;:&quot;Die schnellste Suche im Web.&quot;, &quot;manifest_version&quot;:2}, &quot;app_launcher_ordinal&quot;:&quot;yn&quot;}, &quot;jcmipejepoimfflnoapdmkdephgjinck&quot;:{&quot;blacklist&quot;:true}, &quot;dhdepfaagokllfmhfbcfmocaeigmoebo&quot;:{&quot;blacklist&quot;:true}, &quot;odnamglmogfldajnhkfodmloofeokcmm&quot;:{&quot;blacklist&quot;:true}, &quot;emcdpbapjmnjgoannclkongdfboaabho&quot;:{&quot;blacklist&quot;:true}, &quot;lplmcpcnhpbffpcfiaddbeaplhhbengd&quot;:{&quot;blacklist&quot;:true}, &quot;hjkhligcnpfjhjlapmejaiaiigibofif&quot;:{&quot;blacklist&quot;:true}, &quot;echjhfifjidfhoappglfmoffcpmpkigb&quot;:{&quot;blacklist&quot;:true}, &quot;mfhfkclojmdocagbmecgcnlofppebebd&quot;:{&quot;blacklist&quot;:true}, &quot;nhooocacdhkpbmoocdclodjlddcebfoe&quot;:{&quot;blacklist&quot;:true}, &quot;lkdimamelhbiijkiljlnedmhnnkkmlbl&quot;:{&quot;blacklist&quot;:true}, &quot;iccblehkchfmjgfafjcpjlkjcponhdhl&quot;:{&quot;blacklist&quot;:true}, &quot;cfnfobbpdaccoljfahpmfjdmbfmmkeof&quot;:{&quot;blacklist&quot;:true}, &quot;kmlebjoghkhpapfhbdikannggmmffnco&quot;:{&quot;blacklist&quot;:true}, &quot;cbbjhegipokkofhhicbckicchjpcpeni&quot;:{&quot;blacklist&quot;:true}, &quot;hphibigbodkkohoglgfkddblldpfohjl&quot;:{&quot;blacklist&quot;:true}, &quot;mfooalpniplhaaealemjpchkchmmgdko&quot;:{&quot;blacklist&quot;:true}, &quot;keknhkokjnjhgpcofobpcbelddppeolp&quot;:{&quot;blacklist&quot;:true}, &quot;jpiedgcdjigcoeagojmlokclbljokpon&quot;:{&quot;blacklist&quot;:true}, &quot;keoimpnicgbcjamfdgpcecihicnbmhej&quot;:{&quot;blacklist&quot;:true}, &quot;omnicnmbagoinlpamknknbcgopadcoci&quot;:{&quot;blacklist&quot;:true}, &quot;pndadpldhngimdmhnajebjldbmcbpjol&quot;:{&quot;blacklist&quot;:true}, &quot;mplhbhmkccidaokcelbcbcmhhedebcng&quot;:{&quot;blacklist&quot;:true}, &quot;pkbbbncikcipejaiiiioboongndhmjgl&quot;:{&quot;blacklist&quot;:true}, &quot;cbjlfaogacjpkplebfbijaakaifoflno&quot;:{&quot;blacklist&quot;:true}, &quot;fbmgoajoadbjhoachcdiplofcblaihdc&quot;:{&quot;blacklist&quot;:true}, &quot;pbdgmppmccanplobanhfkjndjkmmabgk&quot;:{&quot;blacklist&quot;:true}, &quot;ghmaokcegalalefnhlfcnjhnpdbanjkj&quot;:{&quot;blacklist&quot;:true}, &quot;jbfebbkjjmkcoldeaeelhpconkmgjhbg&quot;:{&quot;blacklist&quot;:true}, &quot;obfnipbbnnhkbafmdbbfpgfgbjmmkgpm&quot;:{&quot;blacklist&quot;:true}, &quot;gpdcodmabpgmncbkhpipakhehepmpopk&quot;:{&quot;blacklist&quot;:true}, &quot;lgalokbapphhklmilicdefmgbjkcmldf&quot;:{&quot;blacklist&quot;:true}, &quot;lmhdacagnmfmomeodbgmlghejdbmldge&quot;:{&quot;blacklist&quot;:true}, &quot;afenhmponmfmdmbmccbmglppcmjhmhmh&quot;:{&quot;blacklist&quot;:true}, &quot;mlnoedbhndgbjcbeadjfnmjloejlgojk&quot;:{&quot;blacklist&quot;:true}, &quot;fpbippbofbmgmbojjmgfcifpmdaelcmd&quot;:{&quot;blacklist&quot;:true}, &quot;dpaphgcjeeochbiafgbochohgmpcmlbj&quot;:{&quot;blacklist&quot;:true}, &quot;cidnoinjdbalndcidafahfnoeehfblfl&quot;:{&quot;blacklist&quot;:true}, &quot;kdjhalklkkcmodeicjiaekcgifkcepaf&quot;:{&quot;blacklist&quot;:true}, &quot;ahjfgnikolodijnpakeknpilnemojlhc&quot;:{&quot;blacklist&quot;:true}, &quot;egljdhfnbjahogjahnigfnbpidlmdagi&quot;:{&quot;blacklist&quot;:true}, &quot;gncfgndgeoddelbfhlndhljnecoednaa&quot;:{&quot;blacklist&quot;:true}, &quot;dcpjokbfgfnbaekphjgehhjaokkcifbj&quot;:{&quot;blacklist&quot;:true}, &quot;ehmjnpjodmgeocfphkjjnheiheehcoid&quot;:{&quot;blacklist&quot;:true}, &quot;gkhbgnodbilglgholifcjdblbgdaieah&quot;:{&quot;blacklist&quot;:true}, &quot;hnbcdmfeoldeppcbnnjmjkdofohaljbn&quot;:{&quot;blacklist&quot;:true}, &quot;agmhonoepgcnakccfpidhjehlocaeaaj&quot;:{&quot;blacklist&quot;:true}, &quot;biiponhbbifajapmbggbgaepiedinifm&quot;:{&quot;blacklist&quot;:true}, &quot;onjaecbdddgibdijafoemfiachlbcgkj&quot;:{&quot;blacklist&quot;:true}, &quot;kdcnnmifdmlmjffdgeieikcokcogpbej&quot;:{&quot;blacklist&quot;:true}, &quot;bcddmcejgphfgofbpoocakaeapfomlek&quot;:{&quot;blacklist&quot;:true}, &quot;glhhlafadlhkgbklgbjnmblfhnkfknbm&quot;:{&quot;blacklist&quot;:true}, &quot;megkcfpbmemnpkgadkoompnoajcolpni&quot;:{&quot;blacklist&quot;:true}, &quot;hnnebfeppcbhhbhiifeaajgcjnkljlld&quot;:{&quot;blacklist&quot;:true}, &quot;mplpabdbfbloeiboikmdbnggfnjbjmlh&quot;:{&quot;blacklist&quot;:true}, &quot;hpibmhghjndideebpackbdlpncgkcppp&quot;:{&quot;blacklist&quot;:true}, &quot;likifpgnijjfbdegfepoalpamlgnfofi&quot;:{&quot;blacklist&quot;:true}, &quot;fjjeecfjmgfnleghoellhldedkaocjfc&quot;:{&quot;blacklist&quot;:true}, &quot;pbglijbamgmlcpnnpbfjkbdeheejjloj&quot;:{&quot;blacklist&quot;:true}, &quot;loggadfheaoeabmkgolecncpfdfioefa&quot;:{&quot;blacklist&quot;:true}, &quot;inbhlfpapeikbbgpfionabkigakepbbm&quot;:{&quot;blacklist&quot;:true}, &quot;nlgapikcofpablcmfgaoodlhiejiehhh&quot;:{&quot;blacklist&quot;:true}, &quot;kgdmldjagfciieddcnlhampgkajkpanc&quot;:{&quot;blacklist&quot;:true}, &quot;iomejadoamfilglofmeaffghddcgapmf&quot;:{&quot;blacklist&quot;:true}, &quot;foenbafkkmajnmfnlcmejonkfaipdmme&quot;:{&quot;blacklist&quot;:true}, &quot;djnahdkbfgnhgpakidinfonfcjbagkgp&quot;:{&quot;blacklist&quot;:true}, &quot;cepfogmgfkddnllaopgknbdfkceejmhk&quot;:{&quot;blacklist&quot;:true}, &quot;lojppnndedobolgfepahepphhloediji&quot;:{&quot;blacklist&quot;:true}, &quot;eofejpelggimkodeojpeojnbijgiglgh&quot;:{&quot;blacklist&quot;:true}, &quot;aojicjocmihiopalnhjikigammkhgckb&quot;:{&quot;blacklist&quot;:true}, &quot;gaicmfjflflabagobdiodejfpjikheeo&quot;:{&quot;blacklist&quot;:true}, &quot;mgndgikekgjfcpckkfioiadnlibdjbkf&quot;:{&quot;from_bookmark&quot;:false, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.43\\resources\\chrome_app&quot;, &quot;location&quot;:5, &quot;was_installed_by_default&quot;:false, &quot;install_time&quot;:&quot;13009108316151584&quot;, &quot;creation_flags&quot;:1, &quot;page_ordinal&quot;:&quot;n&quot;, &quot;manifest&quot;:{&quot;name&quot;:&quot;Chrome&quot;, &quot;display_in_new_tab_page&quot;:false, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB&quot;, &quot;app&quot;:{&quot;launch&quot;:{&quot;web_url&quot;:&quot;hxxp://THIS-WILL-BE-REPLACED&quot;}}, &quot;icons&quot;:{&quot;128&quot;:&quot;product_logo_128.png&quot;, &quot;16&quot;:&quot;product_logo_16.png&quot;}, &quot;display_in_launcher&quot;:true, &quot;version&quot;:&quot;0.1&quot;, &quot;description&quot;:&quot;Chrome as an app&quot;}, &quot;from_webstore&quot;:false, &quot;app_launcher_ordinal&quot;:&quot;zm&quot;}, &quot;mokdlfbphidpiopnlfejpcmadcbomckn&quot;:{&quot;blacklist&quot;:true}, &quot;pfgmgcnbngcnhjddppmnloflcidemopc&quot;:{&quot;blacklist&quot;:true}, &quot;pjdhkkcnlbfebiokpeghfffajaabahfo&quot;:{&quot;blacklist&quot;:true}, &quot;peiijdmlgbelnnmnkighhkpeihmmamio&quot;:{&quot;blacklist&quot;:true}, &quot;dmhjdbigobajgnfoabodjgmcdgoeoljm&quot;:{&quot;blacklist&quot;:true}, &quot;peahabnpipmmfiajjjhgfggbeigbmbgp&quot;:{&quot;blacklist&quot;:true}, &quot;bdgijcibmhjjccgbdohofncdjcophknj&quot;:{&quot;blacklist&quot;:true}, &quot;igaajdmlejbjcbmpmnigopikfdaccdcm&quot;:{&quot;blacklist&quot;:true}, &quot;apdebchnkegjokdjplmfmepcdgneemhe&quot;:{&quot;blacklist&quot;:true}, &quot;gompblemgafijijmlgbaepcijfgfgljf&quot;:{&quot;blacklist&quot;:true}, &quot;negkalblfongjbphdcbbhddlickhlamd&quot;:{&quot;blacklist&quot;:true}, &quot;dpmloehicimdjkibmobhmpgdndgbcced&quot;:{&quot;blacklist&quot;:true}, &quot;fpmajanjndhgpifbcbnklbiehgnpkgmf&quot;:{&quot;blacklist&quot;:true}, &quot;gjmhdmobkhfhkpfmfegnkkimlamjdldi&quot;:{&quot;blacklist&quot;:true}, &quot;mkobblpffgbncfhijabakfafmkjdmmnm&quot;:{&quot;blacklist&quot;:true}, &quot;dmkdhgkknhnfpdjeicefnpmhcpbimden&quot;:{&quot;blacklist&quot;:true}, &quot;onpnpccdagncipgnoofbhchlbajcjnkd&quot;:{&quot;blacklist&quot;:true}, &quot;noefghcilkpcabnhhilojimkkjplhcnd&quot;:{&quot;blacklist&quot;:true}, &quot;pfonklmafadkmcedjlodommcoipgbcde&quot;:{&quot;blacklist&quot;:true}, &quot;bkplhcigeaiiliajeehehiikokgocbhb&quot;:{&quot;blacklist&quot;:true}, &quot;iemfpgbdjfoihicbocpbjppipdbfimeh&quot;:{&quot;blacklist&quot;:true}, &quot;hhbihfbjoifhhebcnchglobmkmapgjkm&quot;:{&quot;blacklist&quot;:true}, &quot;cihlkpohodpdkdnfalhdkhhlhmhffmbe&quot;:{&quot;blacklist&quot;:true}, &quot;naopgnjebjeeedbbhcadkhkmeefmloho&quot;:{&quot;blacklist&quot;:true}, &quot;aakhlmakppmkkmfkoibponkmmpgpmjgl&quot;:{&quot;blacklist&quot;:true}, &quot;efonemhbokfedckpfpohpmcamfihnnlm&quot;:{&quot;blacklist&quot;:true}, &quot;gkcfodgjdcijjlliehfhgohlkemcbobl&quot;:{&quot;blacklist&quot;:true}, &quot;kcanfkmhccbaheheaackijegkclkaeic&quot;:{&quot;blacklist&quot;:true}, &quot;fhpclkemjlhmbfbjakbmdjihocinkmim&quot;:{&quot;blacklist&quot;:true}, &quot;lbaddolhebpnhdcdkicpcflhnfamcemn&quot;:{&quot;blacklist&quot;:true}, &quot;fommcgokigkhmnhlhlkckfjhefnmfohd&quot;:{&quot;blacklist&quot;:true}, &quot;nhboiakpmibkbkbeehchlfkggmhphpnk&quot;:{&quot;blacklist&quot;:true}, &quot;pnaaalnkbgjaphhmahecamecmaldknkc&quot;:{&quot;blacklist&quot;:true}, &quot;pobponmhkpmphbnfhpjdagklbkmjhked&quot;:{&quot;blacklist&quot;:true}, &quot;kinhljbhjmcmoddhdoodekeklmjapjff&quot;:{&quot;blacklist&quot;:true}, &quot;ecinfbhalenfhdhnljmkglajfjjfehoj&quot;:{&quot;blacklist&quot;:true}, &quot;ejakhnjbomgngodiidgbkapjgbdckhnh&quot;:{&quot;blacklist&quot;:true}, &quot;pnpfkfanlgljpkpilhgiimfadggfmhcd&quot;:{&quot;blacklist&quot;:true}, &quot;lhajoamjgchgljkdjigcgmmcehjkagan&quot;:{&quot;blacklist&quot;:true}, &quot;iedogbkombgmapifenoojnmpcnjighfm&quot;:{&quot;blacklist&quot;:true}, &quot;abfclfmhaemoockhhinpplncjehfpdbd&quot;:{&quot;blacklist&quot;:true}, &quot;kiipngoehgkgkackngaidmhmnchfbmio&quot;:{&quot;blacklist&quot;:true}, &quot;ckckpgefkpjfopjppjfcikppehdhceah&quot;:{&quot;blacklist&quot;:true}, &quot;pajgiddgjidlcajihkjoacjbplimkgfe&quot;:{&quot;blacklist&quot;:true}, &quot;hbaajkahagmlkdekmbdabikbopdgpaac&quot;:{&quot;blacklist&quot;:true}, &quot;ocnlnkjmfnolmbclblfhfhcakldceiec&quot;:{&quot;blacklist&quot;:true}, &quot;pgmpnhbchhaningbkefchpdalnimjijd&quot;:{&quot;blacklist&quot;:true}, &quot;mlmmbepkgelpbenpobinockmiehdahai&quot;:{&quot;blacklist&quot;:true}, &quot;abidmaanmbfeddegmapgpjhdmgjaloen&quot;:{&quot;blacklist&quot;:true}, &quot;bkhafliomebnpccanacmlfaemgfiofko&quot;:{&quot;blacklist&quot;:true}, &quot;oocfbmollajebjjpkahmlnclfhkjijea&quot;:{&quot;blacklist&quot;:true}, &quot;chhniecmnighakmlnhkifeogjddhoajn&quot;:{&quot;blacklist&quot;:true}, &quot;dhclobcklknojliojkkclgjndemadnig&quot;:{&quot;blacklist&quot;:true}, &quot;jfhmafmjfdblceidmfdmoihamolaaeco&quot;:{&quot;blacklist&quot;:true}, &quot;ihnembcpodnfgkafmiojebccomjekopm&quot;:{&quot;blacklist&quot;:true}, &quot;gpgehbjbkfhngdlfpfeokjgbkmmokjhe&quot;:{&quot;blacklist&quot;:true}, &quot;pfhlnanelpgjbhndafjamnpfhkjadoip&quot;:{&quot;blacklist&quot;:true}, &quot;aljdncnajablgppdcfbehhmidlmbndda&quot;:{&quot;blacklist&quot;:true}, &quot;folhciaicehdnoalhbkbgkakfcockopc&quot;:{&quot;blacklist&quot;:true}, &quot;nmgpbidjnaebdlbdbpjggenmbaolmfoi&quot;:{&quot;blacklist&quot;:true}, &quot;gmghjgfdialcnhadahmjefeflgnhcjeb&quot;:{&quot;blacklist&quot;:true}, &quot;kibgmcdcfmcglajcfbecilngejnfppjp&quot;:{&quot;blacklist&quot;:true}, &quot;ijecjbcgpblkacpijljpaienknanaloa&quot;:{&quot;blacklist&quot;:true}, &quot;kgbkdabomfdpfoibliicpmibceaoohgh&quot;:{&quot;blacklist&quot;:true}, &quot;einmhcleeonenkkldjlmhhcmgolhblhh&quot;:{&quot;blacklist&quot;:true}, &quot;kkkeikdkpjenmoiicggnnodbkebafgpc&quot;:{&quot;blacklist&quot;:true}, &quot;jgoljhcbgajhbhnchplgjdkknendhjnn&quot;:{&quot;blacklist&quot;:true}, &quot;mfffdpnblflpobcnekhekiahepofaane&quot;:{&quot;blacklist&quot;:true}, &quot;acmpfcamncegnhjdeiodgilikjafcamg&quot;:{&quot;blacklist&quot;:true}, &quot;fiiblakkkkgeljngobmpeljjapemenhi&quot;:{&quot;blacklist&quot;:true}, &quot;pbekednmpdekknlffkiopooofokfmkla&quot;:{&quot;blacklist&quot;:true}, &quot;phkpgooenaonkpnabopdbjjfmphclela&quot;:{&quot;blacklist&quot;:true}, &quot;fmcccidacjgnfiafddkngmeolkoiihil&quot;:{&quot;blacklist&quot;:true}, &quot;mpgehpkneknbopplhmmkfijfiniddipf&quot;:{&quot;blacklist&quot;:true}, &quot;clfhanhcjmgjnbpjfopldmnabimhmcmp&quot;:{&quot;blacklist&quot;:true}, &quot;edmnikahahfkfilbbjbdoiabnghbkmjc&quot;:{&quot;blacklist&quot;:true}, &quot;mcbkimglepddodbiongpohpeidioafgk&quot;:{&quot;blacklist&quot;:true}, &quot;hbmlheccjkodhfejcmblndjodllmnlnl&quot;:{&quot;blacklist&quot;:true}, &quot;epbmnbdplhcomkedpjfceakddnbgfjmf&quot;:{&quot;blacklist&quot;:true}, &quot;iablioliielnhdianpbiijaoncbmfend&quot;:{&quot;blacklist&quot;:true}, &quot;ijjmbbddenkbenbcfldgghhjgjmcnioo&quot;:{&quot;blacklist&quot;:true}, &quot;lnbeebaenahmkbffnimghceldeeihfak&quot;:{&quot;blacklist&quot;:true}, &quot;dbmdicehacbaohlockjgdglcobimmjkh&quot;:{&quot;blacklist&quot;:true}, &quot;fleljamdchegbjeiipbnmiebnhgheeld&quot;:{&quot;blacklist&quot;:true}, &quot;coajchbkdbfhmhbgcjepiofllfjjcpfp&quot;:{&quot;blacklist&quot;:true}, &quot;efhjelcghjkfigiagdfbfilndaffpmdj&quot;:{&quot;blacklist&quot;:true}, &quot;fngolbdmkneakeaoiieafkilnogbocda&quot;:{&quot;blacklist&quot;:true}, &quot;fibgploapkhokkbncddlkcmbmiengcfp&quot;:{&quot;blacklist&quot;:true}, &quot;mnhcgaghminpdabllkbkecahjfkdiabk&quot;:{&quot;blacklist&quot;:true}, &quot;cgnegjfmdfenjojhjffejinpnpoglmlh&quot;:{&quot;blacklist&quot;:true}, &quot;fomljmklmcefndkgpakgifbiiidgbjej&quot;:{&quot;blacklist&quot;:true}, &quot;hhfffemhgkginfafaoapljdllodppana&quot;:{&quot;blacklist&quot;:true}, &quot;nepfiodmbijheamafkiglonfkjebdjmf&quot;:{&quot;blacklist&quot;:true}, &quot;jgmpapdckakiohhebmeoemejibommimi&quot;:{&quot;blacklist&quot;:true}, &quot;caphkimknlmnhpjoneddiaakmcaajagb&quot;:{&quot;blacklist&quot;:true}, &quot;jpkdlckejfjidmplieobnhijmoiecbhl&quot;:{&quot;blacklist&quot;:true}, &quot;dgcfmgdfbfbgcpbendbhbkfjppboebed&quot;:{&quot;blacklist&quot;:true}, &quot;kdchmeaiapjkejkcbeclgjklemecieeg&quot;:{&quot;blacklist&quot;:true}, &quot;kffhenjbibjnbnjhlkcdlmpeccpaohio&quot;:{&quot;blacklist&quot;:true}, &quot;gobjcjhhebpjbmjdgmejhebbleadnceo&quot;:{&quot;blacklist&quot;:true}, &quot;ljcicfibknpmlcmcecddjlbgkejehhpa&quot;:{&quot;blacklist&quot;:true}, &quot;liomofjeffddiiccaolcnllbhnipbkhe&quot;:{&quot;blacklist&quot;:true}, &quot;cdogaeccgljmkecjmoedambgiekkllij&quot;:{&quot;blacklist&quot;:true}, &quot;hfjpjodbolkmheaehcnmfhjakjileoof&quot;:{&quot;blacklist&quot;:true}, &quot;hefmoncdemhjembgbnkgglhlookbipdc&quot;:{&quot;blacklist&quot;:true}, &quot;dlobhinihbmedmheccecfnkcadpehmbf&quot;:{&quot;blacklist&quot;:true}, &quot;idbdlnkdnaodonmgnimcfelpngbmcpjk&quot;:{&quot;blacklist&quot;:true}, &quot;aokenbhllkgpooaacldiamnpmmgkjblo&quot;:{&quot;blacklist&quot;:true}, &quot;oblicopoaionpjoapgjmmoncjadpdioh&quot;:{&quot;blacklist&quot;:true}, &quot;fpjdackpllilinpkgmhkpidkanmccblc&quot;:{&quot;blacklist&quot;:true}, &quot;copjbedljgpkaakkmbhgkpoaadeahido&quot;:{&quot;blacklist&quot;:true}, &quot;cfbdodejdeejbkffcmiaknpmojjeibpn&quot;:{&quot;blacklist&quot;:true}, &quot;mhkaekfpcppmmioggniknbnbdbcigpkk&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;scriptable_host&quot;:[&quot;hxxp://*/*&quot;, &quot;https://*/*&quot;]}, &quot;location&quot;:3, &quot;ack_external&quot;:true, &quot;disable_reasons&quot;:16, &quot;was_installed_by_default&quot;:false, &quot;install_time&quot;:&quot;13008500347438766&quot;, &quot;creation_flags&quot;:1, &quot;manifest&quot;:{&quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVq35rYr4MdmuCFYIwtkpd5j2jMH0De3JpgprNaP74k0f0glKc7kmn0iw54D+NxQ/0889F7XKJEkE5nV77bUh2DMN82mqIlKyVjOB59jdCG6j3PHCOaqJ7Y5BaOEI6enWPBwEbASTgWFNIj8Ecp5wJ0kh4qzWp9HejWjHCD2BJJwIDAQAB&quot;, &quot;update_url&quot;:&quot;hxxp://update.mybrowserbar.com/update/wt/gc/coupons/update.xml&quot;, &quot;name&quot;:&quot;Savings-Slider&quot;, &quot;icons&quot;:{&quot;128&quot;:&quot;ss-128.png&quot;, &quot;48&quot;:&quot;ss-48.png&quot;}, &quot;version&quot;:&quot;2.3&quot;, &quot;content_scripts&quot;:[{&quot;matches&quot;:[&quot;hxxp://*/*&quot;, &quot;https://*/*&quot;], &quot;all_frames&quot;:false, &quot;run_at&quot;:&quot;document_end&quot;, &quot;js&quot;:[&quot;loader_1036.js&quot;]}], &quot;description&quot;:&quot;Savings-Slider will help you save money when shopping online. When alerted that there are coupons available, simply click on \&quot;View All Available Coupons\&quot; for all the deals on the site you&apos;re browsing. Click the coupon to apply automatically! Savings-Slider is ad-supported software that is provided at no cost and may display advertisements in websites as you view them.&quot;, &quot;manifest_version&quot;:2}, &quot;state&quot;:1, &quot;from_webstore&quot;:false, &quot;path&quot;:&quot;mhkaekfpcppmmioggniknbnbdbcigpkk\\2.3_0&quot;}, &quot;jmeanodbelbflfmnkfdjgpikmldgjjko&quot;:{&quot;blacklist&quot;:true}, &quot;gfjfhihpkmehdmblhfaikkipeplpdcla&quot;:{&quot;blacklist&quot;:true}, &quot;jaejgaoiipdjjlbnapngknalafalbkej&quot;:{&quot;blacklist&quot;:true}, &quot;hdijkiondgomjpehfhopomicjbiodmcm&quot;:{&quot;blacklist&quot;:true}, &quot;dgaehaeahdegbdlenicbmkbakhdgoeml&quot;:{&quot;blacklist&quot;:true}, &quot;lpgiafapdmlapiokjnmpbbfkomiceoml&quot;:{&quot;blacklist&quot;:true}, &quot;dcfefnkefopibnlcjhjcfegckhanekld&quot;:{&quot;blacklist&quot;:true}, &quot;eopmhecjnginkckggjmhombbopmkjpam&quot;:{&quot;blacklist&quot;:true}, &quot;leccghfplhenabeogpibljliijgapfgb&quot;:{&quot;blacklist&quot;:true}, &quot;jmbkhogpjgjpfjhpdikloblkbkljkgao&quot;:{&quot;blacklist&quot;:true}, &quot;kleaapgdkahaekcocmkbgfainbhihccj&quot;:{&quot;blacklist&quot;:true}, &quot;cjhklhdjonhcohlacgggcbklpnldleck&quot;:{&quot;blacklist&quot;:true}, &quot;ldgfapfmnplpaohbbadnecegcpfkfall&quot;:{&quot;blacklist&quot;:true}, &quot;omceiakkomngangmllpgbjcoeloglald&quot;:{&quot;blacklist&quot;:true}, &quot;hkbgccpdcpbdckohbknjlamamelcnlki&quot;:{&quot;blacklist&quot;:true}, &quot;efcnjdcimjmggfdkahncpoikhehcfgnh&quot;:{&quot;blacklist&quot;:true}, &quot;bpfadpmhabiajakhgnaipdplkcjaklnj&quot;:{&quot;blacklist&quot;:true}, &quot;aemcjbfajnnmhblifaejadoecfoaebld&quot;:{&quot;blacklist&quot;:true}, &quot;nhkmojkfnknbbmhbnacjdlodokeophkl&quot;:{&quot;blacklist&quot;:true}, &quot;akbdojiajlefghcdclgkgmbbljamgehd&quot;:{&quot;blacklist&quot;:true}, &quot;pgafcinpmmpklohkojmllohdhomoefph&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;api&quot;:[&quot;plugin&quot;, &quot;tabs&quot;]}, &quot;location&quot;:3, &quot;disable_reasons&quot;:16, &quot;was_installed_by_default&quot;:false, &quot;install_time&quot;:&quot;13008500347696766&quot;, &quot;creation_flags&quot;:1, &quot;lastpingday&quot;:&quot;13009100403989888&quot;, &quot;state&quot;:0, &quot;from_webstore&quot;:false, &quot;manifest&quot;:{&quot;plugins&quot;:[{&quot;public&quot;:true, &quot;path&quot;:&quot;spext.dll&quot;}], &quot;permissions&quot;:[&quot;tabs&quot;], &quot;page_action&quot;:{&quot;default_title&quot;:&quot;BrowserProtect&quot;}, &quot;name&quot;:&quot;BrowserProtect&quot;, &quot;background&quot;:{&quot;scripts&quot;:[&quot;background.js&quot;]}, &quot;version&quot;:&quot;1.0&quot;, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClk3H28PBai7ToXwtcINPVtb0vSyTKxQjT46u4kM1nDpO5++S/hMuepxWOMJxZFzhcr/X6njI8z1ycbfhLcE+gYj7ioLEaxTXWAGWsboThblQQGMh3mQIVoE430Sjd8ypVtrmJTANvQ7CFdG2iTv+KdQMJLFndfgVJsRASr3/vdwIDAQAB&quot;, &quot;manifest_version&quot;:2}, &quot;path&quot;:&quot;pgafcinpmmpklohkojmllohdhomoefph\\1.0_0&quot;}, &quot;ejlekamipdcfcfpgfepjmklllbpeecaj&quot;:{&quot;blacklist&quot;:true}, &quot;hgjgaeknhmidehalnmokomhpfhbfmpcm&quot;:{&quot;blacklist&quot;:true}, &quot;ehomcoocpagnlcakcbecdaknmacmedld&quot;:{&quot;blacklist&quot;:true}, &quot;pjkljhegncpnkpknbcohdijeoejaedia&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;api&quot;:[&quot;notifications&quot;]}, &quot;location&quot;:1, &quot;ack_external&quot;:true, &quot;path&quot;:&quot;pjkljhegncpnkpknbcohdijeoejaedia\\7_0&quot;, &quot;exclude_from_sideload_wipeout&quot;:true, &quot;was_installed_by_default&quot;:true, &quot;install_time&quot;:&quot;13008500349284766&quot;, &quot;creation_flags&quot;:137, &quot;page_ordinal&quot;:&quot;n&quot;, &quot;lastpingday&quot;:&quot;13009100403989888&quot;, &quot;state&quot;:1, &quot;from_webstore&quot;:true, &quot;manifest&quot;:{&quot;permissions&quot;:[&quot;notifications&quot;], &quot;name&quot;:&quot;Google Mail&quot;, &quot;app&quot;:{&quot;urls&quot;:[&quot;*://mail.google.com/mail/ca&quot;], &quot;launch&quot;:{&quot;web_url&quot;:&quot;https://mail.google.com/mail/ca&quot;, &quot;container&quot;:&quot;tab&quot;}}, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB&quot;, &quot;default_locale&quot;:&quot;en&quot;, &quot;update_url&quot;:&quot;hxxp://clients2.google.com/service/update2/crx&quot;, &quot;current_locale&quot;:&quot;de&quot;, &quot;icons&quot;:{&quot;128&quot;:&quot;128.png&quot;}, &quot;version&quot;:&quot;7&quot;, &quot;options_page&quot;:&quot;https://mail.google.com/mail/ca/#settings&quot;, &quot;description&quot;:&quot;Schneller E-Mail-Dienst mit Suchfunktion und wenig Spam.&quot;}, &quot;app_launcher_ordinal&quot;:&quot;x&quot;, &quot;granted_permissions&quot;:{&quot;api&quot;:[&quot;notifications&quot;]}}, &quot;jeehjhnmgohgpfpjneglogiholalkeip&quot;:{&quot;blacklist&quot;:true}, &quot;mjgobkikdipfikmaoakdcdbicpioljgg&quot;:{&quot;blacklist&quot;:true}, &quot;jpehgolpfgnknboibogccapmdcadjkbd&quot;:{&quot;blacklist&quot;:true}, &quot;ilhjicgcglhjigdehkcehjdokmkahbjl&quot;:{&quot;blacklist&quot;:true}, &quot;iobnpmeeecphddicmhhmdjbnlbdhjlne&quot;:{&quot;blacklist&quot;:true}, &quot;mgdgiplcofghdmpekdeeceolepakodcb&quot;:{&quot;blacklist&quot;:true}, &quot;ncpdanjmicnihdlijomcggnnekloephc&quot;:{&quot;blacklist&quot;:true}, &quot;lcfkojlnjnedeoepfemhdgkhiabkeadc&quot;:{&quot;blacklist&quot;:true}, &quot;pnpgiaejfbdapllkchhgchjpdbcpiooa&quot;:{&quot;blacklist&quot;:true}, &quot;hilncbjbdpnfepdidfchmdclhpnlegpj&quot;:{&quot;blacklist&quot;:true}, &quot;bandboadndbkchlpicmfkpoedgnocblf&quot;:{&quot;blacklist&quot;:true}, &quot;aandpgohbohmlknpjbblpmoladhoochg&quot;:{&quot;blacklist&quot;:true}, &quot;ljlppmpjdogefnanekncklkjgpnhpcpd&quot;:{&quot;blacklist&quot;:true}, &quot;dbiblcmlcgdjjbdpbmbcpineegngkiip&quot;:{&quot;blacklist&quot;:true}, &quot;mjalegijammcloleihdmooifidcjggjp&quot;:{&quot;blacklist&quot;:true}, &quot;nmphbnbmgfccfhcmibikmhcgajjpelpf&quot;:{&quot;blacklist&quot;:true}, &quot;pcojpoljjgnicbhaffkiphphplijgbcc&quot;:{&quot;blacklist&quot;:true}, &quot;odefpckfdnfkeandbeccopcpncnbkonn&quot;:{&quot;blacklist&quot;:true}, &quot;gjkbghdignnlcknknflbigpammebiolo&quot;:{&quot;blacklist&quot;:true}, &quot;fopgndklnkecillfbdmfknhmadmenikm&quot;:{&quot;blacklist&quot;:true}, &quot;ajneiojjdhceikkgmhnjhgaacpfhldpi&quot;:{&quot;blacklist&quot;:true}, &quot;obgljnmbldahelaakfdbjkplokjoneip&quot;:{&quot;blacklist&quot;:true}, &quot;fjpofaghniailakahnhkjjfbfonpfglo&quot;:{&quot;blacklist&quot;:true}, &quot;mbmdaiddhfoljplpdhohimgieioblfif&quot;:{&quot;blacklist&quot;:true}, &quot;djpnjilhooodipllnjedjeiabkboakok&quot;:{&quot;blacklist&quot;:true}, &quot;aieglpnmmhleoenpbmfaffppfomgjmba&quot;:{&quot;blacklist&quot;:true}, &quot;geggofhlfbcmanadhknllmlajiafopoh&quot;:{&quot;blacklist&quot;:true}, &quot;ljmjoloiepllcndinchenhomcdcgbgef&quot;:{&quot;blacklist&quot;:true}, &quot;pnnbdjcjeiobikdfikegpclkcimgafpp&quot;:{&quot;blacklist&quot;:true}, &quot;hfcgbiofoebieldldghfocjfnnajmpej&quot;:{&quot;blacklist&quot;:true}, &quot;mfehgcgbbipciphmccgaenjidiccnmng&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;api&quot;:[&quot;cloudPrintPrivate&quot;]}, &quot;location&quot;:5, &quot;was_installed_by_default&quot;:false, &quot;install_time&quot;:&quot;13008500344820762&quot;, &quot;creation_flags&quot;:1, &quot;manifest&quot;:{&quot;name&quot;:&quot;Cloud Print&quot;, &quot;app&quot;:{&quot;urls&quot;:[&quot;https://www.google.com/cloudprint&quot;, &quot;https://www.google.com/cloudprint/enable_chrome_connector&quot;], &quot;launch&quot;:{&quot;web_url&quot;:&quot;https://www.google.com/cloudprint&quot;}}, &quot;display_in_launcher&quot;:false, &quot;description&quot;:&quot;Cloud Print&quot;, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB&quot;, &quot;permissions&quot;:[&quot;cloudPrintPrivate&quot;], &quot;version&quot;:&quot;0.1&quot;}, &quot;from_webstore&quot;:false, &quot;path&quot;:&quot;C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.172\\resources\\cloud_print&quot;}, &quot;ppmfajacidhcjbddpgmcmigffpppcadd&quot;:{&quot;blacklist&quot;:true}, &quot;danapgfidmepmcfbjjacceiaiiioieio&quot;:{&quot;blacklist&quot;:true}, &quot;ldmoahefokhfelhpbgfjpelcdbahdofk&quot;:{&quot;blacklist&quot;:true}, &quot;igghanohiioehififjoalfkdoicafjof&quot;:{&quot;blacklist&quot;:true}, &quot;dibljdngacjhpccjckmlmeklpgjeinjd&quot;:{&quot;blacklist&quot;:true}, &quot;jgdkappiifgomhgikcjbanhnmlekpeje&quot;:{&quot;blacklist&quot;:true}, &quot;jddbdddmbfencninofcgnodekclofpaj&quot;:{&quot;blacklist&quot;:true}, &quot;hkjcejgfmaanpncnpoidgbhoikcaeepd&quot;:{&quot;blacklist&quot;:true}, &quot;dbanhghadfmjndnjmmejdgfdmgidlbpm&quot;:{&quot;blacklist&quot;:true}, &quot;dpfanoongnoofcdhgijjdjmbnfekdejj&quot;:{&quot;blacklist&quot;:true}, &quot;apdfllckaahabafndbhieahigkjlhalf&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;api&quot;:[&quot;background&quot;, &quot;clipboardRead&quot;, &quot;clipboardWrite&quot;, &quot;notifications&quot;, &quot;unlimitedStorage&quot;]}, &quot;location&quot;:1, &quot;ack_external&quot;:true, &quot;path&quot;:&quot;apdfllckaahabafndbhieahigkjlhalf\\6.3_0&quot;, &quot;exclude_from_sideload_wipeout&quot;:true, &quot;was_installed_by_default&quot;:true, &quot;install_time&quot;:&quot;13008520431293316&quot;, &quot;creation_flags&quot;:137, &quot;page_ordinal&quot;:&quot;n&quot;, &quot;lastpingday&quot;:&quot;13009100403989888&quot;, &quot;state&quot;:1, &quot;from_webstore&quot;:true, &quot;manifest&quot;:{&quot;permissions&quot;:[&quot;background&quot;, &quot;clipboardRead&quot;, &quot;clipboardWrite&quot;, &quot;notifications&quot;, &quot;unlimitedStorage&quot;], &quot;name&quot;:&quot;Google Drive&quot;, &quot;app&quot;:{&quot;urls&quot;:[&quot;hxxp://docs.google.com/&quot;, &quot;hxxp://drive.google.com/&quot;, &quot;https://docs.google.com/&quot;, &quot;https://drive.google.com/&quot;], &quot;launch&quot;:{&quot;web_url&quot;:&quot;https://drive.google.com/?usp=chrome_app&quot;}}, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIl5KlKwL2TSkntkpY3naLLz5jsN0YwjhZyObcTOK6Nda4Ie21KRqZau9lx5SHcLh7pE2/S9OiArb+na2dn7YK5EvH+aRXS1ec3uxVlBhqLdnleVgwgwlg5fH95I52IeHcoeK6pR4hW/Nv39GNlI/Uqk6O6GBCCsAxYrdxww9BiQIDAQAB&quot;, &quot;version&quot;:&quot;6.3&quot;, &quot;default_locale&quot;:&quot;en_US&quot;, &quot;update_url&quot;:&quot;hxxp://clients2.google.com/service/update2/crx&quot;, &quot;current_locale&quot;:&quot;de&quot;, &quot;icons&quot;:{&quot;128&quot;:&quot;128.png&quot;}, &quot;background&quot;:{&quot;allow_js_access&quot;:false}, &quot;offline_enabled&quot;:true, &quot;options_page&quot;:&quot;https://drive.google.com/settings&quot;, &quot;description&quot;:&quot;Google Drive: Alle Inhalte an einem Ort erstellen, teilen und speichern.&quot;, &quot;manifest_version&quot;:2}, &quot;app_launcher_ordinal&quot;:&quot;y&quot;, &quot;granted_permissions&quot;:{&quot;api&quot;:[&quot;background&quot;, &quot;clipboardRead&quot;, &quot;clipboardWrite&quot;, &quot;notifications&quot;, &quot;unlimitedStorage&quot;]}}, &quot;fpokembamndopkflopmplkklbdngnknd&quot;:{&quot;blacklist&quot;:true}, &quot;imkffpjpdngdkpgadcmnlkhhmhdocijn&quot;:{&quot;blacklist&quot;:true}, &quot;fafoohpbicgbcejffcplajonhhooddle&quot;:{&quot;blacklist&quot;:true}, &quot;aebfkgcamgnimcbnbiopgdakknjgggnm&quot;:{&quot;blacklist&quot;:true}, &quot;igbaoknfddliiaoimhehfbkfekpmmfll&quot;:{&quot;blacklist&quot;:true}, &quot;nifbebeekindefklojhchehidpikbjfc&quot;:{&quot;blacklist&quot;:true}, &quot;lkfdchejjogilmloogbbjlnlpbhgjfab&quot;:{&quot;blacklist&quot;:true}, &quot;mnichagcickblneeijmfnmoiakigmmhf&quot;:{&quot;blacklist&quot;:true}, &quot;ilmknaabackgdbnkgbihgpgiopnlkjek&quot;:{&quot;blacklist&quot;:true}, &quot;nihhbeikpchdddoillfdcdinnnnllmna&quot;:{&quot;blacklist&quot;:true}, &quot;mdngbiejioalifclonjepjjfppmbgned&quot;:{&quot;blacklist&quot;:true}, &quot;magllcifjcllaafcdplnajmobccbcdlo&quot;:{&quot;blacklist&quot;:true}, &quot;abciiempgohamehppammbkhkicmkgkob&quot;:{&quot;blacklist&quot;:true}, &quot;gdggdkkjecogagaffaemnbfmllcoihjp&quot;:{&quot;blacklist&quot;:true}, &quot;pkbkgagehkkoajkpgnmjegibihpalfdk&quot;:{&quot;blacklist&quot;:true}, &quot;ndhkiimgbjnendpcfbiadlifmangejoa&quot;:{&quot;blacklist&quot;:true}, &quot;mhbffdldpckobeihgebaamjalehefnia&quot;:{&quot;blacklist&quot;:true}, &quot;cnimdnlablahacgompaahbgohcokcclp&quot;:{&quot;blacklist&quot;:true}, &quot;oakhllhnbcpgagdafgbninlpjdemdmjk&quot;:{&quot;blacklist&quot;:true}, &quot;oanjogmonneelfpnfmdlalfddkeckdej&quot;:{&quot;blacklist&quot;:true}, &quot;fnnmbghphdnmmjdapccfobgjemjadeli&quot;:{&quot;blacklist&quot;:true}, &quot;deonbedlmakdddidplniclflladdjoep&quot;:{&quot;blacklist&quot;:true}, &quot;npolaghondefgiomhkbiiompikfjneep&quot;:{&quot;blacklist&quot;:true}, &quot;jihmekmccilkocefjpejdebpapohlhjb&quot;:{&quot;blacklist&quot;:true}, &quot;mdiehnlecbjlppbpaaipmlnhhjgepfcg&quot;:{&quot;blacklist&quot;:true}, &quot;jbmbiepnidbnhbbfdbgioomdkgnbcacj&quot;:{&quot;blacklist&quot;:true}, &quot;lgcnahanhlfpceencjmlehpfklokhojk&quot;:{&quot;blacklist&quot;:true}, &quot;pdhjoamffhjhlkiiminjhmihalkfjaee&quot;:{&quot;blacklist&quot;:true}, &quot;jolgdmpdhloiienhblmiimamomhdphlk&quot;:{&quot;blacklist&quot;:true}, &quot;mjolnadmlahbpepjaemohnkhpjkbhmef&quot;:{&quot;blacklist&quot;:true}, &quot;deocpjmfifplhepinpkmpinpnbiemfje&quot;:{&quot;blacklist&quot;:true}, &quot;efnaljpgehfilpmkhobibbjceeeondmn&quot;:{&quot;blacklist&quot;:true}, &quot;cedclbokcakighlpbnbhfjffdjeihfdp&quot;:{&quot;blacklist&quot;:true}, &quot;lbficnmfealeidppcbgdcbemgfjodbkg&quot;:{&quot;blacklist&quot;:true}, &quot;fiapkdjniadkodmdibdnchoifkpfoiid&quot;:{&quot;blacklist&quot;:true}, &quot;pjgbfgdpkbfimabdalhjmmeeelbmkcac&quot;:{&quot;blacklist&quot;:true}, &quot;hkjfdgjkgpbbdmadbglcgljjjddkcdha&quot;:{&quot;blacklist&quot;:true}, &quot;aifmjmboebdkdelpjenakhaodgneempp&quot;:{&quot;blacklist&quot;:true}, &quot;lljnngafekbnkpdfophmcdlbfebcbcld&quot;:{&quot;blacklist&quot;:true}, &quot;fcfepemfihgibdacjlnlecebknaaepmj&quot;:{&quot;blacklist&quot;:true}, &quot;hbdhabpmbbanaopgkbaondabkkepjfaf&quot;:{&quot;blacklist&quot;:true}, &quot;bjihddggcgnblgojnmhpnngonofbnkaj&quot;:{&quot;blacklist&quot;:true}, &quot;fmonlemffgbabjifjfaoamdflijecdbk&quot;:{&quot;blacklist&quot;:true}, &quot;pfcelnbmkeoaeicedjomcjkcammlkdbk&quot;:{&quot;blacklist&quot;:true}, &quot;pfoiaildicnbcjojocjlpcibenphhbln&quot;:{&quot;blacklist&quot;:true}, &quot;imfbomjbodpfgfhfahlgkkcllmhbelhk&quot;:{&quot;blacklist&quot;:true}, &quot;hncomkjbbkchfjelocejkbbflmjhlhfp&quot;:{&quot;blacklist&quot;:true}, &quot;nbieffehfdniifkgdckbndjhojohbfjj&quot;:{&quot;blacklist&quot;:true}, &quot;hnipgljcblpgnnojcfldehpeknhakbgj&quot;:{&quot;blacklist&quot;:true}, &quot;oelhhkgiajkjfbccafjgggcpkbkjgpij&quot;:{&quot;blacklist&quot;:true}, &quot;mamfageekafifnickhgkibkofcclfefe&quot;:{&quot;blacklist&quot;:true}, &quot;apdmgffkfhjfeejmbjidennfjdkmmmbl&quot;:{&quot;blacklist&quot;:true}, &quot;mandondadnlimicalgkbkaohmeopdojj&quot;:{&quot;blacklist&quot;:true}, &quot;lifbcibllhkdhoafpjfnlhfpfgnpldfl&quot;:{&quot;from_bookmark&quot;:false, &quot;active_permissions&quot;:{&quot;scriptable_host&quot;:[&quot;file:///*&quot;, &quot;hxxp://*/*&quot;, &quot;https://*/*&quot;], &quot;api&quot;:[&quot;plugin&quot;, &quot;tabs&quot;], &quot;explicit_host&quot;:[&quot;hxxp://*/*&quot;, &quot;https://*/*&quot;]}, &quot;location&quot;:3, &quot;disable_reasons&quot;:16, &quot;was_installed_by_default&quot;:false, &quot;install_time&quot;:&quot;13008500347634766&quot;, &quot;creation_flags&quot;:1, &quot;lastpingday&quot;:&quot;13009100403989888&quot;, &quot;state&quot;:0, &quot;from_webstore&quot;:false, &quot;manifest&quot;:{&quot;plugins&quot;:[{&quot;public&quot;:true, &quot;path&quot;:&quot;npSkypeChromePlugin.dll&quot;}], &quot;name&quot;:&quot;Skype Click to Call&quot;, &quot;description&quot;:&quot;Skype Click to Call&quot;, &quot;permissions&quot;:[&quot;tabs&quot;, &quot;hxxp://*/*&quot;, &quot;https://*/*&quot;], &quot;background_page&quot;:&quot;background.html&quot;, &quot;version&quot;:&quot;5.10.0.9560&quot;, &quot;content_scripts&quot;:[{&quot;matches&quot;:[&quot;hxxp://*/*&quot;, &quot;file://*/*&quot;, &quot;https://*/*&quot;], &quot;all_frames&quot;:true, &quot;run_at&quot;:&quot;document_end&quot;, &quot;js&quot;:[&quot;contentscript.js&quot;]}], &quot;browser_action&quot;:{&quot;default_title&quot;:&quot;Options&quot;, &quot;default_icon&quot;:&quot;skype.png&quot;}, &quot;key&quot;:&quot;MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZJxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB&quot;}, &quot;path&quot;:&quot;lifbcibllhkdhoafpjfnlhfpfgnpldfl\\5.10.0.9560_0&quot;}, &quot;mcknnlhkkdbcppajgefagceglahcafjd&quot;:{&quot;blacklist&quot;:true}, &quot;flmmgcfcpbfddenepkfmgfpbaceolcoe&quot;:{&quot;blacklist&quot;:true}, &quot;hpcdoodjfcmpcpkeendjnjkeinimhkih&quot;:{&quot;blacklist&quot;:true}, &quot;dhmghpedmigfknfpolfmkihcaeiccjgf&quot;:{&quot;blacklist&quot;:true}, &quot;ocmhjnhildbnglmlfimkjnnfgddelacb&quot;:{&quot;blacklist&quot;:true}, &quot;pkcbihpffghlanbclfmkegjmbijcpobj&quot;:{&quot;blacklist&quot;:true}, &quot;dlopielgodpjhkbapdlbbicpiefpaack&quot;:{&quot;blacklist&quot;:true}, &quot;fpoajjnnpmledpmohlgpgbmlhbgkgahg&quot;:{&quot;blacklist&quot;:true}, &quot;pgjpnfpidejcmjibaaohcmehfohacckf&quot;:{&quot;blacklist&quot;:true}, &quot;agodbcffjkjcnceklapkjfcmkfepmbgm&quot;:{&quot;blacklist&quot;:true}, &quot;jfalnphfjdoalcdhlnhdpekbmmopkgkj&quot;:{&quot;blacklist&quot;:true}, &quot;canhmdgddepdjikkjhpmhcfdkkjdbppi&quot;:{&quot;blacklist&quot;:true}, &quot;lncjcfkpannmofmpgdfoonkniofdnaba&quot;:{&quot;blacklist&quot;:true}, &quot;anmjpohfnlopdfaojooicpemopnliimn&quot;:{&quot;blacklist&quot;:true}, &quot;ojmdhklabgbnnkkilmkcfcemdhognifc&quot;:{&quot;blacklist&quot;:true}, &quot;mogepbcllienegdibkfpmombhefhcoic&quot;:{&quot;blacklist&quot;:true}, &quot;ckphhghhpjbfddcgkpfbelfeojcciglo&quot;:{&quot;blacklist&quot;:true}, &quot;cgnkbnaiipmfbakpmhllalggoepniemh&quot;:{&quot;blacklist&quot;:true}, &quot;nidodbfomffkfabciljelkbdiabkeehe&quot;:{&quot;blacklist&quot;:true}, &quot;pnaiiipilbpcceggeanphcpkkihnojan&quot;:{&quot;blacklist&quot;:true}, &quot;dfjhgoeofgmepmcngkhnaiphbhdbonhp&quot;:{&quot;blacklist&quot;:true}, &quot;aglmapjbjphdidmnileogpjkgpdoliep&quot;:{&quot;blacklist&quot;:true}, &quot;lkhcbijhgfchgdmklonlobkfbcadbokg&quot;:{&quot;blacklist&quot;:true}, &quot;dmhgenmamfphbclmhdgmffajkfommkom&quot;:{&quot;blacklist&quot;:true}, &quot;dejippphmhbpgckbhdidnjmdcpfccbaj&quot;:{&quot;blacklist&quot;:true}, &quot;ffgfbfakpcnngelphjnppokmoicdollk&quot;:{&quot;blacklist&quot;:true}, &quot;bckhfnghfdponbaldednpnljadgfjecj&quot;:{&quot;blacklist&quot;:true}, &quot;indfhnliadamglhalanplbajgenpjdml&quot;:{&quot;blacklist&quot;:true}, &quot;gomkbnfeifchddfokcicibjnlgbolhol&quot;:{&quot;blacklist&quot;:true}, &quot;alfahpoknocfdebmiclonikapcnljlob&quot;:{&quot;blacklist&quot;:true}, &quot;aconhjfogglfnkjhkjipaifepjklolog&quot;:{&quot;blacklist&quot;:true}, &quot;ifeijfpkjckedpclgncedmgdiaoeahmk&quot;:{&quot;blacklist&quot;:true}, &quot;plfijddblbcdcnammpdmfccchkbdekmm&quot;:{&quot;blacklist&quot;:true}, &quot;nfecfkjnlkbphobjbcnphimihniieehc&quot;:{&quot;blacklist&quot;:true}, &quot;nidmbljkkcbdfklgdkklgjgmhejmbojn&quot;:{&quot;blacklist&quot;:true}, &quot;dnemhlkdpajbbniphgkgceplmnkfnhfo&quot;:{&quot;blacklist&quot;:true}, &quot;oilfokmpgejhjhecdjjpikloibggpenf&quot;:{&quot;blacklist&quot;:true}, &quot;pfaooklcbjnkgconjjepimkohgcjmdji&quot;:{&quot;blacklist&quot;:true}, &quot;cpiiakoibaohkfoaijaigdnocfolnmll&quot;:{&quot;blacklist&quot;:true}, &quot;kgdhnhadbnpeibkghaebmhmngobdafag&quot;:{&quot;blacklist&quot;:true}, &quot;laicaenbonaajhkmfhhbpiapobdieffm&quot;:{&quot;blacklist&quot;:true}, &quot;cmlokmkdolieoaoddlfhaidnlmiadhik&quot;:{&quot;blacklist&quot;:true}, &quot;aieihijcjcccdiepockaiekhpflicdii&quot;:{&quot;blacklist&quot;:true}, &quot;lfggokjjaanlfikbbapgnfemifmddalf&quot;:{&quot;blacklist&quot;:true}, &quot;alcbnnpmipohgdllkkglhkbncijplago&quot;:{&quot;blacklist&quot;:true}, &quot;cekdjgnecpoooikhmceokdhojckkkhmh&quot;:{&quot;blacklist&quot;:true}, &quot;kolbbghckjilleabphhgeggcgpfidofi&quot;:{&quot;blacklist&quot;:true}, &quot;janhdpmhnighonkkbkdpnljcoenpfkbh&quot;:{&quot;blacklist&quot;:true}, &quot;dpgenihgggagjjggfocjceeobjkadcbc&quot;:{&quot;blacklist&quot;:true}, &quot;cmnfphnmpedeolmelllmgkghmjcnlajp&quot;:{&quot;blacklist&quot;:true}, &quot;mnllienogacopjnkmhgnniopjpgjpopp&quot;:{&quot;blacklist&quot;:true}, &quot;ajlkjjdbgcjdiklbcomhnfghjigfccoh&quot;:{&quot;blacklist&quot;:true}, &quot;dfafokiagoiocidlpglcanjkcdbdnioi&quot;:{&quot;blacklist&quot;:true}}, &quot;last_chrome_version&quot;:&quot;26.0.1410.43&quot;, &quot;chrome_url_overrides&quot;:{&quot;bookmarks&quot;:[&quot;chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html&quot;]}, &quot;sideload_wipeout_bubble_shown&quot;:3, &quot;blacklistupdate&quot;:{&quot;lastpingday&quot;:&quot;13009100403535888&quot;, &quot;version&quot;:&quot;0.0.0.143&quot;}, &quot;sideload_wipeout_done&quot;:true}, &quot;ntp&quot;:{&quot;app_page_names&quot;:[&quot;Apps&quot;]}, &quot;distribution&quot;:{&quot;skip_first_run_ui&quot;:true, &quot;create_all_shortcuts&quot;:true, &quot;import_search_engine&quot;:false, &quot;verbose_logging&quot;:false, &quot;show_welcome_page&quot;:true, &quot;require_eula&quot;:true, &quot;system_level&quot;:true, &quot;alternate_shortcut_text&quot;:true, &quot;do_not_launch_chrome&quot;:true, &quot;make_chrome_default&quot;:false, &quot;import_history&quot;:false}, &quot;dns_prefetching&quot;:{&quot;startup_list&quot;:[1, &quot;hxxp://a.tfag.de/&quot;, &quot;hxxp://chip.de.intellitxt.com/&quot;, &quot;hxxp://forum.chip.de/&quot;, &quot;hxxp://google.de/&quot;, &quot;hxxp://ssl.gstatic.com/&quot;, &quot;hxxp://www.chip.de/&quot;, &quot;hxxp://www.google.com/&quot;, &quot;hxxp://www.google.de/&quot;, &quot;https://www.google.com/&quot;, &quot;https://www.google.de/&quot;], &quot;host_referral_list&quot;:[2, [&quot;hxxp://ad.turn.com/&quot;, [&quot;hxxp://cdn.turn.com/&quot;, 2.2733802]], [&quot;hxxp://ad4.adfarm1.adition.com/&quot;, [&quot;hxxp://ad.zanox.com/&quot;, 2.2733802, &quot;hxxp://ad2.adfarm1.adition.com/&quot;, 2.2733802, &quot;hxxp://bs.serving-sys.com/&quot;, 2.2733802, &quot;hxxp://imagesrv.adition.com/&quot;, 3.594661, &quot;hxxp://sb.scorecardresearch.com/&quot;, 2.9340206, &quot;hxxp://vt.adition.com/&quot;, 2.2733802, &quot;hxxp://www.rebuy.de/&quot;, 2.2733802, &quot;hxxp://www.strato.de/&quot;, 2.2733802]], [&quot;hxxp://ams1.ib.adnxs.com/&quot;, [&quot;hxxp://ad2.adfarm1.adition.com/&quot;, 2.2733802, &quot;hxxp://farm.plista.com/&quot;, 2.2733802, &quot;hxxp://imagesrv.adition.com/&quot;, 2.2733802, &quot;hxxp://static.plista.com/&quot;, 3.594661]], [&quot;hxxp://banner.congstar.de/&quot;, [&quot;hxxp://banner.congstar.de/&quot;, 2.6037004, &quot;hxxp://googleads.g.doubleclick.net/&quot;, 2.2733802, &quot;hxxp://www.google.com/&quot;, 2.2733802, &quot;hxxp://www.google.de/&quot;, 2.2733802, &quot;hxxp://www.googleadservices.com/&quot;, 2.6037004, &quot;hxxp://www.googletagmanager.com/&quot;, 2.2733802]], [&quot;hxxp://banners.webmasterplan.com/&quot;, [&quot;hxxp://creative.metalyzer.com/&quot;, 2.2733802, &quot;hxxp://postview.c-and-a.com/&quot;, 2.2733802]], [&quot;hxxp://cas.fr.eu.criteo.com/&quot;, [&quot;hxxp://cas.fr.eu.criteo.com/&quot;, 2.2733802, &quot;hxxp://caw.criteo.com/&quot;, 2.6037004, &quot;hxxp://images.eu.criteo.net/&quot;, 3.2643408, &quot;hxxp://static.eu.criteo.net/&quot;, 4.2553014]], [&quot;hxxp://cdn.turn.com/&quot;, [&quot;hxxp://ih.adscale.de/&quot;, 2.2733802]], [&quot;hxxp://dap.criteo.com/&quot;, [&quot;hxxp://ad-emea.doubleclick.net/&quot;, 2.9340206, &quot;hxxp://ad.doubleclick.net/&quot;, 2.6037004, &quot;hxxp://ad.yieldmanager.com/&quot;, 2.6037004, &quot;hxxp://adserver.adtech.de/&quot;, 2.2733802, &quot;hxxp://cm.g.doubleclick.net/&quot;, 2.2733802, &quot;hxxp://dis.criteo.com/&quot;, 2.6037004, &quot;hxxp://eprofile.uimserv.net/&quot;, 3.2643408, &quot;hxxp://ib.adnxs.com/&quot;, 2.9340206, &quot;hxxp://ww251.smartadserver.com/&quot;, 2.9340206, &quot;https://ad.yieldmanager.com/&quot;, 2.2733802]], [&quot;hxxp://dis.eu.criteo.com/&quot;, [&quot;hxxp://ad-emea.doubleclick.net/&quot;, 2.2733802, &quot;hxxp://ad.doubleclick.net/&quot;, 3.2643408, &quot;hxxp://admention.adspirit.de/&quot;, 2.2733802, &quot;hxxp://adserv.quality-channel.de/&quot;, 3.594661, &quot;hxxp://cm.g.doubleclick.net/&quot;, 2.2733802, &quot;hxxp://dis.criteo.com/&quot;, 2.9340206, &quot;hxxp://eas.apm.emediate.eu/&quot;, 2.9340206, &quot;hxxp://eprofile.uimserv.net/&quot;, 2.6037004, &quot;hxxp://ib.adnxs.com/&quot;, 2.2733802, &quot;hxxp://ww251.smartadserver.com/&quot;, 3.594661]], [&quot;hxxp://forum.chip.de/&quot;, [&quot;hxxp://ad.de.doubleclick.net/&quot;, 2.6037004, &quot;hxxp://b.scorecardresearch.com/&quot;, 2.6037004, &quot;hxxp://bs.serving-sys.com/&quot;, 2.6037004, &quot;hxxp://ds.serving-sys.com/&quot;, 3.594661, &quot;hxxp://gmads.net/&quot;, 3.594661, &quot;hxxp://images.eu.criteo.net/&quot;, 5.246262, &quot;hxxp://pagead2.googlesyndication.com/&quot;, 2.9340206, &quot;hxxp://platform.twitter.com/&quot;, 2.6037004, &quot;https://apis.google.com/&quot;, 2.6037004, &quot;https://plusone.google.com/&quot;, 2.6037004]], [&quot;hxxp://google.de/&quot;, [&quot;hxxp://www.google.de/&quot;, 1.830751132]], [&quot;hxxp://googleads.g.doubleclick.net/&quot;, [&quot;hxxp://lh3.googleusercontent.com/&quot;, 0.178075036470137, &quot;hxxp://lh4.googleusercontent.com/&quot;, 0.142036040994038, &quot;hxxp://lh5.googleusercontent.com/&quot;, 0.142036040994038, &quot;hxxp://lh6.googleusercontent.com/&quot;, 0.142036040994038, &quot;hxxp://pagead2.googlesyndication.com/&quot;, 0.658756030476882]], [&quot;hxxp://n54.ad.ad-srv.net/&quot;, [&quot;hxxp://a.nonstoppartner.net/&quot;, 2.2733802, &quot;hxxp://ad.zanox.com/&quot;, 2.2733802, &quot;hxxp://ads.heias.com/&quot;, 2.2733802, &quot;hxxp://banners.contentfeed.net/&quot;, 2.2733802, &quot;hxxp://banners.webmasterplan.com/&quot;, 2.6037004, &quot;hxxp://cdn-de-c-142.heias.com/&quot;, 2.2733802, &quot;hxxp://creative.metalyzer.com/&quot;, 2.2733802, &quot;hxxp://postview.c-and-a.com/&quot;, 2.2733802, &quot;hxxp://sv.schwab.de/&quot;, 2.2733802, &quot;hxxp://www.schwab.de/&quot;, 2.2733802]], [&quot;hxxp://platform.twitter.com/&quot;, [&quot;hxxp://cdn.api.twitter.com/&quot;, 1.32060461512, &quot;hxxp://p.twitter.com/&quot;, 1.32060461512, &quot;https://r.twimg.com/&quot;, 1.79481229424]], [&quot;hxxp://translate.google.de/&quot;, [&quot;hxxp://csi.gstatic.com/&quot;, 3.2643408, &quot;hxxp://ssl.gstatic.com/&quot;, 3.2643408, &quot;hxxp://translate.google.de/&quot;, 6.2372226]], [&quot;hxxp://www.computerbase.de/&quot;, [&quot;hxxp://adserver.freenet.de/&quot;, 3.9249812, &quot;hxxp://compbase.ivwbox.de/&quot;, 3.9249812, &quot;hxxp://fxm.nuggad.net/&quot;, 2.6037004, &quot;hxxp://fxmad-mul.freenet.de/&quot;, 3.594661, &quot;hxxp://pagead2.googlesyndication.com/&quot;, 2.6037004, &quot;hxxp://qs.ivwbox.de/&quot;, 2.2733802, &quot;hxxp://req.connect.wunderloop.net/&quot;, 2.6037004, &quot;hxxp://rtax.criteo.com/&quot;, 2.6037004, &quot;hxxp://www.computerbase.de/&quot;, 24.4048336, &quot;hxxp://www.google-analytics.com/&quot;, 2.9340206]], [&quot;hxxp://www.facebook.com/&quot;, [&quot;hxxp://static.ak.fbcdn.net/&quot;, 1.0788736501984]], [&quot;hxxp://www.google.de/&quot;, [&quot;hxxp://ssl.gstatic.com/&quot;, 0.089496539900592, &quot;hxxp://www.google.de/&quot;, 2.81698355529819]], [&quot;hxxp://www.gutefrage.net/&quot;, [&quot;hxxp://dap.criteo.com/&quot;, 2.2733802, &quot;hxxp://dc15.s79.research.de.com/&quot;, 2.2733802, &quot;hxxp://dnn506yrbagrg.cloudfront.net/&quot;, 2.2733802, &quot;hxxp://im.banner.t-online.de/&quot;, 4.5856216, &quot;hxxp://images.gutefrage.net/&quot;, 8.2191438, &quot;hxxp://imagesrv.adition.com/&quot;, 3.2643408, &quot;hxxp://s79.research.de.com/&quot;, 2.2733802, &quot;hxxp://stat.flashtalking.com/&quot;, 3.2643408, &quot;hxxp://www.gutefrage.net/&quot;, 5.246262, &quot;hxxp://www4.smartadserver.com/&quot;, 3.2643408]], [&quot;hxxp://www.hijackthis-forum.de/&quot;, [&quot;hxxp://image.hijackthis.eu/&quot;, 9.38213516016, &quot;hxxp://www.google-analytics.com/&quot;, 2.12513249424, &quot;hxxp://www.hijackthis-forum.de/&quot;, 11.75317355576, &quot;hxxp://yui.yahooapis.com/&quot;, 1.32060461512]], [&quot;http://www.trojaner-board.de/&quot;, [&quot;hxxp://img.trojaner-board.de/&quot;, 2.2733802, &quot;hxxp://partner.googleadservices.com/&quot;, 2.2733802, &quot;hxxp://pubads.g.doubleclick.net/&quot;, 3.2643408, &quot;hxxp://www.apmebf.com/&quot;, 2.2733802, &quot;hxxp://www.awltovhc.com/&quot;, 2.2733802, &quot;hxxp://www.google-analytics.com/&quot;, 3.2643408, &quot;hxxp://www.kdukvh.com/&quot;, 2.2733802, &quot;http://www.trojaner-board.de/&quot;, 15.155868, &quot;hxxp://www.yceml.net/&quot;, 2.2733802, &quot;https://store.malwarebytes.org/&quot;, 2.9340206]], [&quot;https://plusone.google.com/&quot;, [&quot;https://plusone.google.com/&quot;, 2.26901997336]]]}, &quot;net&quot;:{&quot;http_server_properties&quot;:{&quot;version&quot;:1, &quot;servers&quot;:{&quot;www.google.de:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:10, &quot;6&quot;:0}, &quot;supports_spdy&quot;:true}, &quot;www.google.com:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:10, &quot;6&quot;:1}, &quot;supports_spdy&quot;:true}, &quot;clients1.google.com:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:10, &quot;6&quot;:0}, &quot;supports_spdy&quot;:true}, &quot;lh4.googleusercontent.com:443&quot;:{&quot;supports_spdy&quot;:true}, &quot;clients2.google.com:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:32, &quot;6&quot;:0}, &quot;supports_spdy&quot;:true}, &quot;lh3.googleusercontent.com:443&quot;:{&quot;supports_spdy&quot;:true}, &quot;ad.doubleclick.net:443&quot;:{&quot;supports_spdy&quot;:true}, &quot;r.twimg.com:443&quot;:{&quot;supports_spdy&quot;:true}, &quot;googleads.g.doubleclick.net:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:32, &quot;6&quot;:0}, &quot;supports_spdy&quot;:true}, &quot;plusone.google.com:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:34, &quot;6&quot;:0}, &quot;supports_spdy&quot;:true}, &quot;encrypted-tbn3.gstatic.com:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:12, &quot;6&quot;:0}, &quot;supports_spdy&quot;:true}, &quot;ssl.gstatic.com:443&quot;:{&quot;supports_spdy&quot;:true}, &quot;www.gstatic.com:443&quot;:{&quot;supports_spdy&quot;:true}, &quot;www.facebook.com:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:10, &quot;7&quot;:16384}, &quot;supports_spdy&quot;:true}, &quot;apis.google.com:443&quot;:{&quot;settings&quot;:{&quot;4&quot;:100, &quot;5&quot;:18, &quot;6&quot;:0}, &quot;supports_spdy&quot;:true}, &quot;clients2.googleusercontent.com:443&quot;:{&quot;supports_spdy&quot;:true}}}}, &quot;homepage&quot;:&quot;hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSMMFj9a0kTjUE-mXqusFW0bttzWS4clLPJnhjSqKiYOg7CprZcMGjveMMJmRawBo,&quot;, &quot;browser&quot;:{&quot;window_placement&quot;:{&quot;work_area_top&quot;:0, &quot;work_area_right&quot;:1600, &quot;top&quot;:21, &quot;left&quot;:331, &quot;bottom&quot;:861, &quot;maximized&quot;:false, &quot;right&quot;:1562, &quot;work_area_left&quot;:0, &quot;work_area_bottom&quot;:860}, &quot;clear_lso_data_enabled&quot;:true, &quot;last_prompted_google_url&quot;:&quot;https://www.google.de/&quot;, &quot;pepper_flash_settings_enabled&quot;:true, &quot;last_known_google_url&quot;:&quot;https://www.google.de/&quot;}}</baddata><gooddata></gooddata><hash>78068b3bcfac1521af7de020ee17718f</hash></file>
</items>
</mbam-log>

Darf ich fragen für was das gut sein soll?

Das Problem tauchte schon vorher auf, bevor ich das Programm Malwarebytes genutzt habe.

cosinus 15.08.2014 22:39

Malwarebytes entfernt auch nicht alles. Es gibt keine eierlegende Wollmilchsau ;)

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Math20 16.08.2014 00:14

Ok. Werde Jetzt Schritt 1 schon einmal posten. Werde dann gleich mit Schritt 2 fortfahren:

Code:

# AdwCleaner v3.306 - Bericht erstellt am 16/08/2014 um 00:42:20
# Aktualisiert 15/08/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Matthias - MATTHIAS-PC
# Gestartet von : C:\Users\Matthias\Downloads\adwcleaner_3.306.exe
# Option : Loschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Geloscht : C:\ProgramData\AVG SafeGuard toolbar
Ordner Geloscht : C:\ProgramData\AVG Secure Search
Ordner Geloscht : C:\ProgramData\Babylon
Ordner Geloscht : C:\ProgramData\Conduit
Ordner Geloscht : C:\ProgramData\Iminent
Ordner Geloscht : C:\ProgramData\Partner
Ordner Geloscht : C:\ProgramData\PriceMeterLiveUpdate
Ordner Geloscht : C:\ProgramData\SoftSafe
Ordner Geloscht : C:\ProgramData\SweetIM
Ordner Geloscht : C:\ProgramData\WPM
Ordner Geloscht : C:\Program Files (x86)\AVG SafeGuard toolbar
Ordner Geloscht : C:\Program Files (x86)\AVG Secure Search
Ordner Geloscht : C:\Program Files (x86)\file scout
Ordner Geloscht : C:\Program Files (x86)\globalUpdate
Ordner Geloscht : C:\Program Files (x86)\MyPC Backup
Ordner Geloscht : C:\Program Files (x86)\predm
Ordner Geloscht : C:\Program Files (x86)\SeeSimilar
Ordner Geloscht : C:\Program Files (x86)\SweetIM
Ordner Geloscht : C:\Program Files (x86)\Uncompressor
Ordner Geloscht : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Geloscht : C:\Program Files (x86)\Common Files\Umbrella
Ordner Geloscht : C:\Windows\Installer\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
Ordner Geloscht : C:\Windows\SysWOW64\SearchProtect
Ordner Geloscht : C:\Program Files\DomaIQ Uninstaller
Ordner Geloscht : C:\Users\Matthias\AppData\Local\AVG SafeGuard toolbar
Ordner Geloscht : C:\Users\Matthias\AppData\Local\AVG Secure Search
Ordner Geloscht : C:\Users\Matthias\AppData\Local\Conduit
Ordner Geloscht : C:\Users\Matthias\AppData\Local\globalUpdate
Ordner Geloscht : C:\Users\Matthias\AppData\Local\NativeMessaging
Ordner Geloscht : C:\Users\Matthias\AppData\Local\PackageAware
Ordner Geloscht : C:\Users\Matthias\AppData\Local\PriceMeterLiveUpdate
Ordner Geloscht : C:\Users\Matthias\AppData\Local\WhiteListing
Ordner Geloscht : C:\Users\Matthias\AppData\LocalLow\AVG SafeGuard toolbar
Ordner Geloscht : C:\Users\Matthias\AppData\LocalLow\Conduit
Ordner Geloscht : C:\Users\Matthias\AppData\LocalLow\Smartbar
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\BabSolution
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\Babylon
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\BabylonToolbar
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\dvdvideosoftiehelpers
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\Iminent
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\NCdownloader
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\PerformerSoft
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\SeeSimilar
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\sweet-page
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\Systweak
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\Windows Net Data
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
Ordner Geloscht : C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uncompressor
Ordner Geloscht : C:\Users\Matthias^2\AppData\Local\AVG SafeGuard toolbar
Ordner Geloscht : C:\Users\Matthias^2\AppData\LocalLow\AVG SafeGuard toolbar
Datei Geloscht : C:\END
Datei Geloscht : C:\Windows\System32\GroupPolicy\Machine\Registry.pol
Datei Geloscht : C:\Windows\System32\roboot64.exe
Datei Geloscht : C:\Users\Matthias\AppData\Local\AnyProtectScannerSetup.exe
Datei Geloscht : C:\Users\Matthias\AppData\Roaming\aps.uninstall.scan.results

***** [ Tasks ] *****

Task Geloscht : BackgroundContainer Startup Task
Task Geloscht : BrowserProtect
Task Geloscht : EPUpdater

***** [ Verknupfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Geloscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Wert Geloscht : HKCU\Software\Mozilla\Firefox\Extensions [{A7CB7E6E-035E-B31C-D7CC-50F8151A4100}]
Wert Geloscht : HKCU\Software\Mozilla\Firefox\Extensions [{E01D5CDB-4160-4A83-01C7-C98E79981573}]
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\AddonsFramework.DLL
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\ButtonSite.DLL
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\ScriptHost.DLL
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlussel Geloscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlussel Geloscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Schlussel Geloscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Schlussel Geloscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlussel Geloscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlussel Geloscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlussel Geloscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlussel Geloscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlussel Geloscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlussel Geloscht : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Schlussel Geloscht : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Schlussel Geloscht : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlussel Geloscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlussel Geloscht : HKLM\SOFTWARE\Classes\S
Schlussel Geloscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlussel Geloscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlussel Geloscht : HKLM\SOFTWARE\Classes\sim-packages
Schlussel Geloscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlussel Geloscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASAPI32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\SearchSettings_RASAPI32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\SearchSettings_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\VideoPerformerSetup_RASAPI32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\VideoPerformerSetup_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Wert Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlussel Geloscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlussel Geloscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_3d-fahrschule_RASAPI32
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_3d-fahrschule_RASMANCS
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlussel Geloscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Wert Geloscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Geloscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Wert Geloscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlussel Geloscht : HKCU\Software\AVG SafeGuard toolbar
Schlussel Geloscht : HKCU\Software\AVG Secure Search
Schlussel Geloscht : HKCU\Software\GlobalUpdate
Schlussel Geloscht : HKCU\Software\Optimizer Pro
Schlussel Geloscht : HKCU\Software\performersoft llc
Schlussel Geloscht : HKCU\Software\PIP
Schlussel Geloscht : HKCU\Software\PriceMeterLiveUpdate
Schlussel Geloscht : HKCU\Software\PriceMeterUpdater
Schlussel Geloscht : HKCU\Software\Softonic
Schlussel Geloscht : HKCU\Software\systweak
Schlussel Geloscht : HKCU\Software\Tuto4PC
Schlussel Geloscht : HKCU\Software\Tutorials
Schlussel Geloscht : HKCU\Software\AppDataLow\PlurPush
Schlussel Geloscht : HKLM\SOFTWARE\AVG SafeGuard toolbar
Schlussel Geloscht : HKLM\SOFTWARE\GlobalUpdate
Schlussel Geloscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlussel Geloscht : HKLM\SOFTWARE\PIP
Schlussel Geloscht : HKLM\SOFTWARE\PriceMeterLiveUpdate
Schlussel Geloscht : HKLM\SOFTWARE\SupDp
Schlussel Geloscht : HKLM\SOFTWARE\SupTab
Schlussel Geloscht : HKLM\SOFTWARE\supWPM
Schlussel Geloscht : HKLM\SOFTWARE\systweak
Schlussel Geloscht : HKLM\SOFTWARE\Tutorials
Schlussel Geloscht : HKLM\SOFTWARE\Wpm
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Price Meter Updater
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Uncompressor
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0C43FE6B-E881-4AFC-B384-4AEBC90047E8}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{96F1EBE2-6BF6-44E8-84AC-DB577BAD1DD5}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c3e85ee9-5892-4142-b537-bceb3dac4c3d}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ea8fa6be-29be-4af2-9352-841f83215eb0}
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DomaIQ Uninstaller
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeeSimilar
Schlussel Geloscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VIS
Schlussel Geloscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Daten Geloscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~2.DLL
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Installer\Features\B2FD9C0A5B9838449838816A28001F4B
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Installer\Features\B6EF34C0188ECFA43B48A4BE9C00748E
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Installer\Products\B2FD9C0A5B9838449838816A28001F4B
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Installer\Products\B6EF34C0188ECFA43B48A4BE9C00748E
Schlussel Geloscht : HKLM\SOFTWARE\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B

***** [ Browser ] *****

-\\ Internet Explorer v0.0.0.0


-\\ Google Chrome v33.0.1750.117

[ Datei : C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Geloscht [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&q={searchTerms}
Geloscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M5B0147D9-AC31-4D6B-94A8-F03F2BBB43D5&SearchSource=58&CUI=&UM=2&UP=SP5073A688-C9F5-42A2-BE10-818851456BAF&q={searchTerms}&SSPV=
Geloscht [Search Provider] : hxxp://www.sweet-page.com/web/?type=dspp&ts=1405071883&from=cor&uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS&q={searchTerms}
Geloscht [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts=1403428326&from=cor&uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS
Geloscht [Homepage] : hxxp://www.sweet-page.com/?type=hppp&ts=1403428326&from=cor&uid=ST9500325AS_S2W1BXMSXXXXS2W1BXMS

[ Datei : C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Geloscht [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd5hJERdGOuOrL9IB71Es2SnDhvjosDYnqRoUmc4LghP_FA-gMUa4TC8SwYcDMRzcVSPLIOJ3zXa-CCLwcvYy7eI7lMz1O-g5KiIZqj3QitMydhwQbTLDvO0GnY4AdN6x4,&q={searchTerms}

*************************

AdwCleaner[R0].txt - [36612 octets] - [16/08/2014 00:31:40]
AdwCleaner[S0].txt - [35585 octets] - [16/08/2014 00:42:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [35646 octets] ##########

Soeben ist Schritt 2 erfolgreich beendet wurden. Während des Scannes kam ein Fenster auf, wo Open Office Word 2010 offen stehe würde für ein download im Internet. Hab es natürlich mit ''x'' geschlossen.

Ansonsten kommt hier der Bericht:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Matthias on 16.08.2014 at  0:56:27,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho9ACE.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\big fish games"
Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"
Successfully deleted: [Folder] "C:\bigfishcache"
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{0BC2D8D5-3C32-42B8-B19D-CCDC3288071D}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{10B88ABB-4F26-4205-AF7F-C05784B57DCC}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{1BACBA97-99D7-471C-8F91-5B9B8DFA60C2}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{1CA10B2E-9D70-4B3A-8C1A-8FB44A4DF90F}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{27FF3E77-C999-48A1-A52A-D7159C63F66E}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{287399BA-6FB3-487D-A9D5-E5BC6C81D608}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{2895F145-BB81-4941-9C66-C330F9F01D1A}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{313BF547-456F-4125-BEBC-8D3B415CBB49}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{3B524308-CA09-4715-B156-0FDEA5D477D2}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{4DF65535-8442-4252-8D1E-F27B0D59CED0}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{60EF6065-1571-4941-ACB2-9767AAAB42D7}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{63E4EBB9-055B-4BE9-B714-5654C45E579B}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{69DDEF29-6DB7-4EF5-BD77-2B1621EE47DF}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{75B669FE-4F14-4001-95FE-2986A5D6FFFE}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{7F4758C4-40E9-42E3-A7DB-F869A0E28F5A}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{80aa28bd-953b-0d79-ac52-59b01480de54}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{847AD6BC-A77F-415F-8E16-F3792590A18C}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{94B5EBEC-EF29-49E5-A6EA-80CDB87A027D}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{97677A8E-3F5B-4076-8D31-CC024E4695B4}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{A09AFEFC-BF79-4617-861A-0096E8DD5025}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{AC171E13-4215-4DD5-91D0-9C3AC4CD2515}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{B6636D62-0F3B-44B8-9A2E-6CC347B8C6E7}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{D2DDB93D-BB91-48E6-8D7E-13C97D8F53D7}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{E9F43C97-20C5-4132-ACFA-7D5A8149A592}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{F44D86EE-7C7F-4FC5-A8E0-227F25EA3338}
Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{F6045733-E943-44A8-A70A-1EDA7ADC800F}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.08.2014 at  1:03:11,89
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Schritt 3: FRST.txt


FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-08-2014
Ran by Matthias (administrator) on MATTHIAS-PC on 16-08-2014 01:09:32
Running from C:\Users\Matthias\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
() C:\Program Files (x86)\Infigo\InfigoOperator.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\Pmsb.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(MAVIN LOG, S.L.) C:\Program Files (x86)\Infigo\Infigo.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.78.41.0\OverwolfHelper.exe
() C:\Program Files (x86)\Overwolf\0.78.41.0\OverwolfBrowser.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.78.41.0\OverwolfHelper64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-01] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-08-11] (Alcor Micro Corp.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-13] (ELAN Microelectronics Corp.)
HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [PMSpeed] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.EXE [112464 2009-12-04] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-08] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [39712 2014-08-06] (Overwolf LTD)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Scan Buttons] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSB.EXE [202576 2009-12-09] (NewSoft Technology Corporation)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [EPSON BX305 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGJE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1753280 2014-07-16] (Valve Corporation)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [DAEMON Tools Lite] => "I:\stuff\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [puush] => I:\stuff\puush\puush.exe
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe [607032 2014-06-26] (MAVIN LOG, S.L.)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\MountPoints2: {a57065e1-de51-11e2-83e6-14dae9cea621} - J:\launcher.exe
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...0c966feabec1\InprocServer32: [Default-shell32] C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\n. ATTENTION! ====> ZeroAccess/Alureon?
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe ()
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Matthias\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-10]
CHR Extension: (Avira Browser Safety) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-08]
CHR Extension: (Google Wallet) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-08] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)
R2 InfigoOperator; C:\Program Files (x86)\Infigo\InfigoOperator.exe [19768 2014-06-26] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4229912 2011-11-28] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [977184 2014-08-06] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-02-19] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-10-22] (TuneUp Software)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2013-12-17] (Wacom Technology, Corp.)
S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-12] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-26] (DT Soft Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-16] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-03] (INCA Internet Co., Ltd.) [File not signed]
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-05-08] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 EraserUtilDrv11220; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys [X]
S3 X6va006; \??\C:\Users\Matthias\AppData\Local\Temp\006912B.tmp [X]
S3 X6va008; \??\C:\Users\Matthias\AppData\Local\Temp\0085798.tmp [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-16 01:09 - 2014-08-16 01:10 - 00023092 _____ () C:\Users\Matthias\Downloads\FRST.txt
2014-08-16 01:09 - 2014-08-16 01:09 - 00000000 ____D () C:\FRST
2014-08-16 01:07 - 2014-08-16 01:07 - 02100224 _____ (Farbar) C:\Users\Matthias\Downloads\FRST64.exe
2014-08-16 01:03 - 2014-08-16 01:03 - 00003954 _____ () C:\Users\Matthias\Desktop\JRT.txt
2014-08-16 00:56 - 2014-08-16 00:56 - 00000000 ____D () C:\Windows\ERUNT
2014-08-16 00:54 - 2014-08-16 00:54 - 01016261 _____ (Thisisu) C:\Users\Matthias\Downloads\JRT.exe
2014-08-16 00:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-16 00:31 - 2014-08-16 00:42 - 00000000 ____D () C:\AdwCleaner
2014-08-16 00:31 - 2014-08-16 00:31 - 01361203 _____ () C:\Users\Matthias\Downloads\adwcleaner_3.306.exe
2014-08-15 20:47 - 2014-08-15 20:47 - 00567754 _____ () C:\Users\Matthias\Desktop\MbAm.rar.xml
2014-08-15 17:16 - 2014-08-15 17:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Sherlock Holmes -Teile
2014-08-15 17:15 - 2014-08-15 17:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Stronghold-Teile
2014-08-14 21:16 - 2014-08-14 21:17 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Dateien
2014-08-14 21:14 - 2014-08-14 21:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Ordner
2014-08-14 18:06 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 18:06 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-14 18:06 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-14 18:06 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-14 18:05 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 18:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-14 18:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-14 18:05 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 18:04 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-14 18:04 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-14 18:04 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-14 18:04 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-14 18:04 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-14 18:04 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-14 18:04 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-14 18:04 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-14 18:04 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-14 18:04 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-14 18:04 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-14 18:04 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-14 18:04 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-14 18:04 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-14 18:04 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-14 18:04 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-14 18:04 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-14 18:04 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-14 18:04 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-14 18:04 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-14 18:04 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-14 18:04 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-14 18:04 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-14 18:04 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-14 18:04 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-14 18:04 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 18:04 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-14 18:04 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-14 18:04 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-14 18:04 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-14 18:04 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-14 18:04 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-14 18:04 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-14 18:04 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-14 18:04 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-14 18:04 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-14 18:04 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-14 18:04 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-14 18:04 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-14 18:04 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-14 18:04 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-14 18:04 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-14 18:04 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-14 18:04 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-14 18:04 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-14 18:04 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-14 18:04 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-14 18:04 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-14 18:04 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-14 18:04 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-14 18:04 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-14 18:04 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-14 18:04 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-14 18:04 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-14 18:04 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-14 18:04 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-14 18:01 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-14 18:01 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-14 18:01 - 2014-07-16 05:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-14 18:01 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-14 18:01 - 2014-07-16 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-14 18:01 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-14 18:01 - 2014-07-16 04:12 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-14 18:01 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-14 18:01 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-14 18:01 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-14 18:01 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-14 18:01 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-14 18:01 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-14 18:01 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-14 18:01 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-14 18:01 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-14 18:01 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-14 18:01 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-14 15:57 - 2014-08-16 00:50 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-14 15:56 - 2014-08-14 15:56 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-14 15:56 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-14 15:56 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-14 15:54 - 2014-08-14 15:55 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Matthias\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-14 14:48 - 2014-08-14 14:48 - 00001270 _____ () C:\Users\Matthias\Desktop\Revo Uninstaller.lnk
2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-14 14:47 - 2014-08-14 14:47 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Matthias\Downloads\revosetup.exe
2014-08-14 14:38 - 2014-08-14 14:40 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000993 _____ () C:\Users\Matthias\Desktop\Infigo.lnk
2014-08-14 14:38 - 2014-08-14 14:38 - 00000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Program Files (x86)\Infigo
2014-08-14 14:37 - 2014-08-14 14:37 - 07501568 _____ () C:\Users\Matthias\Downloads\Infigo_setup.exe
2014-08-12 21:04 - 2014-08-12 21:04 - 00000932 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\Program Files\CPUID
2014-08-08 16:16 - 2014-08-08 16:22 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-07 02:55 - 2014-08-07 02:55 - 00004122 _____ () C:\Users\Matthias\Documents\test.wav.wlmp
2014-08-06 19:48 - 2014-08-07 01:37 - 00000000 ____D () C:\Users\Matthias\Documents\Detektic Conan Projekt
2014-08-06 19:48 - 2014-08-06 19:50 - 00000000 ____D () C:\Users\Matthias\Documents\Cha-Cha-Cha
2014-08-03 17:08 - 2014-08-03 17:08 - 00000222 _____ () C:\Users\Matthias\Desktop\The Forest.url

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-16 01:10 - 2014-08-16 01:09 - 00023092 _____ () C:\Users\Matthias\Downloads\FRST.txt
2014-08-16 01:09 - 2014-08-16 01:09 - 00000000 ____D () C:\FRST
2014-08-16 01:07 - 2014-08-16 01:07 - 02100224 _____ (Farbar) C:\Users\Matthias\Downloads\FRST64.exe
2014-08-16 01:03 - 2014-08-16 01:03 - 00003954 _____ () C:\Users\Matthias\Desktop\JRT.txt
2014-08-16 00:56 - 2014-08-16 00:56 - 00000000 ____D () C:\Windows\ERUNT
2014-08-16 00:56 - 2012-04-01 12:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-16 00:55 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-16 00:55 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-16 00:54 - 2014-08-16 00:54 - 01016261 _____ (Thisisu) C:\Users\Matthias\Downloads\JRT.exe
2014-08-16 00:53 - 2011-08-31 16:40 - 01579043 _____ () C:\Windows\WindowsUpdate.log
2014-08-16 00:50 - 2014-08-14 15:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-16 00:49 - 2012-07-26 12:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-16 00:47 - 2011-12-17 01:24 - 00000000 ____D () C:\Users\Matthias\AppData\Local\Overwolf
2014-08-16 00:46 - 2013-07-22 22:48 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Dropbox
2014-08-16 00:46 - 2011-12-20 21:31 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\.oit
2014-08-16 00:45 - 2011-10-25 02:22 - 00000000 ___HD () C:\ASUS.DAT
2014-08-16 00:44 - 2011-04-13 03:39 - 02309148 _____ () C:\Windows\PFRO.log
2014-08-16 00:44 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-16 00:44 - 2009-07-14 06:51 - 00182370 _____ () C:\Windows\setupact.log
2014-08-16 00:42 - 2014-08-16 00:31 - 00000000 ____D () C:\AdwCleaner
2014-08-16 00:31 - 2014-08-16 00:31 - 01361203 _____ () C:\Users\Matthias\Downloads\adwcleaner_3.306.exe
2014-08-15 22:21 - 2011-12-13 17:49 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Skype
2014-08-15 20:47 - 2014-08-15 20:47 - 00567754 _____ () C:\Users\Matthias\Desktop\MbAm.rar.xml
2014-08-15 20:25 - 2012-02-26 21:18 - 00000000 ____D () C:\Users\Matthias\AppData\Local\CrashDumps
2014-08-15 20:10 - 2011-10-25 02:22 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-08-15 20:07 - 2009-07-14 06:45 - 00314176 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-15 17:16 - 2014-08-15 17:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Sherlock Holmes -Teile
2014-08-15 17:16 - 2014-08-15 17:15 - 00000000 ____D () C:\Users\Matthias\Desktop\Stronghold-Teile
2014-08-15 14:59 - 2013-10-25 15:15 - 00000000 ____D () C:\Program Files (x86)\appbarioDE_1
2014-08-14 21:17 - 2014-08-14 21:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Dateien
2014-08-14 21:16 - 2014-08-14 21:14 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Ordner
2014-08-14 19:20 - 2013-07-21 19:17 - 00000000 ____D () C:\Users\Matthias\.gimp-2.8
2014-08-14 18:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-14 18:14 - 2013-08-15 02:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 18:10 - 2011-12-17 15:15 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 18:04 - 2014-05-07 01:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 17:08 - 2011-08-31 16:54 - 00002902 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-08-14 17:08 - 2011-08-31 16:54 - 00001973 _____ () C:\Windows\system32\ServiceFilter.ini
2014-08-14 17:03 - 2012-07-30 20:53 - 00000000 ____D () C:\ProgramData\YTD YouTube Downloader & Converter
2014-08-14 16:04 - 2012-07-31 00:15 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\hellomoto
2014-08-14 15:57 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-08-14 15:56 - 2014-08-14 15:56 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2013-04-01 20:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-14 15:55 - 2014-08-14 15:54 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Matthias\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-14 15:41 - 2013-07-22 23:48 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\puush
2014-08-14 15:31 - 2012-06-29 22:32 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-08-14 15:06 - 2012-12-04 20:02 - 00000000 ____D () C:\Program Files (x86)\EA Games
2014-08-14 14:48 - 2014-08-14 14:48 - 00001270 _____ () C:\Users\Matthias\Desktop\Revo Uninstaller.lnk
2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-14 14:47 - 2014-08-14 14:47 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Matthias\Downloads\revosetup.exe
2014-08-14 14:40 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000993 _____ () C:\Users\Matthias\Desktop\Infigo.lnk
2014-08-14 14:38 - 2014-08-14 14:38 - 00000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Program Files (x86)\Infigo
2014-08-14 14:37 - 2014-08-14 14:37 - 07501568 _____ () C:\Users\Matthias\Downloads\Infigo_setup.exe
2014-08-14 09:09 - 2009-07-14 04:34 - 00000505 _____ () C:\Windows\win.ini
2014-08-13 11:46 - 2012-02-26 21:14 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\TS3Client
2014-08-13 10:36 - 2012-02-26 21:13 - 00000000 ____D () C:\Users\Matthias\AppData\Local\TeamSpeak 3 Client
2014-08-13 02:22 - 2012-12-12 22:06 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\SoftGrid Client
2014-08-12 21:04 - 2014-08-12 21:04 - 00000932 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\Program Files\CPUID
2014-08-12 16:08 - 2011-12-17 01:26 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2014-08-12 00:22 - 2013-10-25 15:13 - 00050976 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-08-08 16:22 - 2014-08-08 16:16 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-08 16:22 - 2014-03-05 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-08 16:22 - 2014-03-05 16:55 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-08 16:22 - 2014-02-16 13:46 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-08 16:16 - 2014-03-05 16:55 - 00000000 ____D () C:\ProgramData\Avira
2014-08-07 18:30 - 2011-12-13 17:49 - 00000000 ____D () C:\ProgramData\Skype
2014-08-07 04:06 - 2014-08-14 18:01 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-14 18:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-07 02:57 - 2013-08-25 18:12 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Audacity
2014-08-07 02:55 - 2014-08-07 02:55 - 00004122 _____ () C:\Users\Matthias\Documents\test.wav.wlmp
2014-08-07 01:37 - 2014-08-06 19:48 - 00000000 ____D () C:\Users\Matthias\Documents\Detektic Conan Projekt
2014-08-07 00:08 - 2012-04-19 19:34 - 00997888 ___SH () C:\Users\Matthias\Documents\Thumbs.db
2014-08-06 20:19 - 2012-04-11 17:14 - 00000000 ____D () C:\Users\Matthias\Documents\Sonstiges
2014-08-06 19:51 - 2011-11-06 22:14 - 00000000 ____D () C:\Users\Matthias\Documents\Schule
2014-08-06 19:50 - 2014-08-06 19:48 - 00000000 ____D () C:\Users\Matthias\Documents\Cha-Cha-Cha
2014-08-06 19:49 - 2012-01-26 18:22 - 00000000 ____D () C:\Users\Public\Documents\Blizzard Entertainment
2014-08-06 19:34 - 2012-01-23 18:26 - 00000000 ____D () C:\Users\Matthias\AppData\Local\Windows Live
2014-08-03 17:08 - 2014-08-03 17:08 - 00000222 _____ () C:\Users\Matthias\Desktop\The Forest.url
2014-08-03 17:08 - 2012-07-26 12:24 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-08-03 15:09 - 2011-12-13 17:49 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-02 15:18 - 2012-01-01 16:51 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 01:41 - 2014-08-14 18:04 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-14 18:04 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-25 16:52 - 2014-08-14 18:04 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 16:02 - 2014-08-14 18:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 16:01 - 2014-08-14 18:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 15:51 - 2014-08-14 18:04 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:30 - 2014-08-14 18:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 15:28 - 2014-08-14 18:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:28 - 2014-08-14 18:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 15:25 - 2014-08-14 18:04 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-14 18:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 15:11 - 2014-08-14 18:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 15:10 - 2014-08-14 18:04 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 15:04 - 2014-08-14 18:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-25 15:03 - 2014-08-14 18:04 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 15:00 - 2014-08-14 18:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 15:00 - 2014-08-14 18:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:59 - 2014-08-14 18:04 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:47 - 2014-08-14 18:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 14:40 - 2014-08-14 18:04 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-14 18:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:34 - 2014-08-14 18:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-25 14:34 - 2013-03-14 01:00 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 14:34 - 2011-04-13 04:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-25 14:33 - 2014-08-14 18:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-14 18:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-14 18:04 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-14 18:04 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-14 18:04 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:19 - 2014-08-14 18:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 14:18 - 2014-08-14 18:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-25 14:17 - 2014-08-14 18:04 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:17 - 2014-08-14 18:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-25 14:12 - 2014-08-14 18:04 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-25 14:10 - 2014-08-14 18:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:10 - 2014-08-14 18:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-25 14:08 - 2014-08-14 18:04 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-14 18:04 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-14 18:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-14 18:04 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-14 18:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-14 18:04 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-14 18:04 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:39 - 2014-08-14 18:04 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:36 - 2014-08-14 18:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-25 13:34 - 2014-08-14 18:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-14 18:04 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-14 18:04 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-14 18:04 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:07 - 2014-08-14 18:04 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:07 - 2014-08-14 18:04 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-14 18:04 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-14 18:04 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-14 18:04 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-14 18:04 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-14 18:04 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-14 18:04 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-14 18:04 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-25 02:17 - 2013-04-06 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

ZeroAccess:
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\@
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\U\80000064.@

Some content of TEMP:
====================
C:\Users\Matthias\AppData\Local\Temp\avgnt.exe
C:\Users\Matthias\AppData\Local\Temp\InstallFlashPlayer.exe
C:\Users\Matthias\AppData\Local\Temp\Quarantine.exe
C:\Users\Matthias\AppData\Local\Temp\uninst1.exe
C:\Users\Matthias\AppData\Local\Temp\_is236E.exe
C:\Users\Matthias\AppData\Local\Temp\_is4659.exe
C:\Users\Matthias\AppData\Local\Temp\_is5066.exe
C:\Users\Matthias\AppData\Local\Temp\_is90EC.exe
C:\Users\Matthias\AppData\Local\Temp\_is94C6.exe
C:\Users\Matthias^2\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-09 17:36

==================== End Of Log ============================

--- --- ---

--- --- ---

Math20 16.08.2014 00:16

Und jetzt additional:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-08-2014
Ran by Matthias at 2014-08-16 01:11:46
Running from C:\Users\Matthias\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}) (Version: 11.0 - Adobe Systems, Inc.)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{878CADF7-5BD6-4A29-A6F4-AC51C0CE8068}) (Version: 1.8.17.26026 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.8.17.26026 - Alcor Micro Corp.) Hidden
AquaSoft "DiaShow 7 für YouTube" (HKLM-x32\...\{9DFDD0C5-5AC1-484B-ACF8-0F3E1041750B}_is1) (Version: 7.7.11.35343 - AquaSoft GmbH)
ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS)
ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.1.0 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.21 - ASUS)
ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.43 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0031 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus)
ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 3.0.84.161 - eCareme Technologies, Inc.)
AsusScr_K3 Series_ENG_Basic (HKLM-x32\...\AsusScr_K3 Series_ENG_Basic) (Version: 1.0.0001 - ASUS)
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.4.617 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0008 - ASUS)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.3.8518 - )
Avira (HKLM-x32\...\{9590977b-7b6f-467e-a11a-efa1fae804da}) (Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira)
Bastion (HKLM-x32\...\Steam App 107100) (Version:  - Supergiant Games)
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
Bookworm Deluxe (HKLM-x32\...\Bookworm Deluxe) (Version:  - Oberon Media Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Das Geheimnis des Persischen Teppichs (HKLM-x32\...\{1024E85C-5E5F-4607-A0F4-3E0576A00BC8}) (Version: 1.00.0777 - Frogwares)
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
Dust: An Elysian Tail (HKLM-x32\...\Steam App 236090) (Version:  - Humble Hearts LLC)
EPSON BX305 Series Handbuch (HKLM-x32\...\EPSON BX305 Series Manual) (Version:  - )
EPSON BX305 Series Printer Uninstall (HKLM\...\EPSON BX305 Series) (Version:  - SEIKO EPSON Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{310C1558-F6B5-4889-98B0-7471966BA7F2}) (Version: 2.2.3.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.10.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
ETDWare PS/2-X64 8.0.5.0_WHQL (HKLM\...\Elantech) (Version: 8.0.5.0 - ELAN Microelectronic Corp.)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.8 - ASUS)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Franzis Führerschein Trainer (HKLM-x32\...\ffs2011_is1) (Version: 1.0 - Franzis Verlag GmbH, Poing)
Free YouTube Download version 3.1.31.706 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.31.706 - DVDVideoSoft Ltd.)
Galeria de Fotografias (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Game Park Console (HKLM-x32\...\{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1) (Version: 6.2.1.1 - Oberon Media, Inc.)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden
Governor of Poker (HKLM-x32\...\Governor of Poker) (Version:  - Oberon Media Inc.)
Hotel Dash Suite Success (HKLM-x32\...\Hotel Dash Suite Success) (Version:  - Oberon Media Inc.)
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.28.01 - Hyperionics Technology LLC)
Infigo (HKLM-x32\...\Infigo) (Version: 1.21.0.34 - MAVIN LOG, S.L.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170510}) (Version: 1.7.0.510 - Oracle)
Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.220 - Oracle)
Jewel Quest 3 (HKLM-x32\...\Jewel Quest 3) (Version:  - Oberon Media Inc.)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Luxor 3 (HKLM-x32\...\Luxor 3) (Version:  - Oberon Media Inc.)
Mahjongg dimensions (HKLM-x32\...\Mahjongg dimensions) (Version:  - Oberon Media Inc.)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Meine Dienste Software (HKLM\...\Meine Dienste Software) (Version: 2.0.5.0 - Telekom)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version:  - )
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
MixMeister BPM Analyzer 1.0 (HKLM-x32\...\MixMeister BPM Analyzer_is1) (Version:  - MixMeister Technology LLC)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
NC Launcher (GameForge) (HKLM-x32\...\NCLauncher_GameForge) (Version:  - NCsoft)
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)
Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Nuance PDF Reader (HKLM-x32\...\{B480904D-F73F-4673-B034-8A5F492C9184}) (Version: 6.00.0041 - Nuance Communications, Inc.)
NVIDIA Grafiktreiber 311.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.44 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.11.3 (Version: 1.11.3 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}) (Version: 9.12.0213 - NVIDIA Corporation)
NVIDIA Systemsteuerung 311.44 (Version: 311.44 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Opera 12.16 (HKLM-x32\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA)
osu! (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.78.41.0 - Overwolf Ltd.)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version:  - )
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Presto! PageManager 9 (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.00.11 - Newsoft Technology Corporation)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.)
Raccolta foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.9.0 - Ralink)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6324 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Sherlock Holmes - Das Geheimnis der Mumie (HKLM-x32\...\{240B5777-0825-4519-A5C3-06C809CB4DB5}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes - Das Geheimnis des silbernen Ohrrings (HKLM-x32\...\{E2FA0CFD-A441-4DFC-8DC2-D8D03C463F90}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes - Die Spur der Erwachten Remastered (HKLM-x32\...\{760BF94F-4FAF-4EF6-96D9-B55B12993992}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes jagt Arsene Lupin Remastered (HKLM-x32\...\{09F3B8D4-2CED-464A-92E3-7FD93200FB58}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes jagt Jack the Ripper (HKLM-x32\...\{DA971D8F-256B-41E6-9E79-7A61F3224297}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes und der Hund der Baskervilles (HKLM-x32\...\{A8323B82-83A1-40B3-B6DC-AE1F43714428}) (Version: 1.00.0777 - Frogwares)
Shopping Helper Smartbar Engine (HKCU\...\{566af49c-e6df-4693-a0ee-3f4a40e3eb65}) (Version: 11.49.63.16848 - ReSoft Ltd.) <==== ATTENTION
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.10.9560 - Skype Technologies S.A.)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
StepMania v5.0 beta 2a (remove only) (HKLM-x32\...\StepMania 5) (Version:  - StepMania Team)
Stronghold 2 Deluxe (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.100 - Firefly Studios)
Stronghold 3 (HKLM-x32\...\Steam App 47400) (Version:  - Firefly Studios)
Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)
syncables desktop SE (HKLM-x32\...\{341697D8-9923-445E-B42A-529E5A99CB7A}) (Version: 5.5.746.11492 - syncables)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
TuneUp Utilities 2012 (HKLM-x32\...\TuneUp Utilities 2012) (Version: 12.0.3600.151 - TuneUp Software)
TuneUp Utilities 2012 (x32 Version: 12.0.3600.151 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.151 - TuneUp Software) Hidden
Umineko no Naku Koro ni English v4.4 (HKCU\...\Umineko no Naku Koro ni English) (Version:  - )
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.3-2 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.1 - ASUS)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS)
World of Goo (HKLM-x32\...\World of Goo) (Version:  - Oberon Media Inc.)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
YGOPro DevPro (HKLM-x32\...\{F4C6C412-BBB1-4084-906B-F603DC3AB673}) (Version: 1.9.9 - DevPro)
YGOPro DevPro version 1.9.9 r0 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.9 r0 - YGOPro DevPro Online)
YTD Video Downloader 3.9.6 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 3.9.6 - GreenTree Applications SRL)
Συλλογή φωτογραφιών (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3508.0205 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
גלריית התמונות (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
معرض الصور (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Matthias\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32 -> C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\n. No File
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

==================== Restore Points  =========================

14-08-2014 16:51:39 Windows Modules Installer

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {004BE347-EAC2-44B4-B0FE-7C4861807AF3} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {1E7AFAC3-212E-4D58-AD96-F8F8098D5E94} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-12-18] (ASUSTek Computer Inc.)
Task: {29DB8387-B551-4B77-9A9B-55199AA8FCDF} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {2B7FEF93-2666-476A-95B4-72F547E7E207} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {3A6A9222-FC6D-4F4A-A46B-46378CCD48F0} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {6CF4648D-F7AE-4390-9BBB-E0B75D010955} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {AE6154AC-6A60-42C0-BC06-16BAB610AAD3} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-02] (ASUS)
Task: {B58344CE-02F2-4ABE-8163-F35999078A2E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: {C1A8CBF3-8059-42B8-B2AA-4773ABE188E4} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2014-08-06] (Overwolf LTD)
Task: {DADB8F15-52DA-4E9A-9698-C2FCADE8517B} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {DB213664-5927-42E0-80B6-75929BECA9B0} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe [2013-10-22] (TuneUp Software)
Task: {E12FC1C2-FDC6-41EF-BA46-7EDB81A0AEDA} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AIRecoveryRemind.job => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe

==================== Loaded Modules (whitelisted) =============

2014-06-03 01:59 - 2013-03-14 08:28 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-08-31 16:54 - 2007-11-30 20:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
2010-04-03 04:21 - 2008-10-01 08:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2014-06-26 12:34 - 2014-06-26 12:34 - 00019768 _____ () C:\Program Files (x86)\Infigo\InfigoOperator.exe
2011-05-31 05:23 - 2011-01-27 02:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-09-24 01:53 - 2010-09-24 01:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2013-02-19 19:55 - 2013-02-19 20:03 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-08-06 13:45 - 2014-08-06 13:45 - 00067360 _____ () C:\Program Files (x86)\Overwolf\0.78.41.0\OverwolfBrowser.exe
2014-02-18 08:19 - 2013-12-17 03:17 - 01356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2014-06-26 12:34 - 2014-06-26 12:34 - 00047616 _____ () C:\Program Files (x86)\Infigo\EventsProvider.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2014-08-06 13:42 - 2014-08-06 13:42 - 00025600 _____ () C:\Program Files (x86)\Overwolf\0.78.41.0\CoreAudioApi.dll
2014-08-06 13:42 - 2014-08-06 13:42 - 38713856 _____ () C:\Program Files (x86)\Overwolf\0.78.41.0\libcef.DLL
2011-12-20 21:26 - 2009-07-08 15:23 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PerformOcr.dll
2011-12-20 21:26 - 2009-12-04 18:21 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMISM.dll
2011-12-20 21:26 - 2009-11-20 14:20 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMCommon.dll
2011-12-20 21:26 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PHooKDlg.dll
2011-12-20 21:26 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\Qem.dll
2011-12-20 21:26 - 2009-12-08 11:51 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\ScanModule.dll
2011-12-20 21:26 - 2009-09-02 10:25 - 00098304 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\CategoryManager.dll
2011-12-20 21:26 - 2009-11-27 18:50 - 00135168 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSet.dll
2011-12-20 21:26 - 2009-12-18 20:10 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSave.dll
2011-12-20 21:26 - 2009-10-16 16:04 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMDB_N.dll
2011-12-20 21:26 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\FT.dll
2011-12-20 21:26 - 2009-12-18 17:12 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMINSO.dll
2011-12-20 21:26 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMANO.dll
2011-12-20 21:26 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\ComClass.dll
2011-12-20 21:26 - 2007-12-20 15:37 - 00176128 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\DocCate.dll
2011-12-20 21:26 - 2009-12-07 14:55 - 00253952 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMScnSet.dll
2011-12-20 21:26 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\NetFun2k.dll
2011-01-18 22:21 - 2011-01-18 22:21 - 00204800 _____ () C:\Program Files (x86)\asus\VirtualCamera\virtualCamera.ax
2014-06-26 12:34 - 2014-06-26 12:34 - 00098304 _____ () C:\Program Files (x86)\Infigo\InfigoSkin.dll
2011-12-20 21:26 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\nsSign.dll
2011-12-20 21:26 - 2009-12-07 12:07 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMTree.dll
2011-12-20 21:26 - 2008-12-12 17:52 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMProp.dll
2011-12-20 21:26 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMVoice.dll
2011-12-20 21:26 - 2008-12-12 18:00 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\OutlookVBA.dll
2011-12-20 21:26 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMAppBar.dll
2011-12-20 21:26 - 2009-12-04 18:21 - 04567040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMView.dll
2011-12-20 21:26 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\NsOEMKey.dll
2011-12-20 21:26 - 2009-11-11 18:21 - 00450560 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMPageVW.dll
2011-12-20 21:26 - 2009-11-11 18:20 - 00098304 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMDocVW.dll
2011-12-20 21:26 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMApSet.dll
2011-12-20 21:26 - 2009-11-20 12:30 - 01032192 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\SlideBarDLL.dll
2011-12-20 21:26 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMAnoSet.dll
2011-12-20 21:26 - 2009-11-09 19:35 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMImgVW.dll
2011-12-20 21:26 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMIEVW.dll
2011-12-20 21:26 - 2009-07-14 14:25 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMPDFView.dll
2011-12-20 21:26 - 2009-10-22 18:50 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMStatus.dll
2011-12-20 21:26 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\Import.dll
2011-12-20 21:26 - 2008-04-24 11:46 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMImageSplitter.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2014-08-08 16:16 - 2014-07-24 11:50 - 00049744 _____ () C:\Users\Matthias\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-07-24 11:50 - 2014-07-24 11:50 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2011-01-17 17:19 - 2011-12-20 21:59 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2014-07-24 11:49 - 2014-07-24 11:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-08-06 13:42 - 2014-08-06 13:42 - 00514528 _____ () C:\Program Files (x86)\Overwolf\0.78.41.0\libglesv2.dll
2014-08-06 13:42 - 2014-08-06 13:42 - 00105952 _____ () C:\Program Files (x86)\Overwolf\0.78.41.0\libegl.dll
2014-02-21 23:26 - 2014-02-20 03:02 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll
2014-02-21 23:26 - 2014-02-20 03:02 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\libglesv2.dll
2014-02-21 23:26 - 2014-02-20 03:02 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\libegl.dll
2014-02-21 23:26 - 2014-02-20 03:03 - 04060488 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll
2014-02-21 23:26 - 2014-02-20 03:03 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
2014-02-21 23:26 - 2014-02-20 03:02 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:6764D965
AlternateDataStreams: C:\ProgramData\Temp:81F83028

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

==================== Faulty Device Manager Devices =============

Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28x
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2011-10-24 19:45:28.732
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:45:27.780
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:45:26.641
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:45:26.049
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:40:35.576
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:40:35.233
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:40:34.859
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:40:34.406
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Percentage of memory in use: 33%
Total physical RAM: 8104.14 MB
Available physical RAM: 5421.18 MB
Total Pagefile: 16206.47 MB
Available Pagefile: 13037.51 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:6.55 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:254.45 GB) (Free:220.97 GB) NTFS
Drive e: (SDATA1) (Fixed) (Total:232.87 GB) (Free:232.77 GB) NTFS
Drive f: (SDATA2) (Fixed) (Total:232.89 GB) (Free:0 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: AA9693FE)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=186 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=254 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: BBC58B91)
Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS)

==================== End Of Log ============================


cosinus 16.08.2014 19:38

Zitat:

ZeroAccess:
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\@
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\U\80000064.@
Kein Wunder dass du Probleme hast mit dem Windows-Explorer. Hast nen ZeroAccess drauf. Daher sprech ich mal ne allgemeine Warnung aus:

Lesestoff:
Rootkit-Warnung
Dein Computer wurde mit einem besonderen Schädling infiziert, der sich vor herkömmlichen Virenscannern und dem Betriebssystem selbst verstecken kann. Zusätzlich hat so ein Schädling meist auch Backdoor-Funktionalität, reißt also ganz bewußt Löcher durch alle Schutzmaßnahmen, damit er weiteren Schadcode nachladen oder die Daten, die er so sammelt, an die "bösen Jungs" weiterleiten kann. Was heißt das jetzt für dich?
  • Entscheide bitte ganz bewußt, ob du mit der Bereinigung fortfahren möchtest. Ein einmal derartig kompromittiertes System kann man niemals mit 100%iger Sicherheit wieder absichern. Auch wenn wir gute Chancen haben, deinen Computer zu bereinigen, kann es dennoch möglich sein, dass uns am Ende nur die Neuinstallation bleibt.

  • Wenn du mit diesem Computer beispielsweise Onlinebanking machst, dann solltest du zumindest dein Passwort von deiner Bank ändern lassen, wenn du ein ansonsten sicheres Verfahren wie beispielsweise "chip-TAN-comfort" nutzt. Hast du noch alte TAN-Bögen auf Papierbasis? Dann ist es höchste Zeit dich bei deiner Bank zu melden und notfalls das Konto temporär sperren zu lassen. Der Sperrnotruf 116 116 von www.sperr-notruf.de kann Tag und Nacht dafür benutzt werden.

  • Hast du ansonsten sensible Daten auf deinem Computer, dann solltest du auch darüber nachdenken, wie du damit umgehst, da sie sich praktisch "jeder" ansehen konnte.
Teile mir also mit, wie du dich entschieden hast.

Math20 16.08.2014 19:45

Jetzt wird mir auch so einiges klar, wie es unter anderem dazu kam, dass ich vor ein paar Jahren den Rechner hochfahren wollte, eine Naricht von der Bundespolizei kam etc. mit Pronographsichen Inhalten usw., was aber Schwachsinn ist. Habe damals ein Wiederherstellungspunkt genutzt, und dann ging es einigrmaßen wieder.

Ich möchte sehen wie man versucht dies wegzubekommen,ohne Neuinstellation, da ich sowieso nichts wichtiges auf dem Laptop betreibe. Online Banking schon gar nicht.

cosinus 16.08.2014 19:46

Dann bitte jetzt Combofix ausführen:

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


Math20 16.08.2014 20:33

Code:

ComboFix 14-08-15.01 - Matthias 16.08.2014  20:59:14.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.932.81.1031.18.8104.5232 [GMT 2:00]
Running from: c:\users\Matthias\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((  Other Deletions  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Windows Live\Messenger\msacm32.dll
c:\users\Matthias\4.0
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_locales\de\messages.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_locales\en\messages.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_locales\en_US\messages-sim.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_locales\en_US\messages.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_locales\es\messages.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_locales\fr\messages.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_locales\it\messages.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_locales\pt_BR\messages.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\_metadata\verified_contents.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\api-rules.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\app.css
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\blocked.css
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\content\base\search.css
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\content\content.css
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\content\engines\google.css
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\content\search.css
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\fonts\KievitWebPro-Bold.eot
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\fonts\KievitWebPro-Bold.woff
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\fonts\KievitWebPro-Light.eot
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\fonts\KievitWebPro-Light.woff
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\fonts\KievitWebPro.eot
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\fonts\KievitWebPro.woff
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\animated-overlay.gif
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_diagonals-thick_18_b81900_40x40.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_diagonals-thick_20_666666_40x40.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_flat_10_000000_40x100.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_glass_100_f6f6f6_1x400.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_glass_100_fdf5ce_1x400.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_glass_65_ffffff_1x400.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_gloss-wave_35_f6a828_500x100.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_highlight-soft_100_eeeeee_1x100.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-bg_highlight-soft_75_ffe45c_1x100.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-icons_222222_256x240.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-icons_228ef1_256x240.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-icons_ef8c08_256x240.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-icons_ffd27a_256x240.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\css\images\ui-icons_ffffff_256x240.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\data\effective_tld_names.dat.txt
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\html\app.html
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\html\blocked.html
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\html\locale.html
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\html\standalone.html
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\html\templates\indexed.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\html\top.html
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\i18n\de-DE.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\i18n\en-US.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\i18n\es-ES.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\i18n\fr-FR.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\i18n\it-IT.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\i18n\pt-BR.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\abs-attention.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\abs_avira_umbrella.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\abs_avira_umbrella_white.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\absb-attention.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\absb-checks.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\absb-close.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ad-info.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\avira_icon128.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\avira_icon16.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\avira_icon24.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\avira_icon48.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\avira_logo.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\avira_logo.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\check-ck.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\check-uck.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\check.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\classification_safe.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\classification_safe_lg.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\classification_unsafe.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\classification_unsafe_lg.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\close-offers-bar.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\close.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\cross-icon.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_close.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_close_dark.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_close_white.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_feedback.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_logo_icon.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_safe.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_search_dark.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_search_dark.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_search_light.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_search_light.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_search_normal.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\dash_unsafe.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\expand-arrow.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\folder_icon.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ftu\abs-ftu-1.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ftu\abs-ftu-2.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ftu\abs-ftu-3.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ftu\abs-ftu-4.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ftu\abs-ftu-5.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ftu\abs-ftu-offers.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ftu\avira_browser.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\ftu\tour-card.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\info-icon.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\info_empty.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\info_full.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\offers-rating.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\offers-tests\base-logo.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\offers-tests\getgoods-logo.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\offers-tests\samsung-black.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\offers-tests\samsung-cover.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\offers-tests\smart-logo.jpg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\offers_search.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\private-id-icon.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\safeBigIcon.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\scroll-down.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\scroll-down.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\search_avira_logo.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\search_avira_logo.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\serp_info_safe.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\serp_info_unsafe.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\settings-24.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\switch-off.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\switch-on.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\tour-play.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\trackers_icon.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\trackers_icon_lg.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\trackers_icon_nb.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\unsafeBigIcon.png
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\img\white_check.svg
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\js\bunches\app.js
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\js\bunches\background.js
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\js\bunches\blocked.js
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\js\bunches\content.js
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\js\bunches\content_start.js
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\js\bunches\locale.js
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\js\bunches\search.js
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\js\bunches\standalone.js
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\manifest.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.2.3_1\package_windows.json
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\000081.ldb
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\000083.ldb
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\000089.ldb
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\000090.log
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\CURRENT
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\LOCK
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\LOG
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\LOG.old
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flliilndjeohchalpbbcdekjklbdgfkk\MANIFEST-000088
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_flliilndjeohchalpbbcdekjklbdgfkk_0.localstorage-journal
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_flliilndjeohchalpbbcdekjklbdgfkk_0.localstorage
c:\users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Matthias\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\users\Matthias\AppData\Roaming\Ehalqa
c:\users\Matthias\AppData\Roaming\Ehalqa\uliv.ihz
c:\users\Matthias\AppData\Roaming\Ogfayk
c:\users\Matthias\AppData\Roaming\Ogfayk\urse.quy
c:\users\Matthias\AppData\Roaming\Owanc
c:\users\Matthias\AppData\Roaming\Owanc\wucey.yli
c:\users\Matthias\AppData\Roaming\Reig
c:\users\Matthias\AppData\Roaming\Reig\ekonq.yse
c:\users\Matthias\AppData\Roaming\Riawax
c:\users\Matthias\AppData\Roaming\Riawax\uvolo.oli
c:\users\Matthias\AppData\Roaming\Uwmove
c:\users\Matthias\AppData\Roaming\Uwmove\gugu.iqu
c:\windows\msvcr71.dll
.
.
(((((((((((((((((((((((((  Files Created from 2014-07-16 to 2014-08-16  )))))))))))))))))))))))))))))))
.
.
2014-08-16 19:09 . 2014-08-16 19:09        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2014-08-16 19:09 . 2014-08-16 19:09        --------        d-----w-        c:\users\Matthias^2\AppData\Local\temp
2014-08-16 19:09 . 2014-08-16 19:09        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-08-15 23:09 . 2014-08-15 23:15        --------        d-----w-        C:\FRST
2014-08-15 22:56 . 2014-08-15 22:56        --------        d-----w-        c:\windows\ERUNT
2014-08-15 22:32 . 2010-08-30 06:34        536576        ----a-w-        c:\windows\SysWow64\sqlite3.dll
2014-08-15 22:31 . 2014-08-15 22:42        --------        d-----w-        C:\AdwCleaner
2014-08-14 16:06 . 2014-03-09 21:48        171160        ----a-w-        c:\windows\system32\infocardapi.dll
2014-08-14 16:06 . 2014-03-09 21:48        1389208        ----a-w-        c:\windows\system32\icardagt.exe
2014-08-14 16:06 . 2014-03-09 21:47        99480        ----a-w-        c:\windows\SysWow64\infocardapi.dll
2014-08-14 16:06 . 2014-03-09 21:47        619672        ----a-w-        c:\windows\SysWow64\icardagt.exe
2014-08-14 16:05 . 2014-06-30 22:24        8856        ----a-w-        c:\windows\system32\icardres.dll
2014-08-14 16:05 . 2014-06-30 22:14        8856        ----a-w-        c:\windows\SysWow64\icardres.dll
2014-08-14 16:05 . 2014-06-06 06:16        35480        ----a-w-        c:\windows\SysWow64\TsWpfWrp.exe
2014-08-14 16:05 . 2014-06-06 06:12        35480        ----a-w-        c:\windows\system32\TsWpfWrp.exe
2014-08-14 16:01 . 2014-07-16 02:12        3163648        ----a-w-        c:\windows\system32\win32k.sys
2014-08-14 13:57 . 2014-08-16 19:15        122584        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-14 13:56 . 2014-08-14 13:56        --------        d-----w-        c:\program files (x86)\Malwarebytes Anti-Malware
2014-08-14 13:56 . 2014-05-12 05:26        63704        ----a-w-        c:\windows\system32\drivers\mwac.sys
2014-08-14 13:56 . 2014-05-12 05:26        91352        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys
2014-08-14 13:56 . 2014-05-12 05:25        25816        ----a-w-        c:\windows\system32\drivers\mbam.sys
2014-08-14 12:48 . 2014-08-14 12:48        --------        d-----w-        c:\program files (x86)\VS Revo Group
2014-08-14 12:38 . 2014-08-14 12:40        --------        d-----w-        c:\users\Matthias\AppData\Roaming\Infigo
2014-08-14 12:38 . 2014-08-14 12:38        --------        d-----w-        c:\program files (x86)\Infigo
2014-08-12 19:04 . 2014-08-12 19:04        --------        d-----w-        c:\program files\CPUID
2014-08-07 16:30 . 2014-08-07 16:30        --------        d-----w-        c:\program files (x86)\Common Files\Skype
.
.
.
((((((((((((((((((((((((((((((((((((((((  Find3M Report  ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-15 18:10 . 2011-10-25 00:22        45056        ----a-w-        c:\windows\system32\acovcnt.exe
2014-08-14 16:10 . 2011-12-17 13:15        99218768        ----a-w-        c:\windows\system32\MRT.exe
2014-08-11 22:22 . 2013-10-25 13:13        50976        ----a-w-        c:\windows\system32\drivers\avgtpx64.sys
2014-07-10 11:02 . 2014-03-13 15:01        42040        ----a-w-        c:\windows\system32\drivers\avnetflt.sys
2014-06-24 11:59 . 2014-03-05 14:55        117712        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2014-06-18 02:18 . 2014-07-09 15:05        692736        ----a-w-        c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 15:05        646144        ----a-w-        c:\windows\SysWow64\osk.exe
2014-06-06 10:10 . 2014-07-09 15:05        624128        ----a-w-        c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 15:05        509440        ----a-w-        c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 15:02        1460736        ----a-w-        c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 15:02        22016        ----a-w-        c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 15:02        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 15:05        210944        ----a-w-        c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 15:05        86528        ----a-w-        c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 15:05        340992        ----a-w-        c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 15:05        314880        ----a-w-        c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 15:05        307200        ----a-w-        c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 15:05        728064        ----a-w-        c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 15:05        22016        ----a-w-        c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 15:05        172032        ----a-w-        c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 15:05        65536        ----a-w-        c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 15:05        247808        ----a-w-        c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 15:05        220160        ----a-w-        c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 15:05        259584        ----a-w-        c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 15:05        550912        ----a-w-        c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 15:05        17408        ----a-w-        c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 15:05        497152        ----a-w-        c:\windows\system32\drivers\afd.sys
.
.
(((((((((((((((((((((((((((((((((((((  Reg Loading Points  ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-12-29 11:54        220632        ----a-w-        c:\users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-12-29 11:54        220632        ----a-w-        c:\users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-12-29 11:54        220632        ----a-w-        c:\users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        131248        ----a-w-        c:\users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        131248        ----a-w-        c:\users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        131248        ----a-w-        c:\users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Overwolf"="c:\program files (x86)\Overwolf\Overwolf.exe" [2014-08-06 39712]
"Scan Buttons"="c:\program files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSB.EXE" [2009-12-09 202576]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2014-07-16 1753280]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-07-24 21650016]
"Infigo"="c:\program files (x86)\Infigo\Infigo.exe" [2014-06-26 607032]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE" [2011-04-13 2018032]
"ASUSWebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe" [2011-02-23 731472]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-08-17 5732992]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-10-07 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-23 1601536]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"PMSpeed"="c:\program files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.EXE" [2009-12-04 112464]
"FUFAXSTM"="c:\program files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe" [2009-12-02 847872]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-08-08 751184]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-07-24 190032]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpUninstallDeleteDir"="rmdir" [X]
.
c:\users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Matthias\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328]
Meine Dienste.lnk - c:\program files\Telekom\Meine Dienste\StartMeineDienste.exe Autostart [2011-12-13 269944]
Netzmanager.lnk - c:\program files\Netzmanager\netzmanager.exe /Autostart [2014-1-24 14140416]
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe /start [2011-4-13 548528]
FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe -d [2011-8-31 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="c:\windows\system32\userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Nuance PDF Reader-reminder"="c:\program files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "c:\programdata\Nuance\PDF Reader\Ereg\Ereg.ini"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 vToolbarUpdater18.1.9;vToolbarUpdater18.1.9;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 EraserUtilDrv11220;EraserUtilDrv11220;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys [x]
R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 OverwolfUpdater;Overwolf Updater Windows SCM;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 TelekomNM6;Telekom Netzmanager Packet Filter Driver;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]
R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
R3 X6va006;X6va006;c:\users\Matthias\AppData\Local\Temp\006912B.tmp;c:\users\Matthias\AppData\Local\Temp\006912B.tmp [x]
R3 X6va008;X6va008;c:\users\Matthias\AppData\Local\Temp\0085798.tmp;c:\users\Matthias\AppData\Local\Temp\0085798.tmp [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [x]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [x]
S2 InfigoOperator;Infigo Operator;c:\program files (x86)\Infigo\InfigoOperator.exe;c:\program files (x86)\Infigo\InfigoOperator.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 Netzmanager Service;Netzmanager Infrastruktur Informationssystem Dienst;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe ;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe  [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WTabletServiceCon;Wacom Consumer Service;c:\program files\Tablet\Pen\WTabletServiceCon.exe;c:\program files\Tablet\Pen\WTabletServiceCon.exe [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-21 21:25        1150280        ----a-w-        c:\program files (x86)\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-08-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 13:57]
.
2012-06-23 c:\windows\Tasks\AIRecoveryRemind.job
- c:\program files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-12-18 00:54]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-12-29 11:54        244696        ----a-w-        c:\users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-12-29 11:54        244696        ----a-w-        c:\users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-12-29 11:54        244696        ----a-w-        c:\users\Matthias\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2010-09-02 08:41        220160        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2010-09-02 08:41        220160        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        164016        ----a-w-        c:\users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        164016        ----a-w-        c:\users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        164016        ----a-w-        c:\users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        164016        ----a-w-        c:\users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-03-01 2189416]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-08-11 324096]
"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2008-05-24 26448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2014-01-29 171992]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2014-01-29 399832]
"Persistence"="c:\windows\system32\igfxpers.exe" [2014-01-29 442328]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mStart Page = www.google.com
mDefault_Page_URL = hxxp://www.google.com
uSearchAssistant = www.google.com
TCP: DhcpNameServer = 192.168.2.1
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-DAEMON Tools Lite - i:\stuff\DAEMON Tools Lite\DTLite.exe
Wow6432Node-HKCU-Run-puush - i:\stuff\puush\puush.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-Audacity_is1 - i:\audacity\unins000.exe
AddRemove-Avidemux 2.6 - i:\avidemux 2.6\uninstall.exe
AddRemove-DAEMON Tools Lite - i:\stuff\DAEMON Tools Lite\uninst.exe
AddRemove-ffs2011_is1 - c:\program files (x86)\Franzis\Fuhrerschein Trainer\unins000.exe
AddRemove-LAME_is1 - i:\lame for audacity\unins000.exe
AddRemove-MixMeister BPM Analyzer_is1 - i:\mixmeister bpm analyzer\unins000.exe
AddRemove-PunkBusterSvc - c:\program files (x86)\EA Games\Battlefield Play4Free\pbsvc_p4f.exe
AddRemove-StepMania 5 - i:\stuff\StepMania 5\uninstall.exe
AddRemove-{9DFDD0C5-5AC1-484B-ACF8-0F3E1041750B}_is1 - c:\program files (x86)\AquaSoft\DiaShow 7 fur YouTube\unins000.exe
AddRemove-Umineko no Naku Koro ni English - c:\program files\07th_Expansion\Umineko4\uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va006]
"ImagePath"="\??\c:\users\Matthias\AppData\Local\Temp\006912B.tmp"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\users\Matthias\AppData\Local\Temp\0085798.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-4002615419-2591733308-3372411449-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-4002615419-2591733308-3372411449-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\windows\AsScrPro.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbam.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files\Tablet\Pen\WacomHost.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Completion time: 2014-08-16  21:21:33 - machine was rebooted
ComboFix-quarantined-files.txt  2014-08-16 19:21
.
Pre-Run: 7.218.761.728 Bytes frei
Post-Run: 8.286.232.576 Bytes frei
.
- - End Of File - - F09B457FF1BCB149B6694EFF40805E08

Ist es schlimm wenn ich COmbofix, nicht auf dem Desktop gespeichert habe? Es hat sich geöffnet und ging dann sofort los seine arbeit zu vollrichten.

Ansonsten kamen während des scannens nur die Naricht Antivira zu deaktivieren, was ich auch tat. Es standen 2 Dinge, einmal Antivira, und nocheinmal ANtivira antivirus. Da ich aber nur Antivira habe, habe ich nur das eine deaktiviert. Nach dem das Programm fertig war, musste ich ein Neustart machen. Als ich mich wieder einloggt in meinem Benutzer, kam 5 min ein schwarzer Bildschirm, und dann hat sich Combofix geöffnet, wo stand, dass eben ein Bericht erstellt wird.

cosinus 16.08.2014 21:20

Naja, ist schon ok so.
Ok, dann weiter mit tdsskiller

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Math20 16.08.2014 22:58

Code:

23:43:46.0139 0x0a0c  TDSS rootkit removing tool 3.0.0.40 Jul 10 2014 12:37:58
23:43:48.0306 0x0a0c  ============================================================
23:43:48.0307 0x0a0c  Current date / time: 2014/08/16 23:43:48.0306
23:43:48.0307 0x0a0c  SystemInfo:
23:43:48.0307 0x0a0c 
23:43:48.0307 0x0a0c  OS Version: 6.1.7601 ServicePack: 1.0
23:43:48.0307 0x0a0c  Product type: Workstation
23:43:48.0307 0x0a0c  ComputerName: MATTHIAS-PC
23:43:48.0307 0x0a0c  UserName: Matthias
23:43:48.0307 0x0a0c  Windows directory: C:\Windows
23:43:48.0307 0x0a0c  System windows directory: C:\Windows
23:43:48.0308 0x0a0c  Running under WOW64
23:43:48.0308 0x0a0c  Processor architecture: Intel x64
23:43:48.0308 0x0a0c  Number of processors: 4
23:43:48.0308 0x0a0c  Page size: 0x1000
23:43:48.0308 0x0a0c  Boot type: Normal boot
23:43:48.0308 0x0a0c  ============================================================
23:43:48.0930 0x0a0c  KLMD registered as C:\Windows\system32\drivers\58877084.sys
23:43:49.0383 0x0a0c  System UUID: {E3E146CD-290A-020B-9D4D-67E65EF4B674}
23:43:49.0926 0x0a0c  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:43:49.0927 0x0a0c  Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:43:49.0936 0x0a0c  ============================================================
23:43:49.0936 0x0a0c  \Device\Harddisk0\DR0:
23:43:49.0937 0x0a0c  MBR partitions:
23:43:49.0937 0x0a0c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3200800, BlocksNum 0x1749C000
23:43:49.0955 0x0a0c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1A69D000, BlocksNum 0x1FCE8800
23:43:49.0955 0x0a0c  \Device\Harddisk1\DR1:
23:43:49.0956 0x0a0c  MBR partitions:
23:43:49.0956 0x0a0c  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1BE000
23:43:49.0956 0x0a0c  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x1D1BE800, BlocksNum 0x1D1C7830
23:43:49.0956 0x0a0c  ============================================================
23:43:49.0996 0x0a0c  C: <-> \Device\Harddisk0\DR0\Partition1
23:43:50.0028 0x0a0c  D: <-> \Device\Harddisk0\DR0\Partition2
23:43:50.0031 0x0a0c  E: <-> \Device\Harddisk1\DR1\Partition1
23:43:50.0349 0x0a0c  F: <-> \Device\Harddisk1\DR1\Partition2
23:43:50.0350 0x0a0c  ============================================================
23:43:50.0350 0x0a0c  Initialize success
23:43:50.0350 0x0a0c  ============================================================
23:45:13.0758 0x104c  ============================================================
23:45:13.0758 0x104c  Scan started
23:45:13.0758 0x104c  Mode: Manual; SigCheck; TDLFS;
23:45:13.0758 0x104c  ============================================================
23:45:13.0758 0x104c  KSN ping started
23:45:16.0470 0x104c  KSN ping finished: true
23:45:18.0149 0x104c  ================ Scan system memory ========================
23:45:18.0150 0x104c  System memory - ok
23:45:18.0151 0x104c  ================ Scan services =============================
23:45:18.0406 0x104c  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
23:45:18.0558 0x104c  1394ohci - ok
23:45:18.0606 0x104c  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
23:45:18.0621 0x104c  ACPI - ok
23:45:18.0648 0x104c  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
23:45:18.0716 0x104c  AcpiPmi - ok
23:45:18.0895 0x104c  [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
23:45:18.0927 0x104c  AdobeARMservice - ok
23:45:19.0065 0x104c  [ F7AB315A4D400CA876381D1E188A2E20, B6019C2E9B6801BB23C530C66D080F47330F48ADB0DD2813D50BE1408865BD91 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:45:19.0096 0x104c  AdobeFlashPlayerUpdateSvc - ok
23:45:19.0154 0x104c  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx        C:\Windows\system32\drivers\adp94xx.sys
23:45:19.0195 0x104c  adp94xx - ok
23:45:19.0256 0x104c  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci        C:\Windows\system32\drivers\adpahci.sys
23:45:19.0321 0x104c  adpahci - ok
23:45:19.0367 0x104c  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320        C:\Windows\system32\drivers\adpu320.sys
23:45:19.0397 0x104c  adpu320 - ok
23:45:19.0428 0x104c  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
23:45:19.0476 0x104c  AeLookupSvc - ok
23:45:19.0552 0x104c  [ 079CBA3C5C9AB11B2B4E6BD729A860F2, 86D58003D34E93D1C9154940B5DF2BD8AD77A6840FB52BF81978420A5FC68370 ] AFBAgent        C:\Windows\system32\FBAgent.exe
23:45:19.0585 0x104c  AFBAgent - ok
23:45:19.0667 0x104c  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD            C:\Windows\system32\drivers\afd.sys
23:45:19.0740 0x104c  AFD - ok
23:45:19.0791 0x104c  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
23:45:19.0833 0x104c  agp440 - ok
23:45:19.0864 0x104c  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG            C:\Windows\System32\alg.exe
23:45:19.0920 0x104c  ALG - ok
23:45:19.0974 0x104c  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
23:45:20.0003 0x104c  aliide - ok
23:45:20.0031 0x104c  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
23:45:20.0059 0x104c  amdide - ok
23:45:20.0090 0x104c  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8          C:\Windows\system32\drivers\amdk8.sys
23:45:20.0140 0x104c  AmdK8 - ok
23:45:20.0157 0x104c  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
23:45:20.0207 0x104c  AmdPPM - ok
23:45:20.0244 0x104c  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
23:45:20.0270 0x104c  amdsata - ok
23:45:20.0299 0x104c  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
23:45:20.0327 0x104c  amdsbs - ok
23:45:20.0351 0x104c  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata        C:\Windows\system32\drivers\amdxata.sys
23:45:20.0364 0x104c  amdxata - ok
23:45:20.0406 0x104c  [ 9C7F164B49CADC658D1B3C575782F346, 7C5FD203735041B6AEB2E551A63CE5F46DB41044BC72E7E77A72F316197C80DA ] AmUStor        C:\Windows\system32\drivers\AmUStor.SYS
23:45:20.0431 0x104c  AmUStor - ok
23:45:20.0469 0x104c  [ 4DE0D5D747A73797C95A97DCCE5018B5, 17EC669675C2E43515EFE2D8BCC9DDFFBE64F99EBFB9A6DAB429F65A2B504560 ] androidusb      C:\Windows\system32\Drivers\ssadadb.sys
23:45:20.0511 0x104c  androidusb - ok
23:45:20.0649 0x104c  [ 0327A6CE0934C324E3E82920E9EC0EE4, B4A1E6A77032F7DF97FED3C01E76E2BD3270A3FFC500C7C9A118C0E2EB675D75 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
23:45:20.0670 0x104c  AntiVirSchedulerService - ok
23:45:20.0742 0x104c  [ 0327A6CE0934C324E3E82920E9EC0EE4, B4A1E6A77032F7DF97FED3C01E76E2BD3270A3FFC500C7C9A118C0E2EB675D75 ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
23:45:20.0760 0x104c  AntiVirService - ok
23:45:20.0810 0x104c  [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID          C:\Windows\system32\drivers\appid.sys
23:45:20.0938 0x104c  AppID - ok
23:45:20.0966 0x104c  [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
23:45:21.0044 0x104c  AppIDSvc - ok
23:45:21.0128 0x104c  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo        C:\Windows\System32\appinfo.dll
23:45:21.0183 0x104c  Appinfo - ok
23:45:21.0233 0x104c  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc            C:\Windows\system32\drivers\arc.sys
23:45:21.0257 0x104c  arc - ok
23:45:21.0295 0x104c  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
23:45:21.0319 0x104c  arcsas - ok
23:45:21.0400 0x104c  [ 18E5C2F937F9DEB8C282DF66A3761925, 30294C381F8C7DCB45EF9BCF572F410FF47630E12D5AA02259C6C80F07BEF495 ] ASLDRService    C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
23:45:21.0421 0x104c  ASLDRService - ok
23:45:21.0435 0x104c  [ 4C016FD76ED5C05E84CA8CAB77993961, 025E7BE9FCEFD6A83F4471BBA0C11F1C11BD5047047D26626DA24EE9A419CDC4 ] ASMMAP64        C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
23:45:21.0457 0x104c  ASMMAP64 - ok
23:45:21.0610 0x104c  [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
23:45:21.0652 0x104c  aspnet_state - ok
23:45:21.0679 0x104c  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
23:45:21.0717 0x104c  AsyncMac - ok
23:45:21.0767 0x104c  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi          C:\Windows\system32\drivers\atapi.sys
23:45:21.0795 0x104c  atapi - ok
23:45:21.0924 0x104c  [ 0ACC06FCF46F64ED4F11E57EE461C1F4, F2AB7198C7F7D36AB1D6D03C1FEFD929ED402002AC835B909FC14938BC0EE24B ] athr            C:\Windows\system32\DRIVERS\athrx.sys
23:45:22.0092 0x104c  athr - ok
23:45:22.0124 0x104c  [ 7910158929571214A959D5A6D16DD9C0, 9B4F8A3AF9E09B2F772EEF1CB8F7EAB8A226068784837F375AE97B89B0B3A383 ] ATKGFNEXSrv    C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
23:45:22.0133 0x104c  ATKGFNEXSrv - ok
23:45:22.0178 0x104c  [ 1F7238A37389ED92E9D8EEE975CABD54, AFEE4B89A330C106651BB230920FC623813B075D2B75DFEDCC68A3207B291365 ] ATKWMIACPIIO    C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
23:45:22.0189 0x104c  ATKWMIACPIIO - ok
23:45:22.0234 0x104c  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
23:45:22.0288 0x104c  AudioEndpointBuilder - ok
23:45:22.0322 0x104c  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
23:45:22.0365 0x104c  AudioSrv - ok
23:45:22.0411 0x104c  [ 4663C5AD76FE8E19592DE808156FA07D, 605827B4A9D6930BC752D124BF75D55D4927B0ABEF881CDE66F3C5CC1DB215FE ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
23:45:22.0421 0x104c  avgntflt - ok
23:45:22.0508 0x104c  [ 68430AD3FB0FADBFA5D1677617D1E1F5, CF732DD21B472653AB0A4063455F2E7608F3075C255B9882D18CB52026B6C972 ] avgtp          C:\Windows\system32\drivers\avgtpx64.sys
23:45:22.0523 0x104c  avgtp - ok
23:45:22.0583 0x104c  [ 8902AEC2382A37E9E99A4E0D52DBD42B, 138F2D7E7430132B2C527D413BC845CC467F084F39C232EC3A17DD2A74EE401E ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
23:45:22.0624 0x104c  avipbb - ok
23:45:22.0753 0x104c  [ 8F9FB2E345549C1432249BDB8B9C1C0A, 337370238116022987D3CA957CFDAC9D953990F2AC513ACBFBA2D05E35A5F400 ] Avira.OE.ServiceHost C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
23:45:22.0776 0x104c  Avira.OE.ServiceHost - ok
23:45:22.0811 0x104c  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
23:45:22.0829 0x104c  avkmgr - ok
23:45:22.0905 0x104c  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
23:45:23.0024 0x104c  AxInstSV - ok
23:45:23.0069 0x104c  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
23:45:23.0129 0x104c  b06bdrv - ok
23:45:23.0176 0x104c  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
23:45:23.0212 0x104c  b57nd60a - ok
23:45:23.0290 0x104c  [ 93EE7D9C35AE7E9FFDA148D7805F1421, 9D88D5CC08F887B35A893FEC80D8CC4A9E4EAAF533E27D0F1B9CC36C171C92DA ] BBSvc          C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
23:45:23.0314 0x104c  BBSvc - ok
23:45:23.0356 0x104c  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
23:45:23.0416 0x104c  BDESVC - ok
23:45:23.0446 0x104c  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
23:45:23.0511 0x104c  Beep - ok
23:45:23.0564 0x104c  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE            C:\Windows\System32\bfe.dll
23:45:23.0612 0x104c  BFE - ok
23:45:23.0662 0x104c  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\system32\qmgr.dll
23:45:23.0710 0x104c  BITS - ok
23:45:23.0743 0x104c  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
23:45:23.0800 0x104c  blbdrive - ok
23:45:23.0846 0x104c  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
23:45:23.0919 0x104c  bowser - ok
23:45:23.0947 0x104c  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
23:45:23.0974 0x104c  BrFiltLo - ok
23:45:24.0043 0x104c  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
23:45:24.0080 0x104c  BrFiltUp - ok
23:45:24.0124 0x104c  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
23:45:24.0173 0x104c  BridgeMP - ok
23:45:24.0201 0x104c  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser        C:\Windows\System32\browser.dll
23:45:24.0214 0x104c  Browser - ok
23:45:24.0248 0x104c  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
23:45:24.0319 0x104c  Brserid - ok
23:45:24.0342 0x104c  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
23:45:24.0380 0x104c  BrSerWdm - ok
23:45:24.0402 0x104c  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
23:45:24.0442 0x104c  BrUsbMdm - ok
23:45:24.0459 0x104c  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
23:45:24.0498 0x104c  BrUsbSer - ok
23:45:24.0550 0x104c  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum        C:\Windows\system32\drivers\BthEnum.sys
23:45:24.0626 0x104c  BthEnum - ok
23:45:24.0682 0x104c  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
23:45:24.0765 0x104c  BTHMODEM - ok
23:45:24.0800 0x104c  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
23:45:24.0834 0x104c  BthPan - ok
23:45:24.0915 0x104c  [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT        C:\Windows\System32\Drivers\BTHport.sys
23:45:24.0993 0x104c  BTHPORT - ok
23:45:25.0035 0x104c  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv        C:\Windows\system32\bthserv.dll
23:45:25.0125 0x104c  bthserv - ok
23:45:25.0161 0x104c  [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
23:45:25.0205 0x104c  BTHUSB - ok
23:45:25.0249 0x104c  catchme - ok
23:45:25.0280 0x104c  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
23:45:25.0367 0x104c  cdfs - ok
23:45:25.0406 0x104c  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
23:45:25.0438 0x104c  cdrom - ok
23:45:25.0500 0x104c  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc    C:\Windows\System32\certprop.dll
23:45:25.0591 0x104c  CertPropSvc - ok
23:45:25.0637 0x104c  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
23:45:25.0698 0x104c  circlass - ok
23:45:25.0755 0x104c  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys
23:45:25.0791 0x104c  CLFS - ok
23:45:25.0863 0x104c  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:45:25.0908 0x104c  clr_optimization_v2.0.50727_32 - ok
23:45:25.0967 0x104c  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
23:45:25.0983 0x104c  clr_optimization_v2.0.50727_64 - ok
23:45:26.0095 0x104c  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:45:26.0121 0x104c  clr_optimization_v4.0.30319_32 - ok
23:45:26.0153 0x104c  [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
23:45:26.0165 0x104c  clr_optimization_v4.0.30319_64 - ok
23:45:26.0197 0x104c  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
23:45:26.0231 0x104c  CmBatt - ok
23:45:26.0265 0x104c  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
23:45:26.0297 0x104c  cmdide - ok
23:45:26.0367 0x104c  [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG            C:\Windows\system32\Drivers\cng.sys
23:45:26.0437 0x104c  CNG - ok
23:45:26.0469 0x104c  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
23:45:26.0482 0x104c  Compbatt - ok
23:45:26.0504 0x104c  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
23:45:26.0566 0x104c  CompositeBus - ok
23:45:26.0585 0x104c  COMSysApp - ok
23:45:26.0706 0x104c  [ 08F934092E0429BADF88E9F91DB0F61E, 6E9091C006FFFF261DC61C8E9A45219E47C351296E5355FC4B7242F30E1DDFE3 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
23:45:26.0768 0x104c  cphs - ok
23:45:26.0789 0x104c  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk        C:\Windows\system32\drivers\crcdisk.sys
23:45:26.0801 0x104c  crcdisk - ok
23:45:26.0881 0x104c  [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc        C:\Windows\system32\cryptsvc.dll
23:45:26.0912 0x104c  CryptSvc - ok
23:45:27.0117 0x104c  [ FD557A50A65E44041CD2FCEF4BEB04DB, 746D5958F7198895D35A23566D3736D993D57726BF59D91421D8091C48926A26 ] cvhsvc          C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
23:45:27.0145 0x104c  cvhsvc - ok
23:45:27.0211 0x104c  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
23:45:27.0252 0x104c  DcomLaunch - ok
23:45:27.0302 0x104c  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc      C:\Windows\System32\defragsvc.dll
23:45:27.0380 0x104c  defragsvc - ok
23:45:27.0407 0x104c  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
23:45:27.0461 0x104c  DfsC - ok
23:45:27.0525 0x104c  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
23:45:27.0583 0x104c  Dhcp - ok
23:45:27.0606 0x104c  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
23:45:27.0652 0x104c  discache - ok
23:45:27.0691 0x104c  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
23:45:27.0706 0x104c  Disk - ok
23:45:27.0735 0x104c  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
23:45:27.0760 0x104c  Dnscache - ok
23:45:27.0818 0x104c  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc        C:\Windows\System32\dot3svc.dll
23:45:27.0928 0x104c  dot3svc - ok
23:45:27.0961 0x104c  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS            C:\Windows\system32\dps.dll
23:45:28.0023 0x104c  DPS - ok
23:45:28.0078 0x104c  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
23:45:28.0136 0x104c  drmkaud - ok
23:45:28.0199 0x104c  [ 46571ED73AE84469DCA53081D33CF3C8, 8BB386BB4F6AD39F06A8607CD1DF3D67CFA45BBE52E40EDB90EB8C862283EBFF ] dtsoftbus01    C:\Windows\system32\DRIVERS\dtsoftbus01.sys
23:45:28.0222 0x104c  dtsoftbus01 - ok
23:45:28.0275 0x104c  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
23:45:28.0320 0x104c  DXGKrnl - ok
23:45:28.0361 0x104c  EagleX64 - ok
23:45:28.0385 0x104c  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost        C:\Windows\System32\eapsvc.dll
23:45:28.0434 0x104c  EapHost - ok
23:45:28.0584 0x104c  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv          C:\Windows\system32\drivers\evbda.sys
23:45:28.0816 0x104c  ebdrv - ok
23:45:28.0862 0x104c  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS            C:\Windows\System32\lsass.exe
23:45:28.0873 0x104c  EFS - ok
23:45:28.0963 0x104c  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
23:45:28.0992 0x104c  ehRecvr - ok
23:45:29.0005 0x104c  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched        C:\Windows\ehome\ehsched.exe
23:45:29.0050 0x104c  ehSched - ok
23:45:29.0151 0x104c  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor        C:\Windows\system32\drivers\elxstor.sys
23:45:29.0210 0x104c  elxstor - ok
23:45:29.0314 0x104c  [ 7DB097F4F6786307168C0DDDEC43A565, 963C0D3D88FB4BF9C2FBCB296B03603E2F8AA8B4E8976162842863B7538C1A9F ] EPSON_EB_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
23:45:29.0347 0x104c  EPSON_EB_RPCV4_04 - ok
23:45:29.0373 0x104c  [ 258AA65A0862E19B7DE6981FDA3758AD, C090F19BEDC2CFB0B5265BCE48BD52102E06CBC15EEFE4CDB747D44F2E42D545 ] EPSON_PM_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
23:45:29.0398 0x104c  EPSON_PM_RPCV4_04 - ok
23:45:29.0419 0x104c  EraserUtilDrv11220 - ok
23:45:29.0435 0x104c  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
23:45:29.0458 0x104c  ErrDev - ok
23:45:29.0498 0x104c  [ 5B042AA9CEBDAB5B61E747DDCEBFF51B, FBB174A6FE372F55758D6CD118F3746146866383527F5784C3AE513145F4C193 ] ETD            C:\Windows\system32\DRIVERS\ETD.sys
23:45:29.0517 0x104c  ETD - ok
23:45:29.0552 0x104c  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem    C:\Windows\system32\es.dll
23:45:29.0591 0x104c  EventSystem - ok
23:45:29.0624 0x104c  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat          C:\Windows\system32\drivers\exfat.sys
23:45:29.0677 0x104c  exfat - ok
23:45:29.0711 0x104c  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
23:45:29.0791 0x104c  fastfat - ok
23:45:29.0879 0x104c  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax            C:\Windows\system32\fxssvc.exe
23:45:29.0935 0x104c  Fax - ok
23:45:29.0947 0x104c  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc            C:\Windows\system32\drivers\fdc.sys
23:45:29.0968 0x104c  fdc - ok
23:45:29.0990 0x104c  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost        C:\Windows\system32\fdPHost.dll
23:45:30.0061 0x104c  fdPHost - ok
23:45:30.0076 0x104c  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
23:45:30.0117 0x104c  FDResPub - ok
23:45:30.0160 0x104c  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
23:45:30.0197 0x104c  FileInfo - ok
23:45:30.0208 0x104c  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
23:45:30.0253 0x104c  Filetrace - ok
23:45:30.0268 0x104c  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
23:45:30.0300 0x104c  flpydisk - ok
23:45:30.0334 0x104c  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
23:45:30.0372 0x104c  FltMgr - ok
23:45:30.0479 0x104c  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache      C:\Windows\system32\FntCache.dll
23:45:30.0524 0x104c  FontCache - ok
23:45:30.0563 0x104c  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:45:30.0572 0x104c  FontCache3.0.0.0 - ok
23:45:30.0582 0x104c  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
23:45:30.0599 0x104c  FsDepends - ok
23:45:30.0642 0x104c  [ B3EB502D2C3F47C47415F85387DFAEF1, 5240D4281BB9FBFBFEB98522D12F0C006BE063C084C2E6E23DACB6606CDC25AE ] fssfltr        C:\Windows\system32\DRIVERS\fssfltr.sys
23:45:30.0681 0x104c  fssfltr - ok
23:45:30.0802 0x104c  [ B6AB40819ECEC4BA07266EC0EBBC85A7, 71D385043720B622305FD64BD1187C6FFD7191C30794F95629CF6BFDC0A25BA2 ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
23:45:30.0910 0x104c  fsssvc - ok
23:45:30.0931 0x104c  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
23:45:30.0945 0x104c  Fs_Rec - ok
23:45:30.0986 0x104c  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
23:45:31.0002 0x104c  fvevol - ok
23:45:31.0027 0x104c  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
23:45:31.0042 0x104c  gagp30kx - ok
23:45:31.0099 0x104c  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc          C:\Windows\System32\gpsvc.dll
23:45:31.0158 0x104c  gpsvc - ok
23:45:31.0196 0x104c  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi        C:\Windows\system32\DRIVERS\hamachi.sys
23:45:31.0208 0x104c  hamachi - ok
23:45:31.0223 0x104c  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
23:45:31.0238 0x104c  hcw85cir - ok
23:45:31.0298 0x104c  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
23:45:31.0375 0x104c  HdAudAddService - ok
23:45:31.0418 0x104c  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
23:45:31.0460 0x104c  HDAudBus - ok
23:45:31.0472 0x104c  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt        C:\Windows\system32\drivers\HidBatt.sys
23:45:31.0504 0x104c  HidBatt - ok
23:45:31.0539 0x104c  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
23:45:31.0580 0x104c  HidBth - ok
23:45:31.0598 0x104c  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr          C:\Windows\system32\drivers\hidir.sys
23:45:31.0614 0x104c  HidIr - ok
23:45:31.0654 0x104c  [ 943B20F119F05BCAB4D2593E2D3D4278, 7056691C0EFF0AA236195BD254E452C026EEDFB2E257330F92A072D4CEC3B712 ] hidkmdf        C:\Windows\system32\DRIVERS\hidkmdf.sys
23:45:31.0664 0x104c  hidkmdf - ok
23:45:31.0686 0x104c  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv        C:\Windows\System32\hidserv.dll
23:45:31.0733 0x104c  hidserv - ok
23:45:31.0774 0x104c  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
23:45:31.0839 0x104c  HidUsb - ok
23:45:31.0888 0x104c  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
23:45:31.0968 0x104c  hkmsvc - ok
23:45:31.0994 0x104c  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
23:45:32.0034 0x104c  HomeGroupListener - ok
23:45:32.0075 0x104c  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
23:45:32.0124 0x104c  HomeGroupProvider - ok
23:45:32.0176 0x104c  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
23:45:32.0207 0x104c  HpSAMD - ok
23:45:32.0260 0x104c  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
23:45:32.0319 0x104c  HTTP - ok
23:45:32.0334 0x104c  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
23:45:32.0343 0x104c  hwpolicy - ok
23:45:32.0368 0x104c  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
23:45:32.0386 0x104c  i8042prt - ok
23:45:32.0421 0x104c  [ D7921D5A870B11CC1ADAB198A519D50A, 5DF99EB5D5504E9D9EB21658E8B4A58DEE2AD143A1875DB7F9B7BF4877FCB57F ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
23:45:32.0438 0x104c  iaStor - ok
23:45:32.0502 0x104c  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
23:45:32.0545 0x104c  iaStorV - ok
23:45:32.0635 0x104c  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
23:45:32.0726 0x104c  idsvc - ok
23:45:32.0764 0x104c  IEEtwCollectorService - ok
23:45:33.0027 0x104c  [ 8C44E6B688790E2AD3846C97661C54F1, CB487D167EDA3C1E30BD5FB8F98C15EB9E75A6FB793009C2F1BBCAAB4285F772 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
23:45:33.0401 0x104c  igfx - ok
23:45:33.0456 0x104c  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp          C:\Windows\system32\drivers\iirsp.sys
23:45:33.0477 0x104c  iirsp - ok
23:45:33.0541 0x104c  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
23:45:33.0591 0x104c  IKEEXT - ok
23:45:33.0690 0x104c  [ C0A0FE820E3A60E8A478414FB7E361E1, E4DA913783D96F45FD4A50913B65FE58215550ECFC22F4FE63E171E531F44D2B ] InfigoOperator  C:\Program Files (x86)\Infigo\InfigoOperator.exe
23:45:33.0711 0x104c  InfigoOperator - ok
23:45:33.0866 0x104c  [ C15A21B1E2291952424F361093734F95, 48B2205A07FC4F8264E64B654824EF44AEECD9A9914B66DD8A74FA41CFE73317 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
23:45:34.0074 0x104c  IntcAzAudAddService - ok
23:45:34.0106 0x104c  [ FC727061C0F47C8059E88E05D5C8E381, C7A3782F5D86C7FDE57AA1F2EE81638C5FC3072ACC6E572BA2EC7B3CFF389800 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
23:45:34.0153 0x104c  IntcDAud - ok
23:45:34.0183 0x104c  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
23:45:34.0217 0x104c  intelide - ok
23:45:34.0262 0x104c  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
23:45:34.0299 0x104c  intelppm - ok
23:45:34.0330 0x104c  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
23:45:34.0404 0x104c  IPBusEnum - ok
23:45:34.0423 0x104c  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:45:34.0471 0x104c  IpFilterDriver - ok
23:45:34.0545 0x104c  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
23:45:34.0586 0x104c  iphlpsvc - ok
23:45:34.0604 0x104c  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
23:45:34.0635 0x104c  IPMIDRV - ok
23:45:34.0657 0x104c  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
23:45:34.0699 0x104c  IPNAT - ok
23:45:34.0731 0x104c  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
23:45:34.0827 0x104c  IRENUM - ok
23:45:34.0861 0x104c  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
23:45:34.0876 0x104c  isapnp - ok
23:45:34.0921 0x104c  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
23:45:34.0947 0x104c  iScsiPrt - ok
23:45:34.0977 0x104c  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
23:45:34.0986 0x104c  kbdclass - ok
23:45:35.0017 0x104c  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
23:45:35.0044 0x104c  kbdhid - ok
23:45:35.0087 0x104c  [ E63EF8C3271D014F14E2469CE75FECB4, 3A8DFA4B446AFDC35F01FD5218D0BEBC510A1E3DE9976210F00D19767D0F9069 ] kbfiltr        C:\Windows\system32\DRIVERS\kbfiltr.sys
23:45:35.0117 0x104c  kbfiltr - ok
23:45:35.0167 0x104c  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso          C:\Windows\system32\lsass.exe
23:45:35.0178 0x104c  KeyIso - ok
23:45:35.0219 0x104c  [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
23:45:35.0235 0x104c  KSecDD - ok
23:45:35.0265 0x104c  [ 1C2D8E18AA8FD50CD04C15CC27F7F5AB, 4BA3B0F9F01BD47D66091D3AD86B69A523981D61DFB4D677F2CD39405B2DA989 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
23:45:35.0283 0x104c  KSecPkg - ok
23:45:35.0318 0x104c  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
23:45:35.0368 0x104c  ksthunk - ok
23:45:35.0413 0x104c  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm          C:\Windows\system32\msdtckrm.dll
23:45:35.0475 0x104c  KtmRm - ok
23:45:35.0524 0x104c  [ A4A9CA24E54E81C6C3E469EAEB4B3F42, FB6B72BF973EC2EE2D81AAAF47B030C0A5E7E7B079DAB257C52FEFC3F222CDC8 ] L1C            C:\Windows\system32\DRIVERS\L1C62x64.sys
23:45:35.0538 0x104c  L1C - ok
23:45:35.0592 0x104c  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll
23:45:35.0642 0x104c  LanmanServer - ok
23:45:35.0693 0x104c  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
23:45:35.0792 0x104c  LanmanWorkstation - ok
23:45:35.0821 0x104c  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
23:45:35.0853 0x104c  lltdio - ok
23:45:35.0891 0x104c  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
23:45:35.0951 0x104c  lltdsvc - ok
23:45:35.0974 0x104c  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts        C:\Windows\System32\lmhsvc.dll
23:45:36.0003 0x104c  lmhosts - ok
23:45:36.0077 0x104c  [ 0803906D607A9B83184447B75B60ECC2, A7A599C4CEDD4AC4196A558442E80B4F852AF6C6104A53C8819A79AA5D388DE8 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
23:45:36.0106 0x104c  LMS - ok
23:45:36.0161 0x104c  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
23:45:36.0198 0x104c  LSI_FC - ok
23:45:36.0207 0x104c  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
23:45:36.0224 0x104c  LSI_SAS - ok
23:45:36.0240 0x104c  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
23:45:36.0254 0x104c  LSI_SAS2 - ok
23:45:36.0274 0x104c  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
23:45:36.0291 0x104c  LSI_SCSI - ok
23:45:36.0318 0x104c  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv          C:\Windows\system32\drivers\luafv.sys
23:45:36.0366 0x104c  luafv - ok
23:45:36.0432 0x104c  [ F92B0E478C0FAA6D6661E6E977247E60, 8B26B57C2C60C98CD6273ACA126B2CD0356ADB13A59FEC12882357A6B973123C ] MBAMProtector  C:\Windows\system32\drivers\mbam.sys
23:45:36.0466 0x104c  MBAMProtector - ok
23:45:36.0582 0x104c  [ D84AEA3F3329D622DFC1297DDDF6163B, 316FE56CC30ED1473A917253F46B79EAA12F4ABD5B4B1ADB03929DFEE940F577 ] MBAMScheduler  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
23:45:36.0626 0x104c  MBAMScheduler - ok
23:45:36.0668 0x104c  [ 4F45ED469906494F9BF754E476390DBD, D8FF6AFD73D8C191F5732DF9737E6F83B2B52B06A3A6CD4CC6EAC9464CBB2772 ] MBAMService    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
23:45:36.0692 0x104c  MBAMService - ok
23:45:36.0729 0x104c  [ 8A50D5304E6AE48664CF5838EC32F647, C76943FABEE1B5E1B641AA610668CCD4227E2C4B191DD30B79D3AB31A9E8B5BE ] MBAMSwissArmy  C:\Windows\system32\drivers\MBAMSwissArmy.sys
23:45:36.0744 0x104c  MBAMSwissArmy - ok
23:45:36.0759 0x104c  [ 15E8ABC06843672955CE26A009533BAD, E7221B7DE9DB45447C68E79C6BFD064713C5974F7E79925BD7DEEF71F73F3E83 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
23:45:36.0767 0x104c  MBAMWebAccessControl - ok
23:45:36.0807 0x104c  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
23:45:36.0841 0x104c  Mcx2Svc - ok
23:45:36.0857 0x104c  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas        C:\Windows\system32\drivers\megasas.sys
23:45:36.0871 0x104c  megasas - ok
23:45:36.0922 0x104c  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
23:45:36.0983 0x104c  MegaSR - ok
23:45:37.0017 0x104c  [ A6518DCC42F7A6E999BB3BEA8FD87567, 8A9AE992F93F37E0723761EA271A7E1AA8172702C471041A17324474FC96B9BC ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
23:45:37.0035 0x104c  MEIx64 - ok
23:45:37.0084 0x104c  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS          C:\Windows\system32\mmcss.dll
23:45:37.0148 0x104c  MMCSS - ok
23:45:37.0170 0x104c  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem          C:\Windows\system32\drivers\modem.sys
23:45:37.0215 0x104c  Modem - ok
23:45:37.0258 0x104c  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
23:45:37.0303 0x104c  monitor - ok
23:45:37.0321 0x104c  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
23:45:37.0335 0x104c  mouclass - ok
23:45:37.0355 0x104c  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
23:45:37.0385 0x104c  mouhid - ok
23:45:37.0419 0x104c  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
23:45:37.0429 0x104c  mountmgr - ok
23:45:37.0468 0x104c  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
23:45:37.0486 0x104c  mpio - ok
23:45:37.0512 0x104c  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
23:45:37.0561 0x104c  mpsdrv - ok
23:45:37.0620 0x104c  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
23:45:37.0678 0x104c  MpsSvc - ok
23:45:37.0715 0x104c  [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
23:45:37.0734 0x104c  MRxDAV - ok
23:45:37.0763 0x104c  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
23:45:37.0806 0x104c  mrxsmb - ok
23:45:37.0823 0x104c  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:45:37.0847 0x104c  mrxsmb10 - ok
23:45:37.0854 0x104c  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:45:37.0897 0x104c  mrxsmb20 - ok
23:45:37.0922 0x104c  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
23:45:37.0935 0x104c  msahci - ok
23:45:37.0964 0x104c  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
23:45:37.0982 0x104c  msdsm - ok
23:45:38.0003 0x104c  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC          C:\Windows\System32\msdtc.exe
23:45:38.0023 0x104c  MSDTC - ok
23:45:38.0037 0x104c  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
23:45:38.0088 0x104c  Msfs - ok
23:45:38.0110 0x104c  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
23:45:38.0161 0x104c  mshidkmdf - ok
23:45:38.0165 0x104c  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
23:45:38.0177 0x104c  msisadrv - ok
23:45:38.0220 0x104c  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
23:45:38.0274 0x104c  MSiSCSI - ok
23:45:38.0277 0x104c  msiserver - ok
23:45:38.0324 0x104c  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
23:45:38.0389 0x104c  MSKSSRV - ok
23:45:38.0403 0x104c  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
23:45:38.0443 0x104c  MSPCLOCK - ok
23:45:38.0460 0x104c  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
23:45:38.0503 0x104c  MSPQM - ok
23:45:38.0533 0x104c  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
23:45:38.0556 0x104c  MsRPC - ok
23:45:38.0568 0x104c  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
23:45:38.0577 0x104c  mssmbios - ok
23:45:38.0605 0x104c  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
23:45:38.0661 0x104c  MSTEE - ok
23:45:38.0682 0x104c  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
23:45:38.0704 0x104c  MTConfig - ok
23:45:38.0720 0x104c  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup            C:\Windows\system32\Drivers\mup.sys
23:45:38.0734 0x104c  Mup - ok
23:45:38.0775 0x104c  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
23:45:38.0832 0x104c  napagent - ok
23:45:38.0895 0x104c  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
23:45:38.0988 0x104c  NativeWifiP - ok
23:45:39.0056 0x104c  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
23:45:39.0089 0x104c  NDIS - ok
23:45:39.0129 0x104c  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
23:45:39.0181 0x104c  NdisCap - ok
23:45:39.0206 0x104c  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
23:45:39.0257 0x104c  NdisTapi - ok
23:45:39.0272 0x104c  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
23:45:39.0324 0x104c  Ndisuio - ok
23:45:39.0342 0x104c  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
23:45:39.0410 0x104c  NdisWan - ok
23:45:39.0415 0x104c  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
23:45:39.0456 0x104c  NDProxy - ok
23:45:39.0473 0x104c  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
23:45:39.0527 0x104c  NetBIOS - ok
23:45:39.0552 0x104c  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
23:45:39.0601 0x104c  NetBT - ok
23:45:39.0624 0x104c  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon        C:\Windows\system32\lsass.exe
23:45:39.0633 0x104c  Netlogon - ok
23:45:39.0662 0x104c  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
23:45:39.0699 0x104c  Netman - ok
23:45:39.0790 0x104c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:45:39.0834 0x104c  NetMsmqActivator - ok
23:45:39.0841 0x104c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:45:39.0856 0x104c  NetPipeActivator - ok
23:45:39.0892 0x104c  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
23:45:39.0942 0x104c  netprofm - ok
23:45:40.0041 0x104c  [ F1814E62EB6E50472AFC9903525ECEC1, 36C705AD754225B64506A852C90D3D9BB329969780B9879FDAB98DE903E3EBC5 ] netr28x        C:\Windows\system32\DRIVERS\netr28x.sys
23:45:40.0121 0x104c  netr28x - ok
23:45:40.0148 0x104c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:45:40.0160 0x104c  NetTcpActivator - ok
23:45:40.0181 0x104c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:45:40.0194 0x104c  NetTcpPortSharing - ok
23:45:40.0395 0x104c  [ 82FFC84EC3AFC2F2D38DB880F50157C0, 4D37A44A5BBD3ECA2B29FE8565FC5840093E5BB41D197BEDA406BCE4A7C3479A ] Netzmanager Service C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
23:45:40.0543 0x104c  Netzmanager Service - detected UnsignedFile.Multi.Generic ( 1 )
23:45:43.0157 0x104c  Detect skipped due to KSN trusted
23:45:43.0158 0x104c  Netzmanager Service - ok
23:45:43.0222 0x104c  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960        C:\Windows\system32\drivers\nfrd960.sys
23:45:43.0261 0x104c  nfrd960 - ok
23:45:43.0325 0x104c  [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc          C:\Windows\System32\nlasvc.dll
23:45:43.0369 0x104c  NlaSvc - ok
23:45:43.0393 0x104c  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
23:45:43.0449 0x104c  Npfs - ok
23:45:43.0473 0x104c  npggsvc - ok
23:45:43.0477 0x104c  NPPTNT2 - ok
23:45:43.0505 0x104c  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi            C:\Windows\system32\nsisvc.dll
23:45:43.0577 0x104c  nsi - ok
23:45:43.0609 0x104c  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
23:45:43.0653 0x104c  nsiproxy - ok
23:45:43.0761 0x104c  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
23:45:43.0803 0x104c  Ntfs - ok
23:45:43.0817 0x104c  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
23:45:43.0843 0x104c  Null - ok
23:45:44.0287 0x104c  [ 48D26FF990099C1AD51F81BAEDDB3B98, 15C75B85EC7C1E4B1C2CEF74E400B2BA75FF7952EBBD2A6AD0CD9D0A5D1C5263 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
23:45:44.0882 0x104c  nvlddmkm - ok
23:45:45.0078 0x104c  [ 3393E8972E95F6C985150A1DC1D4B026, 03603BA886B83C7552D39ADEE5BCB6656FEB8ADA6EB344F28424DC0A1BEAE2AB ] nvpciflt        C:\Windows\system32\DRIVERS\nvpciflt.sys
23:45:45.0111 0x104c  nvpciflt - ok
23:45:45.0179 0x104c  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
23:45:45.0222 0x104c  nvraid - ok
23:45:45.0241 0x104c  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
23:45:45.0259 0x104c  nvstor - ok
23:45:45.0351 0x104c  [ 708547B06809A454B953803CBC449BC0, DA296BD93460114D90CCA491BBA1002D88AEA6508AAA91493F7B443A0D452EAF ] NVSvc          C:\Windows\system32\nvvsvc.exe
23:45:45.0381 0x104c  NVSvc - ok
23:45:45.0502 0x104c  [ CEA3A0FBE6B86EF7A85B62EB41ED5DCB, 31415162853CEAE68B98D09D350225C16D94F325650DB38F90D18D034B759014 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
23:45:45.0563 0x104c  nvUpdatusService - ok
23:45:45.0628 0x104c  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
23:45:45.0664 0x104c  nv_agp - ok
23:45:45.0680 0x104c  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
23:45:45.0713 0x104c  ohci1394 - ok
23:45:45.0795 0x104c  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:45:45.0815 0x104c  ose - ok
23:45:46.0036 0x104c  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
23:45:46.0336 0x104c  osppsvc - ok
23:45:46.0494 0x104c  [ E795940E3452163C355F9196CE353FF5, BD8E9A48F4BD46B7F80CBED57FB484CF29ECBF60249CC905F5E0701E16EC385C ] OverwolfUpdater C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
23:45:46.0520 0x104c  OverwolfUpdater - ok
23:45:46.0555 0x104c  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
23:45:46.0591 0x104c  p2pimsvc - ok
23:45:46.0621 0x104c  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
23:45:46.0660 0x104c  p2psvc - ok
23:45:46.0692 0x104c  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport        C:\Windows\system32\drivers\parport.sys
23:45:46.0750 0x104c  Parport - ok
23:45:46.0797 0x104c  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr        C:\Windows\system32\drivers\partmgr.sys
23:45:46.0834 0x104c  partmgr - ok
23:45:46.0863 0x104c  [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc          C:\Windows\System32\pcasvc.dll
23:45:46.0899 0x104c  PcaSvc - ok
23:45:46.0907 0x104c  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci            C:\Windows\system32\drivers\pci.sys
23:45:46.0926 0x104c  pci - ok
23:45:46.0953 0x104c  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
23:45:46.0965 0x104c  pciide - ok
23:45:46.0991 0x104c  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
23:45:47.0013 0x104c  pcmcia - ok
23:45:47.0017 0x104c  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw            C:\Windows\system32\drivers\pcw.sys
23:45:47.0031 0x104c  pcw - ok
23:45:47.0073 0x104c  [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
23:45:47.0123 0x104c  PEAUTH - ok
23:45:47.0195 0x104c  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
23:45:47.0244 0x104c  PerfHost - ok
23:45:47.0397 0x104c  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla            C:\Windows\system32\pla.dll
23:45:47.0543 0x104c  pla - ok
23:45:47.0619 0x104c  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
23:45:47.0673 0x104c  PlugPlay - ok
23:45:47.0705 0x104c  PnkBstrA - ok
23:45:47.0721 0x104c  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
23:45:47.0757 0x104c  PNRPAutoReg - ok
23:45:47.0799 0x104c  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
23:45:47.0820 0x104c  PNRPsvc - ok
23:45:47.0867 0x104c  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
23:45:47.0929 0x104c  PolicyAgent - ok
23:45:47.0961 0x104c  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power          C:\Windows\system32\umpo.dll
23:45:48.0007 0x104c  Power - ok
23:45:48.0098 0x104c  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
23:45:48.0182 0x104c  PptpMiniport - ok
23:45:48.0200 0x104c  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor      C:\Windows\system32\drivers\processr.sys
23:45:48.0230 0x104c  Processor - ok
23:45:48.0263 0x104c  [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc        C:\Windows\system32\profsvc.dll
23:45:48.0294 0x104c  ProfSvc - ok
23:45:48.0319 0x104c  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe
23:45:48.0331 0x104c  ProtectedStorage - ok
23:45:48.0357 0x104c  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
23:45:48.0406 0x104c  Psched - ok
23:45:48.0536 0x104c  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
23:45:48.0631 0x104c  ql2300 - ok
23:45:48.0646 0x104c  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
23:45:48.0663 0x104c  ql40xx - ok
23:45:48.0706 0x104c  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE          C:\Windows\system32\qwave.dll
23:45:48.0771 0x104c  QWAVE - ok
23:45:48.0794 0x104c  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
23:45:48.0822 0x104c  QWAVEdrv - ok
23:45:48.0836 0x104c  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
23:45:48.0875 0x104c  RasAcd - ok
23:45:48.0924 0x104c  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
23:45:48.0988 0x104c  RasAgileVpn - ok
23:45:49.0024 0x104c  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto        C:\Windows\System32\rasauto.dll
23:45:49.0081 0x104c  RasAuto - ok
23:45:49.0113 0x104c  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
23:45:49.0164 0x104c  Rasl2tp - ok
23:45:49.0190 0x104c  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
23:45:49.0245 0x104c  RasMan - ok
23:45:49.0283 0x104c  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
23:45:49.0373 0x104c  RasPppoe - ok
23:45:49.0391 0x104c  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
23:45:49.0445 0x104c  RasSstp - ok
23:45:49.0468 0x104c  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
23:45:49.0529 0x104c  rdbss - ok
23:45:49.0566 0x104c  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
23:45:49.0609 0x104c  rdpbus - ok
23:45:49.0630 0x104c  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
23:45:49.0689 0x104c  RDPCDD - ok
23:45:49.0716 0x104c  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
23:45:49.0743 0x104c  RDPENCDD - ok
23:45:49.0749 0x104c  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
23:45:49.0791 0x104c  RDPREFMP - ok
23:45:49.0875 0x104c  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
23:45:49.0910 0x104c  RdpVideoMiniport - ok
23:45:49.0945 0x104c  [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
23:45:49.0987 0x104c  RDPWD - ok
23:45:50.0030 0x104c  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
23:45:50.0059 0x104c  rdyboost - ok
23:45:50.0128 0x104c  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
23:45:50.0238 0x104c  RemoteAccess - ok
23:45:50.0279 0x104c  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
23:45:50.0310 0x104c  RemoteRegistry - ok
23:45:50.0346 0x104c  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
23:45:50.0377 0x104c  RFCOMM - ok
23:45:50.0392 0x104c  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
23:45:50.0423 0x104c  RpcEptMapper - ok
23:45:50.0453 0x104c  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
23:45:50.0499 0x104c  RpcLocator - ok
23:45:50.0531 0x104c  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs          C:\Windows\system32\rpcss.dll
23:45:50.0570 0x104c  RpcSs - ok
23:45:50.0589 0x104c  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
23:45:50.0623 0x104c  rspndr - ok
23:45:50.0640 0x104c  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs          C:\Windows\system32\lsass.exe
23:45:50.0651 0x104c  SamSs - ok
23:45:50.0668 0x104c  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
23:45:50.0684 0x104c  sbp2port - ok
23:45:50.0715 0x104c  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
23:45:50.0807 0x104c  SCardSvr - ok
23:45:50.0821 0x104c  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
23:45:50.0866 0x104c  scfilter - ok
23:45:50.0919 0x104c  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
23:45:50.0972 0x104c  Schedule - ok
23:45:50.0995 0x104c  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc    C:\Windows\System32\certprop.dll
23:45:51.0024 0x104c  SCPolicySvc - ok
23:45:51.0040 0x104c  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
23:45:51.0075 0x104c  SDRSVC - ok
23:45:51.0157 0x104c  [ CC781378E7EDA615D2CDCA3B17829FA4, 137BF83A2A3D69335AD031B8D73473526F782CB8917A34B3CD92F923E7660F2A ] SeaPort        C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
23:45:51.0184 0x104c  SeaPort - ok
23:45:51.0221 0x104c  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
23:45:51.0287 0x104c  secdrv - ok
23:45:51.0316 0x104c  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
23:45:51.0364 0x104c  seclogon - ok
23:45:51.0383 0x104c  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll
23:45:51.0426 0x104c  SENS - ok
23:45:51.0450 0x104c  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
23:45:51.0485 0x104c  SensrSvc - ok
23:45:51.0523 0x104c  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum        C:\Windows\system32\drivers\serenum.sys
23:45:51.0574 0x104c  Serenum - ok
23:45:51.0623 0x104c  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys
23:45:51.0684 0x104c  Serial - ok
23:45:51.0723 0x104c  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
23:45:51.0768 0x104c  sermouse - ok
23:45:51.0817 0x104c  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
23:45:51.0886 0x104c  SessionEnv - ok
23:45:51.0897 0x104c  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
23:45:51.0927 0x104c  sffdisk - ok
23:45:51.0962 0x104c  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
23:45:52.0015 0x104c  sffp_mmc - ok
23:45:52.0034 0x104c  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
23:45:52.0077 0x104c  sffp_sd - ok
23:45:52.0098 0x104c  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy        C:\Windows\system32\drivers\sfloppy.sys
23:45:52.0125 0x104c  sfloppy - ok
23:45:52.0225 0x104c  [ 2046AA7491DE7EFA4D70E615D9BC9D09, A8763D059AD68D5842C407FA9644E0B129BEF0F63CD87E62B80B05441EDC3489 ] Sftfs          C:\Windows\system32\DRIVERS\Sftfslh.sys
23:45:52.0305 0x104c  Sftfs - ok
23:45:52.0423 0x104c  [ 77C5A741A7452812F278EF2C18478862, 0B763679EB7EFB8ED9DCE7B429706E939BB65BA6BCF1BAE0E0426D4E87074B8C ] sftlist        C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
23:45:52.0447 0x104c  sftlist - ok
23:45:52.0514 0x104c  [ 0E0446BC4D51BE4263ACB7E33491191C, 2AD039FB440560658C4E06F67CC192EF71577EF3FF789A43C08430CE5EAE5A70 ] Sftplay        C:\Windows\system32\DRIVERS\Sftplaylh.sys
23:45:52.0583 0x104c  Sftplay - ok
23:45:52.0638 0x104c  [ C5FB982CD266E604ED3142102C26D62C, A6BC0D72E98F924274ECAD49C85F0775D1CD45B97CD43F53DF3992B560835FC5 ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirlh.sys
23:45:52.0673 0x104c  Sftredir - ok
23:45:52.0704 0x104c  [ 2575511AF67AA1FA068CCC4918E2C2A3, 3152FF5AC2CF6FE966DA59B1B33E22F9BD9B6BB4310441870528364BA9501A4D ] Sftvol          C:\Windows\system32\DRIVERS\Sftvollh.sys
23:45:52.0730 0x104c  Sftvol - ok
23:45:52.0755 0x104c  [ 39B1D0A636A400304565D4521FAD6D77, 1F01DB35B5A477AA7A77585C9304E6B5F3E67807531305BCA93A7F494CED8F59 ] sftvsa          C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
23:45:52.0783 0x104c  sftvsa - ok
23:45:52.0816 0x104c  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
23:45:52.0874 0x104c  SharedAccess - ok
23:45:52.0914 0x104c  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
23:45:52.0966 0x104c  ShellHWDetection - ok
23:45:53.0016 0x104c  [ 1BC348CF6BAA90EC8E533EF6E6A69933, 2B26F6EB701F48E092DED6A7B888F24736F2899EE81D54DD4B1E9DF7CFD36E7A ] SiSGbeLH        C:\Windows\system32\DRIVERS\SiSG664.sys
23:45:53.0053 0x104c  SiSGbeLH - ok
23:45:53.0095 0x104c  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
23:45:53.0108 0x104c  SiSRaid2 - ok
23:45:53.0123 0x104c  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
23:45:53.0137 0x104c  SiSRaid4 - ok
23:45:53.0219 0x104c  [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
23:45:53.0303 0x104c  SkypeUpdate - ok
23:45:53.0328 0x104c  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
23:45:53.0380 0x104c  Smb - ok
23:45:53.0421 0x104c  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
23:45:53.0467 0x104c  SNMPTRAP - ok
23:45:53.0491 0x104c  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr          C:\Windows\system32\drivers\spldr.sys
23:45:53.0505 0x104c  spldr - ok
23:45:53.0542 0x104c  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler        C:\Windows\System32\spoolsv.exe
23:45:53.0569 0x104c  Spooler - ok
23:45:53.0703 0x104c  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
23:45:53.0831 0x104c  sppsvc - ok
23:45:53.0852 0x104c  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
23:45:53.0909 0x104c  sppuinotify - ok
23:45:53.0954 0x104c  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv            C:\Windows\system32\DRIVERS\srv.sys
23:45:54.0007 0x104c  srv - ok
23:45:54.0033 0x104c  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
23:45:54.0076 0x104c  srv2 - ok
23:45:54.0083 0x104c  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
23:45:54.0113 0x104c  srvnet - ok
23:45:54.0160 0x104c  [ 8F8324ED1DE63FFC7B1A02CD2D963C72, E58603F81DEAFF1D45CB83FB6E625E6A13868741B833B1C9E60D672179D18EE0 ] ssadbus        C:\Windows\system32\DRIVERS\ssadbus.sys
23:45:54.0212 0x104c  ssadbus - ok
23:45:54.0249 0x104c  [ 58221EFCB74167B73667F0024C661CE0, D9B67A8897B4DC3E4729187F17ABEB4710CF57440D718E17ED828439198D34DB ] ssadmdfl        C:\Windows\system32\DRIVERS\ssadmdfl.sys
23:45:54.0277 0x104c  ssadmdfl - ok
23:45:54.0309 0x104c  [ 4DA7C71BFAC5AD71255B7E4CAB980163, 4CC0F9C8E96ECEF36EEB021E448A9734B63512D030516DC38B1A2EEAA1043AEC ] ssadmdm        C:\Windows\system32\DRIVERS\ssadmdm.sys
23:45:54.0366 0x104c  ssadmdm - ok
23:45:54.0417 0x104c  [ D33D1BD3EC0E766211A234F56A12726D, 53EEAA94865554F8422D111D717B548DF553B5B8647D2A45F3718BF4AEEBEC27 ] ssadserd        C:\Windows\system32\DRIVERS\ssadserd.sys
23:45:54.0485 0x104c  ssadserd - ok
23:45:54.0537 0x104c  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
23:45:54.0587 0x104c  SSDPSRV - ok
23:45:54.0602 0x104c  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc        C:\Windows\system32\sstpsvc.dll
23:45:54.0649 0x104c  SstpSvc - ok
23:45:54.0738 0x104c  [ A993E6FD9549499099461A0B192EEC3F, EC17EBE9A0EF481E704E64D07D257C3380046CBB5D9CAFABA90D21A2B84191FF ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
23:45:54.0766 0x104c  Steam Client Service - ok
23:45:54.0789 0x104c  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
23:45:54.0801 0x104c  stexstor - ok
23:45:54.0849 0x104c  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
23:45:54.0895 0x104c  stisvc - ok
23:45:54.0916 0x104c  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
23:45:54.0928 0x104c  swenum - ok
23:45:54.0965 0x104c  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv          C:\Windows\System32\swprv.dll
23:45:55.0039 0x104c  swprv - ok
23:45:55.0110 0x104c  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain        C:\Windows\system32\sysmain.dll
23:45:55.0176 0x104c  SysMain - ok
23:45:55.0195 0x104c  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
23:45:55.0243 0x104c  TabletInputService - ok
23:45:55.0266 0x104c  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv        C:\Windows\System32\tapisrv.dll
23:45:55.0301 0x104c  TapiSrv - ok
23:45:55.0318 0x104c  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS            C:\Windows\System32\tbssvc.dll
23:45:55.0379 0x104c  TBS - ok
23:45:55.0521 0x104c  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
23:45:55.0567 0x104c  Tcpip - ok
23:45:55.0693 0x104c  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
23:45:55.0741 0x104c  TCPIP6 - ok
23:45:55.0798 0x104c  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
23:45:55.0873 0x104c  tcpipreg - ok
23:45:55.0918 0x104c  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
23:45:55.0941 0x104c  TDPIPE - ok
23:45:55.0978 0x104c  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
23:45:55.0991 0x104c  TDTCP - ok
23:45:56.0015 0x104c  [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
23:45:56.0044 0x104c  tdx - ok
23:45:56.0132 0x104c  [ 4283D7125BA4BD0CB50BB0F78B54257A, A9DBFC45CDF7444BA7AD92734E66E3E4F844BF036AC19FD43F915151191F12C5 ] TelekomNM6      C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys
23:45:56.0161 0x104c  TelekomNM6 - ok
23:45:56.0183 0x104c  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
23:45:56.0200 0x104c  TermDD - ok
23:45:56.0271 0x104c  [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService    C:\Windows\System32\termsrv.dll
23:45:56.0322 0x104c  TermService - ok
23:45:56.0331 0x104c  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
23:45:56.0363 0x104c  Themes - ok
23:45:56.0397 0x104c  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER    C:\Windows\system32\mmcss.dll
23:45:56.0426 0x104c  THREADORDER - ok
23:45:56.0444 0x104c  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
23:45:56.0490 0x104c  TrkWks - ok
23:45:56.0559 0x104c  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
23:45:56.0606 0x104c  TrustedInstaller - ok
23:45:56.0646 0x104c  [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
23:45:56.0691 0x104c  tssecsrv - ok
23:45:56.0761 0x104c  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
23:45:56.0823 0x104c  TsUsbFlt - ok
23:45:56.0868 0x104c  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD        C:\Windows\system32\drivers\TsUsbGD.sys
23:45:56.0929 0x104c  TsUsbGD - ok
23:45:57.0105 0x104c  [ 65397D5C94AA5533E02E5F57C468C7F9, 072F0BB8F7980CDF758E30EE7F9F8C95FBEF28C79879CA6CA6CE8B2C11E72BA4 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
23:45:57.0155 0x104c  TuneUp.UtilitiesSvc - ok
23:45:57.0192 0x104c  [ DCC94C51D27C7EC0DADECA8F64C94FCF, 90C978C2284C9BDE3EFA1124616D824E0C361C388293FA22DBC8C3B70C920574 ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys
23:45:57.0211 0x104c  TuneUpUtilitiesDrv - ok
23:45:57.0257 0x104c  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
23:45:57.0311 0x104c  tunnel - ok
23:45:57.0329 0x104c  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
23:45:57.0344 0x104c  uagp35 - ok
23:45:57.0374 0x104c  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
23:45:57.0432 0x104c  udfs - ok
23:45:57.0467 0x104c  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect      C:\Windows\system32\UI0Detect.exe
23:45:57.0484 0x104c  UI0Detect - ok
23:45:57.0517 0x104c  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
23:45:57.0531 0x104c  uliagpkx - ok
23:45:57.0572 0x104c  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
23:45:57.0598 0x104c  umbus - ok
23:45:57.0618 0x104c  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
23:45:57.0640 0x104c  UmPass - ok
23:45:57.0828 0x104c  [ EB79C6C91A99930015EF29AE7FA802D1, 96D00BA330854C7763BF385D84D47C3D1B87C4085A91D73B558C86829930DC4B ] UNS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
23:45:57.0888 0x104c  UNS - ok
23:45:57.0929 0x104c  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
23:45:57.0978 0x104c  upnphost - ok
23:45:58.0012 0x104c  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
23:45:58.0048 0x104c  usbccgp - ok
23:45:58.0079 0x104c  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
23:45:58.0112 0x104c  usbcir - ok
23:45:58.0150 0x104c  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci        C:\Windows\system32\drivers\usbehci.sys
23:45:58.0209 0x104c  usbehci - ok
23:45:58.0266 0x104c  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
23:45:58.0332 0x104c  usbhub - ok
23:45:58.0376 0x104c  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci        C:\Windows\system32\drivers\usbohci.sys
23:45:58.0416 0x104c  usbohci - ok
23:45:58.0472 0x104c  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
23:45:58.0518 0x104c  usbprint - ok
23:45:58.0555 0x104c  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan        C:\Windows\system32\DRIVERS\usbscan.sys
23:45:58.0586 0x104c  usbscan - ok
23:45:58.0620 0x104c  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:45:58.0660 0x104c  USBSTOR - ok
23:45:58.0693 0x104c  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
23:45:58.0728 0x104c  usbuhci - ok
23:45:58.0775 0x104c  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
23:45:58.0836 0x104c  usbvideo - ok
23:45:58.0878 0x104c  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms          C:\Windows\System32\uxsms.dll
23:45:58.0977 0x104c  UxSms - ok
23:45:59.0047 0x104c  [ BF454933AE678B2D43284929BD14EDDE, 1B1A7A6563BD8A7EDA0B1AAED4A3BBED475E4534BAD2F8ABB54FE97B4DF31A81 ] UxTuneUp        C:\Windows\System32\uxtuneup.dll
23:45:59.0066 0x104c  UxTuneUp - ok
23:45:59.0081 0x104c  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc        C:\Windows\system32\lsass.exe
23:45:59.0094 0x104c  VaultSvc - ok
23:45:59.0127 0x104c  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
23:45:59.0141 0x104c  vdrvroot - ok
23:45:59.0205 0x104c  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds            C:\Windows\System32\vds.exe
23:45:59.0291 0x104c  vds - ok
23:45:59.0327 0x104c  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
23:45:59.0363 0x104c  vga - ok
23:45:59.0389 0x104c  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave        C:\Windows\System32\drivers\vga.sys
23:45:59.0447 0x104c  VgaSave - ok
23:45:59.0470 0x104c  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
23:45:59.0492 0x104c  vhdmp - ok
23:45:59.0528 0x104c  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
23:45:59.0551 0x104c  viaide - ok
23:45:59.0571 0x104c  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
23:45:59.0588 0x104c  volmgr - ok
23:45:59.0613 0x104c  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
23:45:59.0634 0x104c  volmgrx - ok
23:45:59.0666 0x104c  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap        C:\Windows\system32\drivers\volsnap.sys
23:45:59.0693 0x104c  volsnap - ok
23:45:59.0735 0x104c  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
23:45:59.0755 0x104c  vsmraid - ok
23:45:59.0853 0x104c  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS            C:\Windows\system32\vssvc.exe
23:45:59.0935 0x104c  VSS - ok
23:45:59.0964 0x104c  vToolbarUpdater18.1.9 - ok
23:45:59.0976 0x104c  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
23:46:00.0011 0x104c  vwifibus - ok
23:46:00.0032 0x104c  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
23:46:00.0064 0x104c  vwififlt - ok
23:46:00.0136 0x104c  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time        C:\Windows\system32\w32time.dll
23:46:00.0191 0x104c  W32Time - ok
23:46:00.0246 0x104c  [ 0D67B715AE6729D0B518D20B7A7BAD1C, 05B044CB816CBF54DCB634AC765A5937C76B471722C6D6E1A9C27E7EBAB68913 ] WacHidRouter    C:\Windows\system32\DRIVERS\wachidrouter.sys
23:46:00.0286 0x104c  WacHidRouter - ok
23:46:00.0314 0x104c  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
23:46:00.0336 0x104c  WacomPen - ok
23:46:00.0369 0x104c  [ 1042B08B4336EF3CE34E09435BB33A4A, A42B447B4A9B364BAE329F75D36A906999E8CB754F1B10DE322B6611FF9764F7 ] wacomrouterfilter C:\Windows\system32\DRIVERS\wacomrouterfilter.sys
23:46:00.0380 0x104c  wacomrouterfilter - ok
23:46:00.0408 0x104c  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
23:46:00.0454 0x104c  WANARP - ok
23:46:00.0459 0x104c  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
23:46:00.0488 0x104c  Wanarpv6 - ok
23:46:00.0576 0x104c  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
23:46:00.0691 0x104c  wbengine - ok
23:46:00.0723 0x104c  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
23:46:00.0765 0x104c  WbioSrvc - ok
23:46:00.0798 0x104c  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
23:46:00.0847 0x104c  wcncsvc - ok
23:46:00.0863 0x104c  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
23:46:00.0897 0x104c  WcsPlugInService - ok
23:46:00.0936 0x104c  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
23:46:00.0949 0x104c  Wd - ok
23:46:01.0003 0x104c  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
23:46:01.0115 0x104c  Wdf01000 - ok
23:46:01.0144 0x104c  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
23:46:01.0176 0x104c  WdiServiceHost - ok
23:46:01.0199 0x104c  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost  C:\Windows\system32\wdi.dll
23:46:01.0215 0x104c  WdiSystemHost - ok
23:46:01.0255 0x104c  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient      C:\Windows\System32\webclnt.dll
23:46:01.0280 0x104c  WebClient - ok
23:46:01.0303 0x104c  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
23:46:01.0370 0x104c  Wecsvc - ok
23:46:01.0402 0x104c  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
23:46:01.0448 0x104c  wercplsupport - ok
23:46:01.0502 0x104c  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
23:46:01.0566 0x104c  WerSvc - ok
23:46:01.0592 0x104c  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
23:46:01.0644 0x104c  WfpLwf - ok
23:46:01.0680 0x104c  [ 52DED146E4797E6CCF94799E8E22BB2A, 57A29260D81AA3AD3F8C29E9CFA7CE3970D7A8BF673ADD9B256EE76C7DEC080E ] WimFltr        C:\Windows\system32\DRIVERS\wimfltr.sys
23:46:01.0698 0x104c  WimFltr - ok
23:46:01.0729 0x104c  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
23:46:01.0742 0x104c  WIMMount - ok
23:46:01.0780 0x104c  WinDefend - ok
23:46:01.0798 0x104c  WinHttpAutoProxySvc - ok
23:46:01.0870 0x104c  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
23:46:01.0912 0x104c  Winmgmt - ok
23:46:02.0023 0x104c  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM          C:\Windows\system32\WsmSvc.dll
23:46:02.0238 0x104c  WinRM - ok
23:46:02.0289 0x104c  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc        C:\Windows\System32\wlansvc.dll
23:46:02.0344 0x104c  Wlansvc - ok
23:46:02.0546 0x104c  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
23:46:02.0600 0x104c  wlidsvc - ok
23:46:02.0621 0x104c  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi        C:\Windows\system32\DRIVERS\wmiacpi.sys
23:46:02.0649 0x104c  WmiAcpi - ok
23:46:02.0681 0x104c  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
23:46:02.0739 0x104c  wmiApSrv - ok
23:46:02.0794 0x104c  WMPNetworkSvc - ok
23:46:02.0828 0x104c  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
23:46:02.0876 0x104c  WPCSvc - ok
23:46:02.0898 0x104c  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
23:46:02.0923 0x104c  WPDBusEnum - ok
23:46:02.0946 0x104c  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
23:46:02.0989 0x104c  ws2ifsl - ok
23:46:03.0014 0x104c  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll
23:46:03.0040 0x104c  wscsvc - ok
23:46:03.0043 0x104c  WSearch - ok
23:46:03.0213 0x104c  [ 9A5D9A8E92160E16A9D25DDAC901D28E, 4422195D01FEEE1C9D5A2F2F1F920EDED71B03A91874D2095ACCBCED71E59DD6 ] WTabletServiceCon C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
23:46:03.0248 0x104c  WTabletServiceCon - ok
23:46:03.0376 0x104c  [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv        C:\Windows\system32\wuaueng.dll
23:46:03.0435 0x104c  wuauserv - ok
23:46:03.0476 0x104c  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
23:46:03.0506 0x104c  WudfPf - ok
23:46:03.0546 0x104c  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
23:46:03.0579 0x104c  WUDFRd - ok
23:46:03.0603 0x104c  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
23:46:03.0632 0x104c  wudfsvc - ok
23:46:03.0672 0x104c  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc        C:\Windows\System32\wwansvc.dll
23:46:03.0715 0x104c  WwanSvc - ok
23:46:03.0812 0x104c  X6va006 - ok
23:46:03.0848 0x104c  X6va008 - ok
23:46:03.0886 0x104c  ================ Scan global ===============================
23:46:03.0911 0x104c  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
23:46:03.0961 0x104c  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
23:46:03.0997 0x104c  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
23:46:04.0019 0x104c  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
23:46:04.0052 0x104c  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
23:46:04.0060 0x104c  [ Global ] - ok
23:46:04.0061 0x104c  ================ Scan MBR ==================================
23:46:04.0072 0x104c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:46:04.0443 0x104c  \Device\Harddisk0\DR0 - ok
23:46:04.0745 0x104c  [ 64B1E91C5C6C2157642651010728F90F ] \Device\Harddisk1\DR1
23:46:04.0930 0x104c  \Device\Harddisk1\DR1 - ok
23:46:04.0931 0x104c  ================ Scan VBR ==================================
23:46:04.0938 0x104c  [ 1AC1A0DF5506C185B97E5E631AF78847 ] \Device\Harddisk0\DR0\Partition1
23:46:04.0942 0x104c  \Device\Harddisk0\DR0\Partition1 - ok
23:46:04.0974 0x104c  [ 7C5AFB40563CD6D5C01497ECAC032497 ] \Device\Harddisk0\DR0\Partition2
23:46:04.0977 0x104c  \Device\Harddisk0\DR0\Partition2 - ok
23:46:04.0982 0x104c  [ B1F4D14CBCB1A9517810F24EF71B5002 ] \Device\Harddisk1\DR1\Partition1
23:46:04.0983 0x104c  \Device\Harddisk1\DR1\Partition1 - ok
23:46:04.0988 0x104c  [ 2555BEA6F5052ABB2ABAA738131B25B6 ] \Device\Harddisk1\DR1\Partition2
23:46:04.0990 0x104c  \Device\Harddisk1\DR1\Partition2 - ok
23:46:04.0990 0x104c  ================ Scan generic autorun ======================
23:46:05.0137 0x104c  [ 29052F387998AF3E5A55A016FF4028D4, 2241E9D3E247BA01DB0C89EAABD6EC74597F6E38220696BC2B916A39F9D1D7B6 ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
23:46:05.0190 0x104c  RtHDVBg - ok
23:46:05.0231 0x104c  [ 0E6C6542856BBD380356983179F859E7, 6519E585348DF1E64B147D682D0962191306FEE57E596ECC5E8BD310C14698F6 ] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
23:46:05.0262 0x104c  AmIcoSinglun64 - detected UnsignedFile.Multi.Generic ( 1 )
23:46:07.0850 0x104c  Detect skipped due to KSN trusted
23:46:07.0850 0x104c  AmIcoSinglun64 - ok
23:46:07.0851 0x104c  ETDCtrl - ok
23:46:07.0960 0x104c  [ B8B1A3F5EFA0DBE88EAB41A7110B9A31, 2A786D77485CE494222131DA3DD2ACA6E1A8AE812B3312DB90EB80BC324BD79A ] C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe
23:46:07.0983 0x104c  WrtMon.exe - ok
23:46:08.0025 0x104c  [ 28062B17191C9450BF6C6C3EF8C7EB27, 4859C5708DFD119021F7B7FFB38F0B316675E1E4D5D51A10D4265F712CF8CDB6 ] C:\Windows\system32\igfxtray.exe
23:46:08.0059 0x104c  IgfxTray - ok
23:46:08.0117 0x104c  [ 28FC280487F0BAAE5E8119257C4EEF8C, F574BC70B79B77912FC683B3EB0BE6929E7758284ED5B47008E18B0E4A4A09FD ] C:\Windows\system32\hkcmd.exe
23:46:08.0142 0x104c  HotKeysCmds - ok
23:46:08.0212 0x104c  [ F29BEA821C753E4F00177690F70CDC13, 0EDB40F4A4C23553C0288E6E3AD65E7B523F6764C87C6C36C3ECB0C1940C5176 ] C:\Windows\system32\igfxpers.exe
23:46:08.0244 0x104c  Persistence - ok
23:46:08.0366 0x104c  [ BD87D5F5D68AC07243010A6F5176F897, D6518C2990DDAE5E88C9BE649B34A09A0C19A2EAA14967B45F6B176E34DC2EEB ] C:\Program Files (x86)\ASUS\APRP\APRP.EXE
23:46:08.0427 0x104c  ASUSPRP - detected UnsignedFile.Multi.Generic ( 1 )
23:46:11.0078 0x104c  Detect skipped due to KSN trusted
23:46:11.0078 0x104c  ASUSPRP - ok
23:46:11.0210 0x104c  [ BBE8B2B11C5903995802B2565DF4947B, 9C199205C93CD87347B75A0FBDC9BD0304E1B8DDE7EDCEAE5F951D647CEBB2AF ] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe
23:46:11.0241 0x104c  ASUSWebStorage - ok
23:46:11.0463 0x104c  [ 5BB1F77C8AF725A15EC9366498D275BB, 87146A81FB6F313ACF087C72F219CFAA92D4CA456810C49241BD182384B2DAAC ] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
23:46:11.0587 0x104c  ATKOSD2 - ok
23:46:11.0636 0x104c  [ 79A3B950988F8D2B81906D0C0473158B, 7D9EDB4F9A4800D31C103CF2BBC93C0F5F31888E93E899C43EC5984B4807C3D8 ] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
23:46:11.0660 0x104c  ATKMEDIA - ok
23:46:11.0673 0x104c  [ 5AEBF6FA9805C9101220AA4FB4FA17E7, A9B2FC41380211A6C44E839A95676A5BA868CEEBB56D83A780230434C2A20836 ] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
23:46:11.0681 0x104c  HControlUser - ok
23:46:11.0759 0x104c  [ FD22B00049F775E952371E9C3DAC631B, CBC3BF5DBF3E0D5EA4095F9FE90D8688D43BEF352B657D5EF5D843267ED35388 ] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
23:46:11.0824 0x104c  Wireless Console 3 - detected UnsignedFile.Multi.Generic ( 1 )
23:46:14.0425 0x104c  Detect skipped due to KSN trusted
23:46:14.0425 0x104c  Wireless Console 3 - ok
23:46:14.0524 0x104c  [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
23:46:14.0547 0x104c  UpdateLBPShortCut - ok
23:46:14.0604 0x104c  [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
23:46:14.0632 0x104c  UpdateP2GoShortCut - ok
23:46:14.0665 0x104c  [ 5EB62C1DC42AF9BDF4269432856169DB, 5B7564CBD4820B2747CE61EB837767FD22EFF9ECB64A1864F12F8E1AE42B6A2C ] C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.EXE
23:46:14.0679 0x104c  PMSpeed - ok
23:46:14.0776 0x104c  [ F80FFD4517C0B8025ECC54FBB30F88C4, 6CA7A9E037568D4F32C78A67A5D85A05A4CA858FA3D295ACB6ED508D44782264 ] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
23:46:14.0806 0x104c  FUFAXSTM - detected UnsignedFile.Multi.Generic ( 1 )
23:46:17.0447 0x104c  Detect skipped due to KSN trusted
23:46:17.0447 0x104c  FUFAXSTM - ok
23:46:17.0715 0x104c  [ D63797E8E7781EE1500A810CB6194FA6, 5C96DA00B98F0776E6174EBB7D4D6DB634838E130D8581E11811831D2C57B119 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
23:46:17.0749 0x104c  SunJavaUpdateSched - ok
23:46:17.0918 0x104c  [ 2AA5DD75EA1281432C40D22B5FD87D3A, 9868D4176C8F08EB72B0B992D3E2A480C587930CA025B4FDF3212F99B79C3017 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
23:46:17.0947 0x104c  avgnt - ok
23:46:18.0046 0x104c  [ 048EA4B978851788E9F5E8E4F081DF7A, EB62719AC0DCC18FF056F2CD84438BF14B61E38F0619617C81961C6257BDFCEC ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
23:46:18.0081 0x104c  Adobe ARM - ok
23:46:18.0195 0x104c  [ 1E873743DEC469609C35275C5557B34D, EC8952601B4643B9B82DA5B7C5A85DD19CC1F07889A2B69E4FCCDCAC296A9FA1 ] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
23:46:18.0220 0x104c  Avira Systray - ok
23:46:18.0334 0x104c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
23:46:18.0584 0x104c  Sidebar - ok
23:46:18.0667 0x104c  [ 6BF7676296D5359AFC135A5397000053, D31B9BCB856D6EFDEA27E4D4D341FF939BCBF0E8C97786B447C2074B3C68298E ] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
23:46:18.0722 0x104c  ISUSPM - ok
23:46:18.0759 0x104c  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
23:46:18.0802 0x104c  mctadmin - ok
23:46:18.0855 0x104c  [ F15D71B80E65161365665334D0B98546, CD41A0268202ECF0D339873C55E6EAC7E7500ABCB7A492E8257F524B30F1462D ] C:\Program Files (x86)\Overwolf\Overwolf.exe
23:46:18.0878 0x104c  Overwolf - ok
23:46:18.0922 0x104c  [ D172D435DE06F2C5F06E2142A75F7173, 58491A113622162C3833F919944C1E62739DA6C55264BE61B3472CCC6206BEDA ] C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSB.EXE
23:46:18.0952 0x104c  Scan Buttons - ok
23:46:19.0115 0x104c  [ C368EA4E7312AF32FAD85967777121F4, CE5C7F80E4C24F65D7824BF1EE59E46EF47F39900BDBEE402D8EBD6E8BB2F382 ] C:\Program Files (x86)\Steam\Steam.exe
23:46:19.0158 0x104c  Steam - ok
23:46:19.0185 0x104c  Skype - ok
23:46:19.0341 0x104c  [ BCF24D41E89A28F1AC5BDD64FFF103DD, D9C2E7DC792C2E9BEBA30328A84C0BFD9955ED20701C026855BBCDEC1001DD9D ] C:\Program Files (x86)\Infigo\Infigo.exe
23:46:19.0363 0x104c  Infigo - ok
23:46:19.0469 0x104c  [ E3BF29CED96790CDAAFA981FFDDF53A3, 76CB27EF7B27E5636EDA9D95229519B2A2870729A0BB694F1FD11CD602BAC4DC ] C:\Program Files\Windows Sidebar\sidebar.exe
23:46:19.0543 0x104c  Sidebar - ok
23:46:19.0546 0x104c  Waiting for KSN requests completion. In queue: 19
23:46:20.0546 0x104c  Waiting for KSN requests completion. In queue: 19
23:46:21.0546 0x104c  Waiting for KSN requests completion. In queue: 19
23:46:22.0674 0x104c  AV detected via SS2: Avira Desktop, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 14.0.6.548 ), 0x40000 ( disabled : updated )
23:46:22.0724 0x104c  Win FW state via NFP2: enabled
23:46:25.0198 0x104c  ============================================================
23:46:25.0198 0x104c  Scan finished
23:46:25.0198 0x104c  ============================================================
23:46:25.0218 0x10b4  Detected object count: 0
23:46:25.0218 0x10b4  Actual detected object count: 0

Es wurde leider gar nichts gefunden :/

Habe die Einstellungen so angeheackt, wie es in der Anleitung steht. Sollte ich mal erneut scannen? Habe einmal gescannt.

cosinus 17.08.2014 20:57

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Math20 17.08.2014 22:47

Code:

# AdwCleaner v3.306 - Bericht erstellt am 17/08/2014 um 23:19:26
# Aktualisiert 15/08/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Matthias - MATTHIAS-PC
# Gestartet von : C:\Users\Matthias\Downloads\adwcleaner_3.306.exe
# Option : Loschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknupfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v0.0.0.0


-\\ Google Chrome v33.0.1750.117

[ Datei : C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Matthias^2\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [36612 octets] - [16/08/2014 00:31:40]
AdwCleaner[R1].txt - [1039 octets] - [17/08/2014 23:18:09]
AdwCleaner[S0].txt - [36019 octets] - [16/08/2014 00:42:20]
AdwCleaner[S1].txt - [975 octets] - [17/08/2014 23:19:26]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1034 octets] ##########

Schritt 2 Ergebnis:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Matthias on 17.08.2014 at 23:33:30,57
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Matthias\appdata\local\{80aa28bd-953b-0d79-ac52-59b01480de54}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.08.2014 at 23:40:15,67
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2014 01
Ran by Matthias (administrator) on MATTHIAS-PC on 17-08-2014 23:43:27
Running from C:\Users\Matthias\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
() C:\Program Files (x86)\Infigo\InfigoOperator.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\Pmsb.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(MAVIN LOG, S.L.) C:\Program Files (x86)\Infigo\Infigo.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
() C:\Program Files\Telekom\Meine Dienste\MeineDienste.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.78.41.0\OverwolfHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
() C:\Program Files (x86)\Overwolf\0.78.41.0\OverwolfBrowser.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.78.41.0\OverwolfHelper64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Farbar) C:\Users\Matthias\Downloads\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-01] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-08-11] (Alcor Micro Corp.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-13] (ELAN Microelectronics Corp.)
HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [PMSpeed] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.EXE [112464 2009-12-04] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-08] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [39712 2014-08-06] (Overwolf LTD)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Scan Buttons] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSB.EXE [202576 2009-12-09] (NewSoft Technology Corporation)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1753280 2014-07-16] (Valve Corporation)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe [607032 2014-06-26] (MAVIN LOG, S.L.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe ()
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Matthias\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

Chrome:
=======
CHR HomePage:
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Docs) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-10]
CHR Extension: (Google Drive) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-16]
CHR Extension: (YouTube) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-16]
CHR Extension: (Google-Suche) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-16]
CHR Extension: (Avira Browser Safety) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-16]
CHR Extension: (Google Wallet) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Google Mail) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-08] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)
R2 InfigoOperator; C:\Program Files (x86)\Infigo\InfigoOperator.exe [19768 2014-06-26] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4229912 2011-11-28] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [977184 2014-08-06] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-02-19] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-10-22] (TuneUp Software)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2013-12-17] (Wacom Technology, Corp.)
S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-12] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-26] (DT Soft Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-17] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-03] (INCA Internet Co., Ltd.) [File not signed]
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-05-08] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 EraserUtilDrv11220; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys [X]
S3 X6va006; \??\C:\Users\Matthias\AppData\Local\Temp\006912B.tmp [X]
S3 X6va008; \??\C:\Users\Matthias\AppData\Local\Temp\0085798.tmp [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-17 23:42 - 2014-08-17 23:42 - 02101760 _____ (Farbar) C:\Users\Matthias\Downloads\FRST64 (1).exe
2014-08-17 23:40 - 2014-08-17 23:40 - 00000739 _____ () C:\Users\Matthias\Desktop\JRT.txt
2014-08-16 23:43 - 2014-08-16 23:43 - 04161313 _____ () C:\Users\Matthias\Downloads\tdsskiller.zip
2014-08-16 23:38 - 2014-08-16 23:39 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Matthias\Downloads\tdsskiller.exe
2014-08-16 21:21 - 2014-08-16 21:21 - 00054036 _____ () C:\ComboFix.txt
2014-08-16 20:55 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-16 20:55 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-16 20:55 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-16 20:49 - 2014-08-16 21:21 - 00000000 ____D () C:\Qoobox
2014-08-16 20:48 - 2014-08-16 21:20 - 00000000 ____D () C:\Windows\erdnt
2014-08-16 20:47 - 2014-08-16 20:48 - 05571320 ____R (Swearware) C:\Users\Matthias\Downloads\ComboFix.exe
2014-08-16 01:58 - 2014-08-16 01:58 - 00000000 ____D () C:\Users\Matthias\Desktop\Protokolle
2014-08-16 01:10 - 2014-08-16 01:15 - 00041952 _____ () C:\Users\Matthias\Downloads\Addition.txt
2014-08-16 01:09 - 2014-08-17 23:43 - 00023690 _____ () C:\Users\Matthias\Downloads\FRST.txt
2014-08-16 01:09 - 2014-08-17 23:43 - 00000000 ____D () C:\FRST
2014-08-16 01:07 - 2014-08-16 01:07 - 02100224 _____ (Farbar) C:\Users\Matthias\Downloads\FRST64.exe
2014-08-16 00:56 - 2014-08-16 00:56 - 00000000 ____D () C:\Windows\ERUNT
2014-08-16 00:54 - 2014-08-16 00:54 - 01016261 _____ (Thisisu) C:\Users\Matthias\Downloads\JRT.exe
2014-08-16 00:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-16 00:31 - 2014-08-17 23:19 - 00000000 ____D () C:\AdwCleaner
2014-08-16 00:31 - 2014-08-16 00:31 - 01361203 _____ () C:\Users\Matthias\Downloads\adwcleaner_3.306.exe
2014-08-15 17:16 - 2014-08-15 17:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Sherlock Holmes -Teile
2014-08-15 17:15 - 2014-08-16 13:30 - 00000000 ____D () C:\Users\Matthias\Desktop\Stronghold-Teile
2014-08-14 21:16 - 2014-08-14 21:17 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Dateien
2014-08-14 21:14 - 2014-08-14 21:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Ordner
2014-08-14 18:06 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 18:06 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-14 18:06 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-14 18:06 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-14 18:05 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 18:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-14 18:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-14 18:05 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 18:04 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-14 18:04 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-14 18:04 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-14 18:04 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-14 18:04 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-14 18:04 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-14 18:04 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-14 18:04 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-14 18:04 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-14 18:04 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-14 18:04 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-14 18:04 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-14 18:04 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-14 18:04 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-14 18:04 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-14 18:04 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-14 18:04 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-14 18:04 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-14 18:04 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-14 18:04 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-14 18:04 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-14 18:04 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-14 18:04 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-14 18:04 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-14 18:04 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-14 18:04 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 18:04 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-14 18:04 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-14 18:04 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-14 18:04 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-14 18:04 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-14 18:04 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-14 18:04 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-14 18:04 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-14 18:04 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-14 18:04 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-14 18:04 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-14 18:04 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-14 18:04 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-14 18:04 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-14 18:04 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-14 18:04 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-14 18:04 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-14 18:04 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-14 18:04 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-14 18:04 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-14 18:04 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-14 18:04 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-14 18:04 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-14 18:04 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-14 18:04 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-14 18:04 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-14 18:04 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-14 18:04 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-14 18:04 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-14 18:04 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-14 18:01 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-14 18:01 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-14 18:01 - 2014-07-16 05:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-14 18:01 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-14 18:01 - 2014-07-16 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-14 18:01 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-14 18:01 - 2014-07-16 04:12 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-14 18:01 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-14 18:01 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-14 18:01 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-14 18:01 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-14 18:01 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-14 18:01 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-14 18:01 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-14 18:01 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-14 18:01 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-14 18:01 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-14 18:01 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-14 15:57 - 2014-08-17 23:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-14 15:56 - 2014-08-14 15:56 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-14 15:56 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-14 15:56 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-14 15:54 - 2014-08-14 15:55 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Matthias\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-14 14:48 - 2014-08-14 14:48 - 00001270 _____ () C:\Users\Matthias\Desktop\Revo Uninstaller.lnk
2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-14 14:47 - 2014-08-14 14:47 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Matthias\Downloads\revosetup.exe
2014-08-14 14:38 - 2014-08-14 14:40 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000993 _____ () C:\Users\Matthias\Desktop\Infigo.lnk
2014-08-14 14:38 - 2014-08-14 14:38 - 00000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Program Files (x86)\Infigo
2014-08-14 14:37 - 2014-08-14 14:37 - 07501568 _____ () C:\Users\Matthias\Downloads\Infigo_setup.exe
2014-08-12 21:04 - 2014-08-12 21:04 - 00000932 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\Program Files\CPUID
2014-08-08 16:16 - 2014-08-08 16:22 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-07 02:55 - 2014-08-07 02:55 - 00004122 _____ () C:\Users\Matthias\Documents\test.wav.wlmp
2014-08-06 19:48 - 2014-08-07 01:37 - 00000000 ____D () C:\Users\Matthias\Documents\Detektic Conan Projekt
2014-08-06 19:48 - 2014-08-06 19:50 - 00000000 ____D () C:\Users\Matthias\Documents\Cha-Cha-Cha
2014-08-03 17:08 - 2014-08-03 17:08 - 00000222 _____ () C:\Users\Matthias\Desktop\The Forest.url

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-17 23:43 - 2014-08-16 01:09 - 00023690 _____ () C:\Users\Matthias\Downloads\FRST.txt
2014-08-17 23:43 - 2014-08-16 01:09 - 00000000 ____D () C:\FRST
2014-08-17 23:42 - 2014-08-17 23:42 - 02101760 _____ (Farbar) C:\Users\Matthias\Downloads\FRST64 (1).exe
2014-08-17 23:40 - 2014-08-17 23:40 - 00000739 _____ () C:\Users\Matthias\Desktop\JRT.txt
2014-08-17 23:32 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-17 23:32 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-17 23:27 - 2014-08-14 15:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-17 23:25 - 2012-07-26 12:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-17 23:24 - 2011-12-17 01:24 - 00000000 ____D () C:\Users\Matthias\AppData\Local\Overwolf
2014-08-17 23:22 - 2013-07-22 22:48 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Dropbox
2014-08-17 23:22 - 2011-12-20 21:31 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\.oit
2014-08-17 23:22 - 2011-10-25 02:22 - 00000000 ___HD () C:\ASUS.DAT
2014-08-17 23:20 - 2011-04-13 03:39 - 02310014 _____ () C:\Windows\PFRO.log
2014-08-17 23:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-17 23:20 - 2009-07-14 06:51 - 00182594 _____ () C:\Windows\setupact.log
2014-08-17 23:19 - 2014-08-16 00:31 - 00000000 ____D () C:\AdwCleaner
2014-08-17 23:19 - 2011-08-31 16:40 - 01618804 _____ () C:\Windows\WindowsUpdate.log
2014-08-17 22:56 - 2012-04-01 12:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-17 14:52 - 2009-07-14 06:45 - 00314176 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-16 23:43 - 2014-08-16 23:43 - 04161313 _____ () C:\Users\Matthias\Downloads\tdsskiller.zip
2014-08-16 23:43 - 2014-07-10 12:38 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Matthias\Desktop\TDSSKiller.exe
2014-08-16 23:39 - 2014-08-16 23:38 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Matthias\Downloads\tdsskiller.exe
2014-08-16 21:21 - 2014-08-16 21:21 - 00054036 _____ () C:\ComboFix.txt
2014-08-16 21:21 - 2014-08-16 20:49 - 00000000 ____D () C:\Qoobox
2014-08-16 21:21 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-08-16 21:20 - 2014-08-16 20:48 - 00000000 ____D () C:\Windows\erdnt
2014-08-16 21:15 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-08-16 21:08 - 2011-10-25 02:22 - 00000000 ____D () C:\Users\Matthias
2014-08-16 20:48 - 2014-08-16 20:47 - 05571320 ____R (Swearware) C:\Users\Matthias\Downloads\ComboFix.exe
2014-08-16 13:30 - 2014-08-15 17:15 - 00000000 ____D () C:\Users\Matthias\Desktop\Stronghold-Teile
2014-08-16 01:58 - 2014-08-16 01:58 - 00000000 ____D () C:\Users\Matthias\Desktop\Protokolle
2014-08-16 01:15 - 2014-08-16 01:10 - 00041952 _____ () C:\Users\Matthias\Downloads\Addition.txt
2014-08-16 01:07 - 2014-08-16 01:07 - 02100224 _____ (Farbar) C:\Users\Matthias\Downloads\FRST64.exe
2014-08-16 00:56 - 2014-08-16 00:56 - 00000000 ____D () C:\Windows\ERUNT
2014-08-16 00:54 - 2014-08-16 00:54 - 01016261 _____ (Thisisu) C:\Users\Matthias\Downloads\JRT.exe
2014-08-16 00:31 - 2014-08-16 00:31 - 01361203 _____ () C:\Users\Matthias\Downloads\adwcleaner_3.306.exe
2014-08-15 22:21 - 2011-12-13 17:49 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Skype
2014-08-15 20:25 - 2012-02-26 21:18 - 00000000 ____D () C:\Users\Matthias\AppData\Local\CrashDumps
2014-08-15 20:10 - 2011-10-25 02:22 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-08-15 17:16 - 2014-08-15 17:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Sherlock Holmes -Teile
2014-08-15 14:59 - 2013-10-25 15:15 - 00000000 ____D () C:\Program Files (x86)\appbarioDE_1
2014-08-14 21:17 - 2014-08-14 21:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Dateien
2014-08-14 21:16 - 2014-08-14 21:14 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Ordner
2014-08-14 19:20 - 2013-07-21 19:17 - 00000000 ____D () C:\Users\Matthias\.gimp-2.8
2014-08-14 18:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-14 18:14 - 2013-08-15 02:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 18:10 - 2011-12-17 15:15 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 18:04 - 2014-05-07 01:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 17:08 - 2011-08-31 16:54 - 00002902 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-08-14 17:08 - 2011-08-31 16:54 - 00001973 _____ () C:\Windows\system32\ServiceFilter.ini
2014-08-14 17:03 - 2012-07-30 20:53 - 00000000 ____D () C:\ProgramData\YTD YouTube Downloader & Converter
2014-08-14 16:04 - 2012-07-31 00:15 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\hellomoto
2014-08-14 15:57 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-08-14 15:56 - 2014-08-14 15:56 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2013-04-01 20:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-14 15:55 - 2014-08-14 15:54 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Matthias\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-14 15:41 - 2013-07-22 23:48 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\puush
2014-08-14 15:31 - 2012-06-29 22:32 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-08-14 15:06 - 2012-12-04 20:02 - 00000000 ____D () C:\Program Files (x86)\EA Games
2014-08-14 14:48 - 2014-08-14 14:48 - 00001270 _____ () C:\Users\Matthias\Desktop\Revo Uninstaller.lnk
2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-14 14:47 - 2014-08-14 14:47 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Matthias\Downloads\revosetup.exe
2014-08-14 14:40 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000993 _____ () C:\Users\Matthias\Desktop\Infigo.lnk
2014-08-14 14:38 - 2014-08-14 14:38 - 00000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Program Files (x86)\Infigo
2014-08-14 14:37 - 2014-08-14 14:37 - 07501568 _____ () C:\Users\Matthias\Downloads\Infigo_setup.exe
2014-08-14 09:09 - 2009-07-14 04:34 - 00000505 _____ () C:\Windows\win.ini
2014-08-13 11:46 - 2012-02-26 21:14 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\TS3Client
2014-08-13 10:36 - 2012-02-26 21:13 - 00000000 ____D () C:\Users\Matthias\AppData\Local\TeamSpeak 3 Client
2014-08-13 02:22 - 2012-12-12 22:06 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\SoftGrid Client
2014-08-12 21:04 - 2014-08-12 21:04 - 00000932 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\Program Files\CPUID
2014-08-12 16:08 - 2011-12-17 01:26 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2014-08-12 00:22 - 2013-10-25 15:13 - 00050976 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-08-08 16:22 - 2014-08-08 16:16 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-08 16:22 - 2014-03-05 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-08 16:22 - 2014-03-05 16:55 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-08 16:22 - 2014-02-16 13:46 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-08 16:16 - 2014-03-05 16:55 - 00000000 ____D () C:\ProgramData\Avira
2014-08-07 18:30 - 2011-12-13 17:49 - 00000000 ____D () C:\ProgramData\Skype
2014-08-07 04:06 - 2014-08-14 18:01 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-14 18:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-07 02:57 - 2013-08-25 18:12 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Audacity
2014-08-07 02:55 - 2014-08-07 02:55 - 00004122 _____ () C:\Users\Matthias\Documents\test.wav.wlmp
2014-08-07 01:37 - 2014-08-06 19:48 - 00000000 ____D () C:\Users\Matthias\Documents\Detektic Conan Projekt
2014-08-07 00:08 - 2012-04-19 19:34 - 00997888 ___SH () C:\Users\Matthias\Documents\Thumbs.db
2014-08-06 20:19 - 2012-04-11 17:14 - 00000000 ____D () C:\Users\Matthias\Documents\Sonstiges
2014-08-06 19:51 - 2011-11-06 22:14 - 00000000 ____D () C:\Users\Matthias\Documents\Schule
2014-08-06 19:50 - 2014-08-06 19:48 - 00000000 ____D () C:\Users\Matthias\Documents\Cha-Cha-Cha
2014-08-06 19:49 - 2012-01-26 18:22 - 00000000 ____D () C:\Users\Public\Documents\Blizzard Entertainment
2014-08-06 19:34 - 2012-01-23 18:26 - 00000000 ____D () C:\Users\Matthias\AppData\Local\Windows Live
2014-08-03 17:08 - 2014-08-03 17:08 - 00000222 _____ () C:\Users\Matthias\Desktop\The Forest.url
2014-08-03 17:08 - 2012-07-26 12:24 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-08-03 15:09 - 2011-12-13 17:49 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-02 15:18 - 2012-01-01 16:51 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 01:41 - 2014-08-14 18:04 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-14 18:04 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-25 16:52 - 2014-08-14 18:04 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 16:02 - 2014-08-14 18:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 16:01 - 2014-08-14 18:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 15:51 - 2014-08-14 18:04 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:30 - 2014-08-14 18:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 15:28 - 2014-08-14 18:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:28 - 2014-08-14 18:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 15:25 - 2014-08-14 18:04 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-14 18:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 15:11 - 2014-08-14 18:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 15:10 - 2014-08-14 18:04 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 15:04 - 2014-08-14 18:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-25 15:03 - 2014-08-14 18:04 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 15:00 - 2014-08-14 18:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 15:00 - 2014-08-14 18:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:59 - 2014-08-14 18:04 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:47 - 2014-08-14 18:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 14:40 - 2014-08-14 18:04 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-14 18:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:34 - 2014-08-14 18:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-25 14:34 - 2013-03-14 01:00 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 14:34 - 2011-04-13 04:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-25 14:33 - 2014-08-14 18:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-14 18:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-14 18:04 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-14 18:04 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-14 18:04 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:19 - 2014-08-14 18:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 14:18 - 2014-08-14 18:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-25 14:17 - 2014-08-14 18:04 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:17 - 2014-08-14 18:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-25 14:12 - 2014-08-14 18:04 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-25 14:10 - 2014-08-14 18:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:10 - 2014-08-14 18:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-25 14:08 - 2014-08-14 18:04 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-14 18:04 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-14 18:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-14 18:04 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-14 18:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-14 18:04 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-14 18:04 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:39 - 2014-08-14 18:04 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:36 - 2014-08-14 18:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-25 13:34 - 2014-08-14 18:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-14 18:04 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-14 18:04 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-14 18:04 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:07 - 2014-08-14 18:04 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:07 - 2014-08-14 18:04 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-14 18:04 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-14 18:04 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-14 18:04 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-14 18:04 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-14 18:04 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-14 18:04 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-14 18:04 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-25 02:17 - 2013-04-06 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

ZeroAccess:
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\@
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\U\80000064.@

Some content of TEMP:
====================
C:\Users\Matthias\AppData\Local\Temp\avgnt.exe
C:\Users\Matthias\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-09 17:36

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Scheint immer noch drauf zu sein, ganz schön hartnäckig.

cosinus 17.08.2014 23:21

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Math20 18.08.2014 02:02

Funktioniert nicht es kommt folgende Meldung:

''No fixlist.txt found.''

''The fixlist.txt should be in the same folder/directory the tool is located.''

Der folder zu FRST ist doch ''FRST Older Version'' oder?
Habe zumindest keinen weiteren gefunden in meinem Download Bereich.

Hab versucht während beide auf dem desktop sind, und habe die beiden (exe von FRST und die Fixliste) in dem FRST Older Version Ordner hineingetan, kommt aber selbe Meldung.

Ich habe 2 mal die FRST exe. Kann ich sie einmal löschen?

cosinus 18.08.2014 08:13

Funktioniert deswegen nicht:

Zitat:

Running from C:\Users\Matthias\Downloads
FRST soll wie in der Anleitung erwähnt auch auf dem Desktop sein.

Math20 18.08.2014 09:02

Habe jetzt Farbar's Recovery Scan Tool aus dem download gelöscht, und im Papierkorb eleminiert. Scheint nicht bei Systemsteuerung -> System und SIcherheit zu sein.
Habe jetzt den Speicherort geändert, nochmals gedownloadet,sodass es direkt zum Desktop geht. Und es kommt die selbe Naricht.

cosinus 18.08.2014 09:44

Dann hast du den Dateinamen der fixlist falsch geschrieben.

Math20 18.08.2014 10:02

Ja das habe ich.

Habe fixliste geschrieben....

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01
Ran by Matthias at 2014-08-18 11:00:11 Run:1
Running from C:\Users\Matthias\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}
*****************

C:\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54} => Moved successfully.

==== End of Fixlog ====


cosinus 18.08.2014 11:01

Ok. Rechner rebooten und neue FRST Logs bitte.

Math20 18.08.2014 12:23

FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2014 01
Ran by Matthias (administrator) on MATTHIAS-PC on 18-08-2014 13:20:28
Running from C:\Users\Matthias\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
() C:\Program Files (x86)\Infigo\InfigoOperator.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\Pmsb.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(MAVIN LOG, S.L.) C:\Program Files (x86)\Infigo\Infigo.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.78.41.0\OverwolfHelper.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
() C:\Program Files (x86)\Overwolf\0.78.41.0\OverwolfBrowser.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.78.41.0\OverwolfHelper64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-01] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-08-11] (Alcor Micro Corp.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-13] (ELAN Microelectronics Corp.)
HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [PMSpeed] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.EXE [112464 2009-12-04] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-08] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [39712 2014-08-06] (Overwolf LTD)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Scan Buttons] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSB.EXE [202576 2009-12-09] (NewSoft Technology Corporation)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1753280 2014-07-16] (Valve Corporation)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-4002615419-2591733308-3372411449-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe [607032 2014-06-26] (MAVIN LOG, S.L.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe ()
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Matthias\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Matthias\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

Chrome:
=======
CHR HomePage:
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Docs) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-10]
CHR Extension: (Google Drive) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-16]
CHR Extension: (YouTube) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-16]
CHR Extension: (Google-Suche) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-16]
CHR Extension: (Avira Browser Safety) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-16]
CHR Extension: (Google Wallet) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Google Mail) - C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-08] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)
R2 InfigoOperator; C:\Program Files (x86)\Infigo\InfigoOperator.exe [19768 2014-06-26] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4229912 2011-11-28] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [977184 2014-08-06] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-02-19] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-10-22] (TuneUp Software)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2013-12-17] (Wacom Technology, Corp.)
S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-12] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-26] (DT Soft Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-18] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-03] (INCA Internet Co., Ltd.) [File not signed]
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-05-08] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 EraserUtilDrv11220; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys [X]
S3 X6va006; \??\C:\Users\Matthias\AppData\Local\Temp\006912B.tmp [X]
S3 X6va008; \??\C:\Users\Matthias\AppData\Local\Temp\0085798.tmp [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-18 13:20 - 2014-08-18 13:20 - 00023169 _____ () C:\Users\Matthias\Desktop\FRST.txt
2014-08-18 09:59 - 2014-08-18 09:59 - 02101760 _____ (Farbar) C:\Users\Matthias\Desktop\FRST64.exe
2014-08-17 23:40 - 2014-08-17 23:40 - 00000739 _____ () C:\Users\Matthias\Desktop\JRT.txt
2014-08-16 23:43 - 2014-08-16 23:43 - 04161313 _____ () C:\Users\Matthias\Downloads\tdsskiller.zip
2014-08-16 23:38 - 2014-08-16 23:39 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Matthias\Downloads\tdsskiller.exe
2014-08-16 21:21 - 2014-08-16 21:21 - 00054036 _____ () C:\ComboFix.txt
2014-08-16 20:55 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-16 20:55 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-16 20:55 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-16 20:55 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-16 20:49 - 2014-08-16 21:21 - 00000000 ____D () C:\Qoobox
2014-08-16 20:48 - 2014-08-16 21:20 - 00000000 ____D () C:\Windows\erdnt
2014-08-16 20:47 - 2014-08-16 20:48 - 05571320 ____R (Swearware) C:\Users\Matthias\Downloads\ComboFix.exe
2014-08-16 01:58 - 2014-08-16 01:58 - 00000000 ____D () C:\Users\Matthias\Desktop\Protokolle
2014-08-16 01:10 - 2014-08-16 01:15 - 00041952 _____ () C:\Users\Matthias\Downloads\Addition.txt
2014-08-16 01:09 - 2014-08-18 13:20 - 00000000 ____D () C:\FRST
2014-08-16 01:09 - 2014-08-17 23:44 - 00057730 _____ () C:\Users\Matthias\Downloads\FRST.txt
2014-08-16 00:56 - 2014-08-16 00:56 - 00000000 ____D () C:\Windows\ERUNT
2014-08-16 00:54 - 2014-08-16 00:54 - 01016261 _____ (Thisisu) C:\Users\Matthias\Downloads\JRT.exe
2014-08-16 00:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-16 00:31 - 2014-08-17 23:19 - 00000000 ____D () C:\AdwCleaner
2014-08-16 00:31 - 2014-08-16 00:31 - 01361203 _____ () C:\Users\Matthias\Downloads\adwcleaner_3.306.exe
2014-08-15 17:16 - 2014-08-15 17:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Sherlock Holmes -Teile
2014-08-15 17:15 - 2014-08-16 13:30 - 00000000 ____D () C:\Users\Matthias\Desktop\Stronghold-Teile
2014-08-14 21:16 - 2014-08-14 21:17 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Dateien
2014-08-14 21:14 - 2014-08-14 21:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Ordner
2014-08-14 18:06 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 18:06 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-14 18:06 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-14 18:06 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-14 18:05 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 18:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-14 18:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-14 18:05 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 18:04 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-14 18:04 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-14 18:04 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-14 18:04 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-14 18:04 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-14 18:04 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-14 18:04 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-14 18:04 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-14 18:04 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-14 18:04 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-14 18:04 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-14 18:04 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-14 18:04 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-14 18:04 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-14 18:04 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-14 18:04 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-14 18:04 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-14 18:04 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-14 18:04 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-14 18:04 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-14 18:04 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-14 18:04 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-14 18:04 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-14 18:04 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-14 18:04 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-14 18:04 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 18:04 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-14 18:04 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-14 18:04 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-14 18:04 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-14 18:04 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-14 18:04 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-14 18:04 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-14 18:04 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-14 18:04 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-14 18:04 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-14 18:04 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-14 18:04 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-14 18:04 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-14 18:04 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-14 18:04 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-14 18:04 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-14 18:04 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-14 18:04 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-14 18:04 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-14 18:04 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-14 18:04 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-14 18:04 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-14 18:04 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-14 18:04 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-14 18:04 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-14 18:04 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-14 18:04 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-14 18:04 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-14 18:04 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-14 18:04 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-14 18:01 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-14 18:01 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-14 18:01 - 2014-07-16 05:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-14 18:01 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-14 18:01 - 2014-07-16 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-14 18:01 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-14 18:01 - 2014-07-16 04:12 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-14 18:01 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-14 18:01 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-14 18:01 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-14 18:01 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-14 18:01 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-14 18:01 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-14 18:01 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-14 18:01 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-14 18:01 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-14 18:01 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-14 18:01 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-14 18:01 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-14 18:01 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-14 18:01 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-14 15:57 - 2014-08-18 13:20 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-14 15:56 - 2014-08-14 15:56 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-14 15:56 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-14 15:56 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-14 15:54 - 2014-08-14 15:55 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Matthias\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-14 14:48 - 2014-08-14 14:48 - 00001270 _____ () C:\Users\Matthias\Desktop\Revo Uninstaller.lnk
2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-14 14:47 - 2014-08-14 14:47 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Matthias\Downloads\revosetup.exe
2014-08-14 14:38 - 2014-08-14 14:40 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000993 _____ () C:\Users\Matthias\Desktop\Infigo.lnk
2014-08-14 14:38 - 2014-08-14 14:38 - 00000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Program Files (x86)\Infigo
2014-08-14 14:37 - 2014-08-14 14:37 - 07501568 _____ () C:\Users\Matthias\Downloads\Infigo_setup.exe
2014-08-12 21:04 - 2014-08-12 21:04 - 00000932 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\Program Files\CPUID
2014-08-08 16:16 - 2014-08-08 16:22 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-07 02:55 - 2014-08-07 02:55 - 00004122 _____ () C:\Users\Matthias\Documents\test.wav.wlmp
2014-08-06 19:48 - 2014-08-07 01:37 - 00000000 ____D () C:\Users\Matthias\Documents\Detektic Conan Projekt
2014-08-06 19:48 - 2014-08-06 19:50 - 00000000 ____D () C:\Users\Matthias\Documents\Cha-Cha-Cha
2014-08-03 17:08 - 2014-08-03 17:08 - 00000222 _____ () C:\Users\Matthias\Desktop\The Forest.url

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-18 13:21 - 2014-08-18 13:20 - 00023169 _____ () C:\Users\Matthias\Desktop\FRST.txt
2014-08-18 13:20 - 2014-08-16 01:09 - 00000000 ____D () C:\FRST
2014-08-18 13:20 - 2014-08-14 15:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-18 13:20 - 2012-07-26 12:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-18 13:17 - 2011-12-17 01:24 - 00000000 ____D () C:\Users\Matthias\AppData\Local\Overwolf
2014-08-18 13:16 - 2013-07-22 22:48 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Dropbox
2014-08-18 13:15 - 2011-12-20 21:31 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\.oit
2014-08-18 13:15 - 2011-10-25 02:22 - 00000000 ___HD () C:\ASUS.DAT
2014-08-18 13:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-18 13:14 - 2009-07-14 06:51 - 00182762 _____ () C:\Windows\setupact.log
2014-08-18 13:13 - 2011-08-31 16:40 - 01633202 _____ () C:\Windows\WindowsUpdate.log
2014-08-18 13:02 - 2012-02-26 21:14 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\TS3Client
2014-08-18 12:56 - 2012-04-01 12:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-18 11:03 - 2012-02-26 21:18 - 00000000 ____D () C:\Users\Matthias\AppData\Local\CrashDumps
2014-08-18 09:59 - 2014-08-18 09:59 - 02101760 _____ (Farbar) C:\Users\Matthias\Desktop\FRST64.exe
2014-08-18 09:42 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-18 09:42 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-18 09:30 - 2009-07-14 06:45 - 00314176 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-17 23:44 - 2014-08-16 01:09 - 00057730 _____ () C:\Users\Matthias\Downloads\FRST.txt
2014-08-17 23:40 - 2014-08-17 23:40 - 00000739 _____ () C:\Users\Matthias\Desktop\JRT.txt
2014-08-17 23:20 - 2011-04-13 03:39 - 02310014 _____ () C:\Windows\PFRO.log
2014-08-17 23:19 - 2014-08-16 00:31 - 00000000 ____D () C:\AdwCleaner
2014-08-16 23:43 - 2014-08-16 23:43 - 04161313 _____ () C:\Users\Matthias\Downloads\tdsskiller.zip
2014-08-16 23:43 - 2014-07-10 12:38 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Matthias\Desktop\TDSSKiller.exe
2014-08-16 23:39 - 2014-08-16 23:38 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Matthias\Downloads\tdsskiller.exe
2014-08-16 21:21 - 2014-08-16 21:21 - 00054036 _____ () C:\ComboFix.txt
2014-08-16 21:21 - 2014-08-16 20:49 - 00000000 ____D () C:\Qoobox
2014-08-16 21:21 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-08-16 21:20 - 2014-08-16 20:48 - 00000000 ____D () C:\Windows\erdnt
2014-08-16 21:15 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-08-16 21:08 - 2011-10-25 02:22 - 00000000 ____D () C:\Users\Matthias
2014-08-16 20:48 - 2014-08-16 20:47 - 05571320 ____R (Swearware) C:\Users\Matthias\Downloads\ComboFix.exe
2014-08-16 13:30 - 2014-08-15 17:15 - 00000000 ____D () C:\Users\Matthias\Desktop\Stronghold-Teile
2014-08-16 01:58 - 2014-08-16 01:58 - 00000000 ____D () C:\Users\Matthias\Desktop\Protokolle
2014-08-16 01:15 - 2014-08-16 01:10 - 00041952 _____ () C:\Users\Matthias\Downloads\Addition.txt
2014-08-16 00:56 - 2014-08-16 00:56 - 00000000 ____D () C:\Windows\ERUNT
2014-08-16 00:54 - 2014-08-16 00:54 - 01016261 _____ (Thisisu) C:\Users\Matthias\Downloads\JRT.exe
2014-08-16 00:31 - 2014-08-16 00:31 - 01361203 _____ () C:\Users\Matthias\Downloads\adwcleaner_3.306.exe
2014-08-15 22:21 - 2011-12-13 17:49 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Skype
2014-08-15 20:10 - 2011-10-25 02:22 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-08-15 17:16 - 2014-08-15 17:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Sherlock Holmes -Teile
2014-08-15 14:59 - 2013-10-25 15:15 - 00000000 ____D () C:\Program Files (x86)\appbarioDE_1
2014-08-14 21:17 - 2014-08-14 21:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Dateien
2014-08-14 21:16 - 2014-08-14 21:14 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Ordner
2014-08-14 19:20 - 2013-07-21 19:17 - 00000000 ____D () C:\Users\Matthias\.gimp-2.8
2014-08-14 18:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-14 18:14 - 2013-08-15 02:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 18:10 - 2011-12-17 15:15 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 18:04 - 2014-05-07 01:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 17:08 - 2011-08-31 16:54 - 00002902 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-08-14 17:08 - 2011-08-31 16:54 - 00001973 _____ () C:\Windows\system32\ServiceFilter.ini
2014-08-14 17:03 - 2012-07-30 20:53 - 00000000 ____D () C:\ProgramData\YTD YouTube Downloader & Converter
2014-08-14 16:04 - 2012-07-31 00:15 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\hellomoto
2014-08-14 15:57 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-08-14 15:56 - 2014-08-14 15:56 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2014-08-14 15:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-14 15:56 - 2013-04-01 20:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-14 15:55 - 2014-08-14 15:54 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Matthias\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-14 15:41 - 2013-07-22 23:48 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\puush
2014-08-14 15:31 - 2012-06-29 22:32 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-08-14 15:06 - 2012-12-04 20:02 - 00000000 ____D () C:\Program Files (x86)\EA Games
2014-08-14 14:48 - 2014-08-14 14:48 - 00001270 _____ () C:\Users\Matthias\Desktop\Revo Uninstaller.lnk
2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-14 14:47 - 2014-08-14 14:47 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Matthias\Downloads\revosetup.exe
2014-08-14 14:40 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000993 _____ () C:\Users\Matthias\Desktop\Infigo.lnk
2014-08-14 14:38 - 2014-08-14 14:38 - 00000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Infigo
2014-08-14 14:38 - 2014-08-14 14:38 - 00000000 ____D () C:\Program Files (x86)\Infigo
2014-08-14 14:37 - 2014-08-14 14:37 - 07501568 _____ () C:\Users\Matthias\Downloads\Infigo_setup.exe
2014-08-14 09:09 - 2009-07-14 04:34 - 00000505 _____ () C:\Windows\win.ini
2014-08-13 10:36 - 2012-02-26 21:13 - 00000000 ____D () C:\Users\Matthias\AppData\Local\TeamSpeak 3 Client
2014-08-13 02:22 - 2012-12-12 22:06 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\SoftGrid Client
2014-08-12 21:04 - 2014-08-12 21:04 - 00000932 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-08-12 21:04 - 2014-08-12 21:04 - 00000000 ____D () C:\Program Files\CPUID
2014-08-12 16:08 - 2011-12-17 01:26 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2014-08-12 00:22 - 2013-10-25 15:13 - 00050976 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-08-08 16:22 - 2014-08-08 16:16 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-08 16:22 - 2014-03-05 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-08 16:22 - 2014-03-05 16:55 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-08 16:22 - 2014-02-16 13:46 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-08 16:16 - 2014-03-05 16:55 - 00000000 ____D () C:\ProgramData\Avira
2014-08-07 18:30 - 2011-12-13 17:49 - 00000000 ____D () C:\ProgramData\Skype
2014-08-07 04:06 - 2014-08-14 18:01 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-14 18:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-07 02:57 - 2013-08-25 18:12 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Audacity
2014-08-07 02:55 - 2014-08-07 02:55 - 00004122 _____ () C:\Users\Matthias\Documents\test.wav.wlmp
2014-08-07 01:37 - 2014-08-06 19:48 - 00000000 ____D () C:\Users\Matthias\Documents\Detektic Conan Projekt
2014-08-07 00:08 - 2012-04-19 19:34 - 00997888 ___SH () C:\Users\Matthias\Documents\Thumbs.db
2014-08-06 20:19 - 2012-04-11 17:14 - 00000000 ____D () C:\Users\Matthias\Documents\Sonstiges
2014-08-06 19:51 - 2011-11-06 22:14 - 00000000 ____D () C:\Users\Matthias\Documents\Schule
2014-08-06 19:50 - 2014-08-06 19:48 - 00000000 ____D () C:\Users\Matthias\Documents\Cha-Cha-Cha
2014-08-06 19:49 - 2012-01-26 18:22 - 00000000 ____D () C:\Users\Public\Documents\Blizzard Entertainment
2014-08-06 19:34 - 2012-01-23 18:26 - 00000000 ____D () C:\Users\Matthias\AppData\Local\Windows Live
2014-08-03 17:08 - 2014-08-03 17:08 - 00000222 _____ () C:\Users\Matthias\Desktop\The Forest.url
2014-08-03 17:08 - 2012-07-26 12:24 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-08-03 15:09 - 2011-12-13 17:49 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-02 15:18 - 2012-01-01 16:51 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 01:41 - 2014-08-14 18:04 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-14 18:04 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-25 16:52 - 2014-08-14 18:04 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 16:02 - 2014-08-14 18:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 16:01 - 2014-08-14 18:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 15:51 - 2014-08-14 18:04 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:30 - 2014-08-14 18:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 15:28 - 2014-08-14 18:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:28 - 2014-08-14 18:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 15:25 - 2014-08-14 18:04 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-14 18:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 15:11 - 2014-08-14 18:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 15:10 - 2014-08-14 18:04 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 15:04 - 2014-08-14 18:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-25 15:03 - 2014-08-14 18:04 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 15:00 - 2014-08-14 18:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 15:00 - 2014-08-14 18:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:59 - 2014-08-14 18:04 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:47 - 2014-08-14 18:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 14:40 - 2014-08-14 18:04 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-14 18:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:34 - 2014-08-14 18:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-25 14:34 - 2013-03-14 01:00 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 14:34 - 2011-04-13 04:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-25 14:33 - 2014-08-14 18:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-14 18:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-14 18:04 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-14 18:04 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-14 18:04 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:19 - 2014-08-14 18:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 14:18 - 2014-08-14 18:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-25 14:17 - 2014-08-14 18:04 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:17 - 2014-08-14 18:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-25 14:12 - 2014-08-14 18:04 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-25 14:10 - 2014-08-14 18:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:10 - 2014-08-14 18:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-25 14:08 - 2014-08-14 18:04 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-14 18:04 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-14 18:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-14 18:04 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-14 18:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-14 18:04 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-14 18:04 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:39 - 2014-08-14 18:04 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:36 - 2014-08-14 18:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-25 13:34 - 2014-08-14 18:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-14 18:04 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-14 18:04 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-14 18:04 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:07 - 2014-08-14 18:04 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:07 - 2014-08-14 18:04 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-14 18:04 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-14 18:04 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-14 18:04 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-14 18:04 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-14 18:04 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-14 18:04 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-14 18:04 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-25 02:17 - 2013-04-06 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

Some content of TEMP:
====================
C:\Users\Matthias\AppData\Local\Temp\avgnt.exe
C:\Users\Matthias\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-09 17:36

==================== End Of Log ============================

--- --- ---

--- --- ---


Habe zuerst den Laptop Neu getsartet und dann gescannt.

cosinus 18.08.2014 12:54

Hat sich der Windows-Explorer wieder eingerenkt?

Math20 18.08.2014 13:12

Wenn du direkt nach dem Vorgang meinst, nein.

Bin aber ein paar mal zu ''Bilder'' , dann wieder Download, dann wieder Bilder, dann wieder Doawnload, und dann kam wieder Internet Explorer funktioniert nicht mehr etc.

cosinus 18.08.2014 13:41

Zitat:

und dann kam wieder Internet Explorer funktioniert nicht mehr etc.
Wieso denn jetzt Internet Explorer?

Math20 18.08.2014 14:58

Ich meine Windows Explorer, verwrchsel die beiden gerne

cosinus 18.08.2014 15:16

Okay, erstmal Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Math20 18.08.2014 16:31

1. Schritt: Es wurde nach dem Scan nichts gefunden, weshlab ich den Rechner auch nicht neu gestartete habe.

Code:

Malwarebytes Anti-Malware
www.malwarebytes.org


Protection, 14.08.2014 15:57:03, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, Starting,
Protection, 14.08.2014 15:57:03, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, Started,
Protection, 14.08.2014 15:57:03, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Starting,
Update, 14.08.2014 15:57:12, SYSTEM, MATTHIAS-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.8.4.1,
Update, 14.08.2014 15:57:37, SYSTEM, MATTHIAS-PC, Manual, Malware Database, 2014.3.4.9, 2014.8.14.6,
Protection, 14.08.2014 15:57:38, SYSTEM, MATTHIAS-PC, Protection, Refresh, Starting,
Protection, 14.08.2014 15:58:14, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Started,
Protection, 14.08.2014 15:58:14, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 14.08.2014 15:58:14, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 14.08.2014 15:58:18, SYSTEM, MATTHIAS-PC, Protection, Refresh, Success,
Protection, 14.08.2014 15:58:18, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Starting,
Protection, 14.08.2014 15:58:18, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Started,
Detection, 14.08.2014 15:58:25, Matthias, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Detection, 14.08.2014 15:58:32, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, c:\program files (x86)\suptab\searchprotect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Protection, 14.08.2014 15:58:32, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Error, 14.08.2014 15:58:32, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Detection, 14.08.2014 16:00:09, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, c:\program files (x86)\suptab\searchprotect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Protection, 14.08.2014 16:00:09, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Error, 14.08.2014 16:00:09, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Detection, 14.08.2014 16:02:10, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, c:\program files (x86)\suptab\searchprotect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Protection, 14.08.2014 16:02:10, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Error, 14.08.2014 16:02:10, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Detection, 14.08.2014 16:04:22, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, Trojan.Ransom.FGen, C:\Users\Matthias\AppData\Roaming\hellomoto\TujP.dat, Quarantine, [b8c6972fe695c3735b4b5995887baf51]
Detection, 14.08.2014 16:04:23, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, c:\program files (x86)\suptab\searchprotect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Protection, 14.08.2014 16:04:23, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Error, 14.08.2014 16:04:23, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Detection, 14.08.2014 16:06:25, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, c:\program files (x86)\suptab\searchprotect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Protection, 14.08.2014 16:06:25, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Error, 14.08.2014 16:06:25, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Detection, 14.08.2014 16:08:26, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, c:\program files (x86)\suptab\searchprotect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Protection, 14.08.2014 16:08:26, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Error, 14.08.2014 16:08:26, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Detection, 14.08.2014 16:10:27, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, c:\program files (x86)\suptab\searchprotect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Protection, 14.08.2014 16:10:27, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Error, 14.08.2014 16:10:27, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Detection, 14.08.2014 16:27:46, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.Skytech.A, c:\program files (x86)\suptab\searchprotect64.dll, Quarantine, [ceb0e6e0126993a3aa23f898e41d49b7]
Protection, 14.08.2014 16:27:47, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Error, 14.08.2014 16:27:47, SYSTEM, MATTHIAS-PC, Protection, SDKQuarantine, 2, Failed, c:\program files (x86)\suptab\searchprotect64.dll,
Update, 14.08.2014 16:52:33, SYSTEM, MATTHIAS-PC, Scheduler, Malware Database, 2014.8.14.6, 2014.8.14.7,
Protection, 14.08.2014 16:53:31, SYSTEM, MATTHIAS-PC, Protection, Refresh, Starting,
Protection, 14.08.2014 16:53:31, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 14.08.2014 16:53:31, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 14.08.2014 16:53:37, SYSTEM, MATTHIAS-PC, Protection, Refresh, Success,
Protection, 14.08.2014 16:53:37, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Starting,
Protection, 14.08.2014 16:53:38, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Started,
Detection, 14.08.2014 16:56:58, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfdc171.exe, Quarantine, [a6d9cff7dba01f17b728b40959a9f20e]
Detection, 14.08.2014 17:06:06, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll, Quarantine, [037cfec8a8d346f0aec800f405ff0cf4]
Protection, 14.08.2014 17:06:06, SYSTEM, MATTHIAS-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll,
Error, 14.08.2014 17:06:06, SYSTEM, MATTHIAS-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll,
Protection, 14.08.2014 17:08:29, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, Starting,
Protection, 14.08.2014 17:08:29, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, Started,
Protection, 14.08.2014 17:08:29, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Starting,
Protection, 14.08.2014 17:11:16, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Started,
Update, 14.08.2014 17:42:58, SYSTEM, MATTHIAS-PC, Scheduler, Malware Database, 2014.8.14.7, 2014.8.14.8,
Protection, 14.08.2014 17:43:01, SYSTEM, MATTHIAS-PC, Protection, Refresh, Starting,
Protection, 14.08.2014 17:43:01, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 14.08.2014 17:43:01, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 14.08.2014 17:43:37, SYSTEM, MATTHIAS-PC, Protection, Refresh, Success,
Protection, 14.08.2014 17:43:37, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Starting,
Protection, 14.08.2014 17:43:37, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Started,
Protection, 14.08.2014 18:27:06, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, Starting,
Protection, 14.08.2014 18:27:06, SYSTEM, MATTHIAS-PC, Protection, Malware Protection, Started,
Protection, 14.08.2014 18:27:06, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Starting,
Protection, 14.08.2014 18:28:30, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Started,
Update, 14.08.2014 18:50:42, SYSTEM, MATTHIAS-PC, Scheduler, Malware Database, 2014.8.14.8, 2014.8.14.9,
Protection, 14.08.2014 18:50:45, SYSTEM, MATTHIAS-PC, Protection, Refresh, Starting,
Protection, 14.08.2014 18:50:45, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 14.08.2014 18:50:45, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 14.08.2014 18:50:49, SYSTEM, MATTHIAS-PC, Protection, Refresh, Success,
Protection, 14.08.2014 18:50:49, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Starting,
Protection, 14.08.2014 18:50:49, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Started,
Update, 14.08.2014 21:03:17, SYSTEM, MATTHIAS-PC, Scheduler, Malware Database, 2014.8.14.9, 2014.8.14.10,
Protection, 14.08.2014 21:03:18, SYSTEM, MATTHIAS-PC, Protection, Refresh, Starting,
Protection, 14.08.2014 21:03:18, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 14.08.2014 21:03:19, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 14.08.2014 21:03:23, SYSTEM, MATTHIAS-PC, Protection, Refresh, Success,
Protection, 14.08.2014 21:03:23, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Starting,
Protection, 14.08.2014 21:03:23, SYSTEM, MATTHIAS-PC, Protection, Malicious Website Protection, Started,

(end)


cosinus 18.08.2014 17:21

Ist aber trotzdem das falsche Log von MBAM

Math20 18.08.2014 22:40

Kurze Zwischenfrage. ist es möglich den scann Prozess von Eset online scanner zu ubterbrechen und später weiterzuführen , ohne dabei Schäden zu hinterlassen o.ä?

Momentan lauft der scann 55 min und hat 35 infizierte dateien gefunden, u.a. Trojaner.

es ist etwas dazwischen gekommen.
----------------------------------------------------------------------------
Habe während meiner Arbeit am Pc, weiterlaufen lassen.

Aktueller STand: 5h 38min

65%

52 Infizierte Dateien. Ich habe zusätzlich mein USB STick mit angebracht.

Aufgabe 1. werde ich dannach nochmlas posten.

cosinus 18.08.2014 23:02

Lass ESET bitte in Ruhe weiterscannen.

Math20 19.08.2014 06:06

Hab EST über die Nacht laufen lassen.

Hier das Ergebnis:

Code:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=15907e4298a9454195a822b92f900f7b
# engine=19715
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-19 01:02:48
# local_time=2014-08-19 03:02:48 (+0100, Mitteleurop臺sche Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 41172 15088904 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 34950492 160040018 0 0
# scanned=357782
# found=73
# cleaned=0
# scan_time=32464
sh=1F2C0A5D4CB1B47D1DDC86E3516F06B3ECA63A56 ft=1 fh=94049be6457143fb vn="moglicherweise Variante von MSIL/DomaIQ.A evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\DomaIQ Uninstaller\DomaIQUninstall.exe.vir"
sh=AA21EC9BD2E838AAF12944ABEBF05DFA5FF75C6B ft=1 fh=2e965d835b95ba27 vn="Variante von Win32/Toolbar.Besttoolbars.H evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SeeSimilar\AddonsFramework.Typelib.dll.vir"
sh=A32FD060157B981F48D37528893E4F0B0B2E4528 ft=1 fh=a21ef2f4be91eb09 vn="Variante von Win64/Toolbar.Besttoolbars.B evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SeeSimilar\AddonsFramework.Typelib64.dll.vir"
sh=0935B2B288CD99D2DC722AEB9E9155C6D69BE44F ft=1 fh=d4e09134b6feca95 vn="Variante von Win32/Toolbar.Besttoolbars.H evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SeeSimilar\ButtonSite.dll.vir"
sh=1C51C2EEC494206A690B3CE9D30D4CF09A16E67E ft=1 fh=aeca89965702f0bd vn="Variante von Win32/Toolbar.Besttoolbars.H evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SeeSimilar\ButtonSite64.dll.vir"
sh=C8F1E3F28152C6C010B7AE8FA4D167E3C388FF0C ft=1 fh=84ff0b58ed098a1d vn="Win32/SweetIM.K evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Communicator\resources\sqlite\mgSqlite3.dll.vir"
sh=FC883B83DA2A9ED93AC2A4CEC9936268A6B264C2 ft=1 fh=80a06d85550fdea2 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgArchive.dll.vir"
sh=531A5D492B39076AA7990DD76F41B762258B86A7 ft=1 fh=a45064434f491236 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgFlashPlayer.dll.vir"
sh=B6E78443D25AF8B978DC24D515DF7B2F673629CC ft=1 fh=ece232c764d65d89 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgICQAuto.dll.vir"
sh=42B14A7D72C6EDAF5140A2C7B95149B92473853C ft=1 fh=6f2c94e91302d1a2 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgICQMessengerAdapter.dll.vir"
sh=B28C9BCA89A124EBD2EAAF5073370E7E0E87DB4E ft=1 fh=c56c5ff3b0e7703d vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mglogger.dll.vir"
sh=87FF2D9A36B50B5A7DF4D08F87B92BEA86D7DAB7 ft=1 fh=71dc135578fffed6 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgMediaPlayer.dll.vir"
sh=C86CF9524D11A2392A491EA15ED12D2CA890F249 ft=1 fh=ae21d71fff630a17 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgMsnAuto.dll.vir"
sh=055E7A147AB9DCB141FDF58A0D3CCD825AE8B361 ft=1 fh=ac8cec2f7886b930 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgMsnMessengerAdapter.dll.vir"
sh=C786E62AB09C10B6277F3E9CFC34207FE56E1FFA ft=1 fh=6c27d70c5686a2b1 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgSweetIM.dll.vir"
sh=A679EB39BB32DD88C09E150B0E5F7BAED12467A6 ft=1 fh=0ba701bbd4ac4b73 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgYahooAuto.dll.vir"
sh=9B45902B8B791A84EC6F7D1AD2E8099410D1A467 ft=1 fh=3191d44e293b78d5 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\mgYahooMessengerAdapter.dll.vir"
sh=C8F1E3F28152C6C010B7AE8FA4D167E3C388FF0C ft=1 fh=84ff0b58ed098a1d vn="Win32/SweetIM.K evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Messenger\resources\sqlite\mgSqlite3.dll.vir"
sh=E1C99225C4C16710DE3AF3D52300E1E943F7C84F ft=1 fh=f891ef12b7700e02 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\SweetIM\Messenger\update\sweetimsetup.exe.vir"
sh=9BA6DC699104472080E202066F9A6194C861BBC4 ft=1 fh=644180d9ce5cd441 vn="Win32/AnyProtect.D evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\AnyProtectScannerSetup.exe.vir"
sh=D86451022DDD8348105C1D52FBFD2ADB1E2DCC30 ft=1 fh=d3e706a6307522ba vn="Win32/Toolbar.Conduit.Y evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll.vir"
sh=D3CBDD7C6ED2C9D81DA4FCF9AF57CDD5D3711ED3 ft=1 fh=86dbe26399c3d0fa vn="Win32/Toolbar.Conduit.Y evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\Conduit\BackgroundContainer\TBUpdaterLogic_1.0.0.2.dll.vir"
sh=41F23E459EFF023AB1B26586463360E45528ABC7 ft=1 fh=5a93daf7e0cc20e5 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\NativeMessaging\CT3312329\1_0_0_10\TBMessagingHost.exe.vir"
sh=C2C35F77505CB8FF70FC312C44E070DBD5834942 ft=1 fh=bf83ea32284cf26c vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\NativeMessaging\CT3312329\1_0_0_2\TBMessagingHost.exe.vir"
sh=B0B26548D636CFADD954E4B3DFD30E8F2D61D487 ft=1 fh=5129ed505060d1fb vn="Win32/Toolbar.Conduit.AH evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\NativeMessaging\CT3312329\1_0_0_4\TBMessagingHost.exe.vir"
sh=BB1A5AE5206E9995C35E517ECBA291C30CE4F7B7 ft=1 fh=34cca54ca63a6441 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\NativeMessaging\CT3312329\1_0_0_6\TBMessagingHost.exe.vir"
sh=D4D640E4A04D91DEF41DAD844D1EC046FA1D5F3E ft=1 fh=f32a1de57c3d142e vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\NativeMessaging\CT3312329\1_0_0_7\TBMessagingHost.exe.vir"
sh=47684BC9F96872C4134DD46689D013BD8E51A14A ft=1 fh=47ffb6bc73749a57 vn="Win32/Toolbar.Conduit.AH evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Local\NativeMessaging\CT3312329\1_0_0_9\TBMessagingHost.exe.vir"
sh=58495F0458EDDC16D9A14A6E84CEE9C61AAE5E52 ft=1 fh=85d80dff1da9eafb vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir"
sh=45EBE0FDE5DFE2D3680BB9EC4ACA875DE0F392EA ft=1 fh=c71c0011eeab8e7c vn="Win32/bProtector.H evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Matthias\AppData\Roaming\SeeSimilar\install_helper.exe.vir"
sh=FDD55EBC5FD3C61D189BAC63C79EACB0582C3F86 ft=1 fh=857a310e14689afd vn="Win64/Sirefef.AN Trojaner" ac=I fn="C:\FRST\Quarantine\C\Users\Matthias\AppData\Local\{80aa28bd-953b-0d79-ac52-59b01480de54}\U\80000064.@"
sh=BE40C0251D66829CF63FD4341CACA785CAF5CD73 ft=1 fh=afd5085e605741b5 vn="Win64/Toolbar.Conduit.B evtl. unerwunschte Anwendung" ac=I fn="C:\Program Files (x86)\appbarioDE_1\hk64tbappb.dll"
sh=0F7B6B96202643D88E6428C62CA0BADC6D38D140 ft=1 fh=3507b93dfe419462 vn="Win32/Toolbar.Conduit.X evtl. unerwunschte Anwendung" ac=I fn="C:\Program Files (x86)\appbarioDE_1\hktbappb.dll"
sh=547EF42FB35708E8C39FE6D04DBF3DEDD91E73DB ft=1 fh=99fdcb8395eefb1c vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwunschte Anwendung" ac=I fn="C:\Program Files (x86)\appbarioDE_1\ldrtbappb.dll"
sh=6C02BC376864DF0440DE70DED3A65938D6295795 ft=1 fh=965e2f365cb21a83 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwunschte Anwendung" ac=I fn="C:\Program Files (x86)\appbarioDE_1\tbappb.dll"
sh=95ADC7925C2BB20FACE637E7031972F8E208FA33 ft=0 fh=0000000000000000 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx"
sh=9F9CF6762E257F68F6623E8B86E62819BB182C87 ft=0 fh=0000000000000000 vn="Variante von Win32/SweetIM.L evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx"
sh=068A54F966DB6AC14BCA0E39E2A99E3F0027304D ft=1 fh=39f7a16b0423d981 vn="Win64/Toolbar.Conduit.B evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\hk64tbapp0.dll"
sh=BE40C0251D66829CF63FD4341CACA785CAF5CD73 ft=1 fh=afd5085e605741b5 vn="Win64/Toolbar.Conduit.B evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\hk64tbappb.dll"
sh=CC6AF3A384A61C1C621BA5AB43583E82FF281530 ft=1 fh=bbbd034bf7d0bf76 vn="Win32/Toolbar.Conduit.X evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\hktbapp0.dll"
sh=0F7B6B96202643D88E6428C62CA0BADC6D38D140 ft=1 fh=3507b93dfe419462 vn="Win32/Toolbar.Conduit.X evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\hktbappb.dll"
sh=9B3B44428CC80CC43F085AE514E7E16F7963EACC ft=1 fh=4c03fc1250fa29f9 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\ldrtbapp0.dll"
sh=547EF42FB35708E8C39FE6D04DBF3DEDD91E73DB ft=1 fh=99fdcb8395eefb1c vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\ldrtbappb.dll"
sh=33457E2F2405727124C107D6DEAF24C94E992463 ft=1 fh=e719e166edfd7994 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\tbapp0.dll"
sh=81AF7CFB10091601ED1B82B92BDA2A254AA2B82F ft=1 fh=b76578e523b80dbc vn="Win32/Toolbar.Conduit.Y evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\tbapp1.dll"
sh=6C02BC376864DF0440DE70DED3A65938D6295795 ft=1 fh=965e2f365cb21a83 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\tbappb.dll"
sh=B5C93DA0C608B26C9487ABC49CCB643C9A15ED33 ft=1 fh=75f1c65aa8a331ed vn="Variante von Win32/PriceGong.A evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\LocalLow\appbarioDE_1\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGongIE.dll"
sh=DF5895B38FBEBDA4CA6099546A0E9D1E93949EEC ft=1 fh=0c2501ebca12773f vn="Variante von Win32/Downloader.JooSoft.A evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\Downloads\Downloader_fuer_3D-Fahrschule_5.1.exe"
sh=FCE478D3A8A64952C0E543FCD82ABD7A5CC7C511 ft=1 fh=3904b7b31d8fd837 vn="Win32/Toolbar.Conduit evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Matthias\Downloads\setup.exe"
sh=D559A1C33625F7DEE37DB3FB09884DFC3371F49B ft=0 fh=0000000000000000 vn="PDF/Exploit.CVE-2010-0188.AK Trojaner" ac=I fn="C:\Users\Matthias^2\AppData\Local\Opera\Opera\cache\g_000B\inseo.pdf"
sh=62F73D53591919563A4B714436D59988211264E1 ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwunschte Anwendung" ac=I fn="C:\Windows\Installer\1a92ddd.msi"
sh=99B7227A5AA4CBE43507266FC2309D52398175A2 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwunschte Anwendung" ac=I fn="C:\Windows\Installer\1b63764.msi"
sh=BC6ECF8E07DB06CEA88FD5E9F45A22E89478C0D4 ft=0 fh=0000000000000000 vn="Variante von Win32/SweetIM.C evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-04-15 190003\Backup files 2.zip"
sh=4F49C4289821F7D078FD59B7B94CAAC1773ADB36 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-06-11 125157\Backup files 1.zip"
sh=1C749A7617D7C6D4ED69EBCFB8DF1E8E2DC511ED ft=0 fh=0000000000000000 vn="Java/Exploit.CVE-2012-0507.BS Trojaner" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-06-24 192737\Backup files 1.zip"
sh=4E7AC86D26C92F0FADB538F8F4751338007FB038 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-07-01 190004\Backup files 2.zip"
sh=74A04C867003F0C00B1CBB1542B963CF5412EA8B ft=0 fh=0000000000000000 vn="Win64/Sirefef.AN Trojaner" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-07-22 190004\Backup files 3.zip"
sh=541A83A772FBFFD3DD63B2BDBCDC61DA1A9A368C ft=0 fh=0000000000000000 vn="PDF/Exploit.CVE-2010-0188.AK Trojaner" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-08-05 190004\Backup files 1.zip"
sh=07F1FB944692A19749977E41639DB1E268E44788 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-08-05 190004\Backup files 2.zip"
sh=FD8B0EACF662CE05306BADAE7C8BA6D6E9E8C739 ft=0 fh=0000000000000000 vn="Variante von Win32/Downloader.JooSoft.A evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-08-12 193019\Backup files 2.zip"
sh=003C95CA41E9305E2DAD269DB3A2F0973C29413E ft=0 fh=0000000000000000 vn="PDF/Exploit.CVE-2010-0188.AK Trojaner" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-08-19 190005\Backup files 2.zip"
sh=10F235D413923A374B7F46D8891FC1644DA55937 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2011-12-17 135958\Backup Files 2012-08-26 190005\Backup files 1.zip"
sh=16474DE01AF0CA7501E855BF17B11CA1A3881F46 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-09-02 193641\Backup Files 2012-09-02 193641\Backup files 12.zip"
sh=857A606EED4802886DFFD6D0A2C6D2CB56F2E611 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-09-02 193641\Backup Files 2012-09-02 193641\Backup files 20.zip"
sh=D1E4CF063CF111BC027D72AB1CC418585657CAC3 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-09-02 193641\Backup Files 2012-09-02 193641\Backup files 5.zip"
sh=014F753E971445BDED287C48CA08C3EDB230FBB3 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-09-02 193641\Backup Files 2012-09-02 193641\Backup files 7.zip"
sh=CC0C992820AA18BD1BC8F8C72F24DAA2A072C638 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-09-02 193641\Backup Files 2012-09-09 190005\Backup files 2.zip"
sh=5A3BFD1AF8ACD91B6CEE186E8A78AE3778EA3D8C ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-09-02 193641\Backup Files 2012-11-04 190005\Backup files 4.zip"
sh=AD2300BE1C012883E36A7EA4EACECE55E66E1116 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-11-25 190006\Backup Files 2012-11-25 190006\Backup files 12.zip"
sh=343EF7E7522AB46C87CCAF61FA8648B5E320A08C ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-11-25 190006\Backup Files 2012-11-25 190006\Backup files 5.zip"
sh=6448B5652C4FF6C1AF98159BE5E7F9B4BC72F2E3 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-11-25 190006\Backup Files 2012-11-25 190006\Backup files 7.zip"
sh=B3E51DB4838262E490521BB99A38E78B5F4518BC ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwunschte Anwendung" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-11-25 190006\Backup Files 2012-12-02 190007\Backup files 8.zip"
sh=E95050E3A4967DE4DAE4873FF9FE24E300AF44F0 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="F:\MATTHIAS-PC\Backup Set 2012-11-25 190006\Backup Files 2012-12-02 190007\Backup files 9.zip"

Und dazu noch den Scan den ich beim letzten post versemmelt habe, also zu Schritt 1.

Code:

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 18.08.2014
Suchlauf-Zeit: 16:38:20
Logdatei: ambm1.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.18.06
Rootkit Datenbank: v2014.08.16.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bosartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Matthias

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 467624
Verstrichene Zeit: 25 Min, 40 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlussel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)


cosinus 19.08.2014 08:48

ESET hat nur einige Reste gefunden. Kicken wir mit FRST

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files (x86)\appbarioDE_1
C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}
C:\Users\Matthias\AppData\LocalLow\appbarioDE_1
C:\Users\Matthias\Downloads\Downloader_fuer_3D-Fahrschule_5.1.exe
C:\Users\Matthias\Downloads\setup.exe
C:\Users\Matthias^2\AppData\Local\Opera\Opera\cache\g_000B
C:\Windows\Installer\1a92ddd.msi
C:\Windows\Installer\1b63764.msi


Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Math20 19.08.2014 08:55

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01
Ran by Matthias at 2014-08-19 09:52:13 Run:2
Running from C:\Users\Matthias\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Program Files (x86)\appbarioDE_1
C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}
C:\Users\Matthias\AppData\LocalLow\appbarioDE_1
C:\Users\Matthias\Downloads\Downloader_fuer_3D-Fahrschule_5.1.exe
C:\Users\Matthias\Downloads\setup.exe
C:\Users\Matthias^2\AppData\Local\Opera\Opera\cache\g_000B
C:\Windows\Installer\1a92ddd.msi
C:\Windows\Installer\1b63764.msi
*****************

C:\Program Files (x86)\appbarioDE_1 => Moved successfully.
C:\Users\Matthias\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} => Moved successfully.
C:\Users\Matthias\AppData\LocalLow\appbarioDE_1 => Moved successfully.
C:\Users\Matthias\Downloads\Downloader_fuer_3D-Fahrschule_5.1.exe => Moved successfully.
C:\Users\Matthias\Downloads\setup.exe => Moved successfully.
C:\Users\Matthias^2\AppData\Local\Opera\Opera\cache\g_000B => Moved successfully.
C:\Windows\Installer\1a92ddd.msi => Moved successfully.
C:\Windows\Installer\1b63764.msi => Moved successfully.

==== End of Fixlog ====

Ich fand in der ESET-logliste ein Paar mal mit ''trojaner'' . Sind die nicht schädlich?

cosinus 19.08.2014 10:19

Mal auch den ganzen Pfad lesen.
Alles was in C:\adwcleaner oder C:\FRST liegt ist in Quarantäne und nicht mehr aktiv

Die alten Backupsets die ESET gefunden hat mal bei Gelegenheit löschen

Und teste mal ob der Windows-Explorer in einem neuen Benutzerprofil vernünftig läuft.

Math20 19.08.2014 10:51

Es kommt immer noch der Fehler, beim 2. mal kam das Fenster erneut, wo ich unter ''Bilder'' geklickt habe.

Zitat:

Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Zitat:

Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset
Müsste eigentlich nichts mehr vorhanden sein.

Kann ich auch das bereits aktivierte Benutzerkonto nehmen?
Oder muss es ein neues sein?

cosinus 19.08.2014 10:59

Zitat:

Kann ich auch das bereits aktivierte Benutzerkonto nehmen?
Oder muss es ein neues sein?
Teste doch einfach beides. Ein anderer aber schon vorhandener User und ein komplett neuer.

Math20 19.08.2014 11:01

Ansonsten habe ich jetzt ein neues Benutzerprofil erstellt mitAdmin Rechte, und einmal geprüft. Es trat erneut das gleiche Problem auf. unter Computer-> Programm (x86), und dan kam das Fenster.
Auch kam das Fenster, als ich mich mit dem neu erstellten Benutzerprofil abgemeldet habe, und zu meinen ursprünglichen Benutzerprofil zurück zu kehren, dirket, als ich dort wieder eingeloggt habe.

cosinus 19.08.2014 11:04

Hmpf...für mal bitte die Konsole/Eingabeaufforderung (cmd.exe) mit Adminrechten aus, tipp ein

Code:

sfc /scannow
Und führe mit Eingabetaste den Befehl aus. Ergebnisse mitteilen.

Math20 19.08.2014 11:29

Nun, was ich nun komsich finde ist, das das bereits bestehende 2. Benutzkonto nach 5 min dauerklicken, und rumgefuchtel, nciht ein einziges mal anzeichen eines solchen Fensters enstand gescheige denn kam. Vieleicht könnte es an den Admin rechten liegen.

Habe momentan 3 Benutzer auf dem Laptop:

1x Main
1xGerade erstellt mit adminrechten
1xSeit ca. 2011 erstellt, und ohne admin rechte, sprich Standartbenutzer. Soll ich nochmal ein Standartbenutzer erstellen und dort nochmal nachschauen wie es sich dort verhält?

PS: Ich habe deinen angegeben Schritt noch nicht durchgeführt, und warte auf antwort :)
-----------------------------------------------------------------------------------------
Habe einfach mal ein neues Konto erstellt mit Standartbenutzer, und da kam leider dann der Fehler auf. Scheint nur der eine zu sein bei dem nichts aufgetaucht ist. Liegt also nicht an admin rechte.

Als ich mich damals mit meinem Main Benutzer eingeloggt habe, kam eines Tages der berühmte trojaner mit der Bundespolizei, und konnte dort demnach keine Ausführungen machen. Aber auf mein anderen Benutzprofil (2011) kam der trojaner nicht an, also ich bekam da kein Bundespolizei Bild, und konnte dort alles machen. Habe damals dann ein WIederstellungspunkt genutzt, und tauchte seitdem nicht mehr auf.

cosinus 19.08.2014 13:56

Wenn das nur bei einem User auftaucht ist bei diesem vermutlich das Benutzerprofil defekt

Math20 19.08.2014 19:16

Liste der Anhänge anzeigen (Anzahl: 1)
Habe mal im Anhang ein Bild hochgeladen, was als Ergebnis steht.

Habe nach dem 5 Anlauf es bis zum CBS Textdokumnt geschafft, da ich auf diesem weg durch WIndows Explorer unterbrochen wurde, und refresht wurde.

ALs ich nun das Textdokument öffnen wollte, kam die Naricht ''Zugriff verweigert''.

Was tun?

felix1 19.08.2014 21:45

Mich mal kurz einmische, bin dann auch gleich wieder weg.
Sofern nicht auf dem Desktop:
Windows-Start->computer->rechte Maustaste->Verwalten mit Adminrechten.
Danach
Dort unter lokale Benutzer und Gruppen/Benutzer alles Löschen, was keine Miete zahlt.
Danach unter Computer->Benutzer die gelöschten Accounts endgültig im Datennirvana versenken.
Rechner neu starten.
Neues Konto anlegen.
Mit neuem Nutzer anmelden.

Math20 19.08.2014 23:39

Lokale Benutzer und Gruppen existiert (bei deiner BEschreibung) auf meinem Laptop nicht.

Das hat mich stutzig gemacht, und mal den Befehl ''lusrmgr.msc'' bei Win suchmaschine einegeben:
Es kommt folgendes : '' Auf diesem Computer wird Windows 7 Home Premium durchgeführt.
Dieses Snap-In kann mit der Windows-Version nicht verwendet werden. Verwenden Sie die Option ''Benutzerkonten'' in der Systemsteuerung, um lokale Benutzerkonten auf diesem Compuer zu verwalten.''

Soll ich wie beschrieben fortfahren?

Aber ich glaube da wird es nichts zum löschen geben, da es nicht existiert oder?

cosinus 20.08.2014 08:22

Zitat:

Auf diesem Computer wird Windows 7 Home Premium durchgeführt.
Die Meldung sagt ja alles. Mit der Home-Version kann nun nicht alles gemacht werden.

Bei der Home-Version musst du dich mit Systemsteuerung/Benutzerkonten zufriedengeben. Und dann wäre da noch über Start/Ausführen => control userpasswords2

Math20 20.08.2014 18:33

Und was soll ich genau dort machen

nachdem :
Zitat:

control userpasswords2
?

Math20 23.08.2014 13:19

Liste der Anhänge anzeigen (Anzahl: 1)
Alles löschen?

Math20 02.09.2014 17:34

/up

cosinus 02.09.2014 17:49

Wieso alles löschen? Das hat doch niemand geschrieben
Du solltest doch nur einen neuen User anlegen und mit dem schauen wie sich das System verhält

Luxenbourg 02.09.2014 19:14

Und Ich hatte geglaubt mir vällt es schwer Mich mit Win8 auseinander zu setzen.
Da behalte ich doch lieber WindowsSieben, incl. Sprachpaket! Kann ich gut nützen!!

mfg
Luxenbourg

Math20 03.09.2014 23:47

Zitat:

Habe einfach mal ein neues Konto erstellt mit Standartbenutzer, und da kam leider dann der Fehler auf. Scheint nur der eine zu sein bei dem nichts aufgetaucht ist. Liegt also nicht an admin rechte.

Als ich mich damals mit meinem Main Benutzer eingeloggt habe, kam eines Tages der berühmte trojaner mit der Bundespolizei, und konnte dort demnach keine Ausführungen machen. Aber auf mein anderen Benutzprofil (2011) kam der trojaner nicht an, also ich bekam da kein Bundespolizei Bild, und konnte dort alles machen. Habe damals dann ein WIederstellungspunkt genutzt, und tauchte seitdem nicht mehr auf.
Hatte ich doch schon beschrieben.

cosinus 04.09.2014 08:18

Ah ok, und das war ein komplett neuer User mit komplett neuem Profil?

Math20 04.09.2014 13:02

Ja. ich habe zu dem Zeitpunkt getestet, wie es sich verhält, wenn ich ein neuen Benutzerkonto erstelle. Zum einen mit admin rechten und der andere ohne admin rechte, also ein Standartbenutzer. Da kommt die Meldung eben wie gesagt.

Aber bei meinem seit ca. 2012 bestehenden 2. Benutzer ohne admin rechten (Standartbenutzer), scheint diese Naricht nie aufzutauchen, nur bei meinem 1. Benutzer mit adminrechten mit dem ich größten teils bin zu 99%

PS: Mit User meinst du doch Benutzerkonto oder?

cosinus 04.09.2014 13:10

Ja, User ist das Userkonto und wenn du einen neuen User erstellst dann wird beim ersten Login von dem auch ein neues Profil erstellt

Mach mal neue FRST-Logs

Math20 04.09.2014 14:43

Bei meinem neu erstellten Benutzer, gibt es leider das FRST nicht. Soll ich die Version extra nochmal herunterladen?

cosinus 04.09.2014 14:59

Natürlich ist es da nicht auf dem Desktop zu sehen, weil der Desktop ein benutzerspezifischer Ordner ist. Ja am besten nochmal auf dem Desktop runterladen.

Math20 04.09.2014 15:20

Habe versucht mit dem Link:

hxxp://filepony.de/download-frst64/get-mirror-server.html

erneut zu downloaden. Habe es 2 mal versucht, aber es kam 2 mal die Fehlermeldung:

C:\User\Math\AppData\Local\Opera\temporary_downloads\Setup.exe

Desweiteren hat Avira 2 mal nachdem ich downloaden wollte 2 SIcherheitshinweise angezeigt: ''Adware/iBryte.Gen4'' wurde blockiert. Habe beide male entfernt. Nach dem ich es beim 2. mal entfernt habe, taucht es erneut auf und habe es erneut entfernen lassen. Also tauchte es 3 mal auf.

Soll ich mir FRST wo anders downloaden? Oder hast du da ein speziellen Link dafür?

cosinus 04.09.2014 15:21

http://www.trojaner-board.de/157635-...ml#post1345222

Math20 03.04.2015 11:33

Schuldige für die etwas verspätere Antwort. Ist jedoch von den Einstellungen alles so wie vorher.

Habe nun FRST auf dem damals neu erstellten Profil heruntergeladen, und auch gleich gescannt, ohne eine Änderung, also Häckchen hinzu zufügen oder zu entfernen.

Hier der der 1. Code:




FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Math (administrator) on MATTHIAS-PC on 03-04-2015 12:24:14
Running from C:\Users\Math\Desktop
Loaded Profiles: Math (Available profiles: UpdatusUser & Matthias & Matthias^2 & Math & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
() C:\Program Files (x86)\Infigo\InfigoOperator.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\AsScrPro.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-01] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-08-11] (Alcor Micro Corp.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-13] (ELAN Microelectronics Corp.)
HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [PMSpeed] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSpeed.EXE [112464 2009-12-04] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe ()
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Math\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-02-16] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-02-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-07-28] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-03-02] (Skype Technologies S.A.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-07-28] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02] (Microsoft Corporation.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-03-02] (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll [2014-02-21] ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-02-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-02-16] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll [2014-02-21] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2008-08-06] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-07-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-07-28] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
R2 InfigoOperator; C:\Program Files (x86)\Infigo\InfigoOperator.exe [19768 2014-06-26] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4229912 2011-11-28] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [998640 2015-03-25] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-02-19] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2013-12-17] (Wacom Technology, Corp.)
S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-10] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-12] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-26] (DT Soft Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-03-25] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-03] (INCA Internet Co., Ltd.) [File not signed]
R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 EraserUtilDrv11220; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys [X]
S3 X6va006; \??\C:\Users\Matthias\AppData\Local\Temp\006912B.tmp [X]
S3 X6va008; \??\C:\Users\Matthias\AppData\Local\Temp\0085798.tmp [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-03 12:24 - 2015-04-03 12:24 - 00020521 _____ () C:\Users\Math\Desktop\FRST.txt
2015-04-03 12:23 - 2015-04-03 12:23 - 02095616 _____ (Farbar) C:\Users\Math\Desktop\FRST64.exe
2015-04-03 12:04 - 2015-04-03 12:04 - 00000000 ____D () C:\Users\Math\AppData\Local\Power2Go
2015-04-03 10:59 - 2015-04-03 10:59 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-03 10:59 - 2015-04-03 10:59 - 00000000 ___SD () C:\Windows\system32\GWX
2015-03-28 15:11 - 2015-03-28 15:15 - 00000000 ____D () C:\Users\Matthias\Documents\WoW_Linksammlungen
2015-03-25 15:42 - 2015-03-11 06:06 - 00943616 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-03-25 15:42 - 2015-03-11 06:06 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-03-25 15:42 - 2015-03-11 06:06 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-03-25 15:42 - 2015-03-11 06:06 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-03-25 15:42 - 2015-03-11 06:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-03-25 15:42 - 2015-03-11 06:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-03-25 15:42 - 2015-03-11 06:05 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-03-25 15:42 - 2015-03-11 06:02 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-03-11 15:17 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 15:17 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 15:17 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 15:17 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 15:17 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 15:17 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 15:17 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 15:17 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 15:17 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 15:17 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 15:17 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 15:17 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 15:17 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 15:16 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 15:16 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 15:16 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 15:16 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 15:16 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 15:16 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 15:16 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 15:16 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 15:16 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 15:16 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 15:16 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 15:16 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 15:16 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 15:16 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 15:16 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 15:16 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 15:16 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 15:16 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 15:16 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 15:16 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 15:16 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 15:16 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 15:16 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 15:16 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 15:16 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 15:16 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 15:16 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 15:16 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 15:16 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 15:16 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 15:16 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 15:16 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 15:16 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 15:16 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 15:16 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 15:16 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 15:16 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 15:16 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 15:16 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 15:16 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 15:16 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 15:16 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 15:16 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 15:16 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 15:16 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 15:16 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 15:16 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 15:16 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 15:16 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 15:16 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 15:16 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 15:16 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 15:16 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 15:16 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 15:16 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 15:16 - 2015-01-31 05:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-11 15:16 - 2015-01-31 05:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 15:16 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 15:16 - 2015-01-31 01:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 15:16 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 15:15 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 15:15 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 15:15 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 15:15 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 15:15 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 15:15 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 15:15 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 15:15 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 15:15 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 15:15 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 15:15 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 15:15 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 15:15 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 15:15 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 15:15 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 15:15 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 15:15 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 15:15 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 15:15 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 15:15 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 15:15 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 15:15 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 15:15 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 15:15 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 15:15 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 15:15 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 15:15 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 15:15 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 15:15 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 15:15 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 15:15 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 15:15 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 15:15 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 15:15 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 15:15 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 15:15 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 15:15 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 15:15 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 15:15 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 15:15 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 15:15 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 15:15 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 15:15 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 15:15 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 15:15 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 15:15 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 15:15 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 15:15 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 15:15 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 15:15 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 15:15 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 15:15 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 15:15 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 15:15 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 15:15 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 15:15 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 15:15 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 15:15 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 15:15 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 15:15 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 15:15 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 15:14 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 15:14 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-03 12:24 - 2014-08-16 01:09 - 00000000 ____D () C:\FRST
2015-04-03 12:10 - 2014-09-04 15:31 - 00000000 ____D () C:\Users\Math\AppData\Roaming\.oit
2015-04-03 12:10 - 2011-10-25 02:22 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2015-04-03 12:10 - 2011-10-25 02:22 - 00000000 ___HD () C:\ASUS.DAT
2015-04-03 11:56 - 2012-04-01 12:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-03 11:37 - 2011-08-31 16:40 - 01126308 _____ () C:\Windows\WindowsUpdate.log
2015-04-03 11:37 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-03 11:37 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-03 11:32 - 2012-07-26 12:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-03 11:32 - 2011-02-19 06:24 - 00701200 _____ () C:\Windows\system32\perfh007.dat
2015-04-03 11:32 - 2011-02-19 06:24 - 00153254 _____ () C:\Windows\system32\perfc007.dat
2015-04-03 11:32 - 2009-07-14 07:13 - 01652988 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-03 11:30 - 2011-12-17 01:24 - 00000000 ____D () C:\Users\Matthias\AppData\Local\Overwolf
2015-04-03 11:27 - 2013-07-22 22:48 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Dropbox
2015-04-03 11:27 - 2011-12-20 21:31 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\.oit
2015-04-03 11:25 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-03 11:25 - 2009-07-14 06:51 - 00209007 _____ () C:\Windows\setupact.log
2015-04-03 11:03 - 2012-07-26 12:29 - 01616472 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-01 22:42 - 2012-02-26 21:14 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\TS3Client
2015-03-31 14:01 - 2011-12-17 01:26 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2015-03-29 15:34 - 2012-02-26 21:18 - 00000000 ____D () C:\Users\Matthias\AppData\Local\CrashDumps
2015-03-29 01:55 - 2012-12-12 22:06 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\SoftGrid Client
2015-03-26 15:21 - 2014-12-12 23:29 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-26 15:21 - 2014-05-07 01:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-25 21:02 - 2014-08-14 15:57 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-25 21:02 - 2014-08-14 15:56 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-03-25 21:02 - 2014-08-14 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-03-25 21:02 - 2014-08-14 15:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-22 16:52 - 2012-08-09 23:20 - 00000000 ____D () C:\Users\Matthias^2\Documents\ygopro-1.02B.1
2015-03-22 16:44 - 2012-09-08 11:35 - 00035840 ___SH () C:\Users\Matthias\Thumbs.db
2015-03-22 16:24 - 2014-08-14 21:16 - 00000000 ____D () C:\Users\Matthias\Desktop\Diverse Dateien
2015-03-22 16:20 - 2012-04-11 17:14 - 00000000 ____D () C:\Users\Matthias\Documents\Sonstiges
2015-03-22 16:19 - 2012-04-19 16:30 - 00000000 ____D () C:\Users\Matthias\Documents\ygopro-0x1026
2015-03-18 15:35 - 2014-12-21 22:20 - 00003858 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1419193255
2015-03-18 15:35 - 2011-12-13 17:27 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-17 19:31 - 2012-01-03 06:45 - 00000000 ____D () C:\ProgramData\Overwolf
2015-03-17 07:15 - 2014-08-14 15:56 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-17 07:15 - 2014-08-14 15:56 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-17 07:15 - 2014-08-14 15:56 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-13 18:45 - 2014-11-03 08:10 - 00000000 ____D () C:\Windows\rescache
2015-03-13 15:46 - 2011-12-13 17:49 - 00000000 ____D () C:\Users\Matthias\AppData\Roaming\Skype
2015-03-13 15:45 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-13 15:37 - 2009-07-14 06:45 - 00316008 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-13 15:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-13 15:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 22:50 - 2013-08-15 02:23 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 22:50 - 2011-12-17 15:15 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-10 18:45 - 2014-03-13 17:01 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-10 18:45 - 2014-03-05 16:55 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-10 18:45 - 2014-03-05 16:55 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-06 17:04 - 2014-03-05 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-06 17:04 - 2014-03-05 16:55 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-06 17:04 - 2014-02-16 13:46 - 00000000 ____D () C:\ProgramData\Package Cache

==================== Files in the root of some directories =======

2011-04-13 04:48 - 2010-07-07 01:10 - 0131472 _____ () C:\ProgramData\FullRemove.exe
2014-08-14 14:38 - 2014-08-14 14:38 - 0000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2012-08-12 00:49 - 2012-08-12 00:49 - 0000132 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
2011-08-31 16:57 - 2011-08-31 16:58 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2011-08-31 16:57 - 2011-08-31 16:57 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Some content of TEMP:
====================
C:\Users\Math\AppData\Local\temp\avgnt.exe
C:\Users\Matthias\AppData\Local\temp\avgnt.exe
C:\Users\Matthias^2\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-25 22:43

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---


Und der 2. "Addition" - Code:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Math at 2015-04-03 12:25:14
Running from C:\Users\Math\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}) (Version: 11.0 - Adobe Systems, Inc.)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{878CADF7-5BD6-4A29-A6F4-AC51C0CE8068}) (Version: 1.8.17.26026 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.8.17.26026 - Alcor Micro Corp.) Hidden
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AquaSoft "DiaShow 7 für YouTube" (HKLM-x32\...\{9DFDD0C5-5AC1-484B-ACF8-0F3E1041750B}_is1) (Version: 7.7.11.35343 - AquaSoft GmbH)
ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS)
ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.1.0 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.21 - ASUS)
ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.43 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0031 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus)
ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 3.0.84.161 - eCareme Technologies, Inc.)
AsusScr_K3 Series_ENG_Basic (HKLM-x32\...\AsusScr_K3 Series_ENG_Basic) (Version: 1.0.0001 - ASUS)
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.4.617 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0008 - ASUS)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.3.8518 - )
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.32.25147 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira)
Bastion (HKLM-x32\...\Steam App 107100) (Version:  - Supergiant Games)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Bookworm Deluxe (HKLM-x32\...\Bookworm Deluxe) (Version:  - Oberon Media Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Das Geheimnis des Persischen Teppichs (HKLM-x32\...\{1024E85C-5E5F-4607-A0F4-3E0576A00BC8}) (Version: 1.00.0777 - Frogwares)
Dust: An Elysian Tail (HKLM-x32\...\Steam App 236090) (Version:  - Humble Hearts LLC)
EPSON BX305 Series Handbuch (HKLM-x32\...\EPSON BX305 Series Manual) (Version:  - )
EPSON BX305 Series Printer Uninstall (HKLM\...\EPSON BX305 Series) (Version:  - SEIKO EPSON Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{310C1558-F6B5-4889-98B0-7471966BA7F2}) (Version: 2.2.3.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.10.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
ETDWare PS/2-X64 8.0.5.0_WHQL (HKLM\...\Elantech) (Version: 8.0.5.0 - ELAN Microelectronic Corp.)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.8 - ASUS)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Franzis Führerschein Trainer (HKLM-x32\...\ffs2011_is1) (Version: 1.0 - Franzis Verlag GmbH, Poing)
Free YouTube Download version 3.1.31.706 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.31.706 - DVDVideoSoft Ltd.)
Galeria de Fotografias (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Game Park Console (HKLM-x32\...\{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1) (Version: 6.2.1.1 - Oberon Media, Inc.)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden
Governor of Poker (HKLM-x32\...\Governor of Poker) (Version:  - Oberon Media Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hotel Dash Suite Success (HKLM-x32\...\Hotel Dash Suite Success) (Version:  - Oberon Media Inc.)
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.28.01 - Hyperionics Technology LLC)
Infigo (HKLM-x32\...\Infigo) (Version: 1.21.0.34 - MAVIN LOG, S.L.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java SE Development Kit 7 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170510}) (Version: 1.7.0.510 - Oracle)
Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.220 - Oracle)
Jewel Quest 3 (HKLM-x32\...\Jewel Quest 3) (Version:  - Oberon Media Inc.)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Luxor 3 (HKLM-x32\...\Luxor 3) (Version:  - Oberon Media Inc.)
Mahjongg dimensions (HKLM-x32\...\Mahjongg dimensions) (Version:  - Oberon Media Inc.)
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Meine Dienste Software (HKLM\...\Meine Dienste Software) (Version: 2.0.5.0 - Telekom)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version:  - )
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4002615419-2591733308-3372411449-1007\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
MixMeister BPM Analyzer 1.0 (HKLM-x32\...\MixMeister BPM Analyzer_is1) (Version:  - MixMeister Technology LLC)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
NC Launcher (GameForge) (HKLM-x32\...\NCLauncher_GameForge) (Version:  - NCsoft)
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)
Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Nuance PDF Reader (HKLM-x32\...\{B480904D-F73F-4673-B034-8A5F492C9184}) (Version: 6.00.0041 - Nuance Communications, Inc.)
NVIDIA Grafiktreiber 311.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.44 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}) (Version: 9.12.0213 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Opera 12.16 (HKLM-x32\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
osu! (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.84.92.0 - Overwolf Ltd.)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version:  - )
Presto! PageManager 9 (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.00.11 - Newsoft Technology Corporation)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.)
Raccolta foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.9.0 - Ralink)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6324 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rome: Total War (HKLM-x32\...\Steam App 4760) (Version:  - The Creative Assembly)
Sherlock Holmes - Das Geheimnis der Mumie (HKLM-x32\...\{240B5777-0825-4519-A5C3-06C809CB4DB5}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes - Das Geheimnis des silbernen Ohrrings (HKLM-x32\...\{E2FA0CFD-A441-4DFC-8DC2-D8D03C463F90}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes - Die Spur der Erwachten Remastered (HKLM-x32\...\{760BF94F-4FAF-4EF6-96D9-B55B12993992}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes jagt Arsene Lupin Remastered (HKLM-x32\...\{09F3B8D4-2CED-464A-92E3-7FD93200FB58}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes jagt Jack the Ripper (HKLM-x32\...\{DA971D8F-256B-41E6-9E79-7A61F3224297}) (Version: 1.00.0777 - Frogwares)
Sherlock Holmes und der Hund der Baskervilles (HKLM-x32\...\{A8323B82-83A1-40B3-B6DC-AE1F43714428}) (Version: 1.00.0777 - Frogwares)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.10.9560 - Skype Technologies S.A.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
StepMania v5.0 beta 2a (remove only) (HKLM-x32\...\StepMania 5) (Version:  - StepMania Team)
Stronghold 2 Deluxe (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.100 - Firefly Studios)
Stronghold 3 (HKLM-x32\...\Steam App 47400) (Version:  - Firefly Studios)
Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)
syncables desktop SE (HKLM-x32\...\{341697D8-9923-445E-B42A-529E5A99CB7A}) (Version: 5.5.746.11492 - syncables)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.3-2 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.1 - ASUS)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS)
World of Goo (HKLM-x32\...\World of Goo) (Version:  - Oberon Media Inc.)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
YTD Video Downloader 3.9.6 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 3.9.6 - GreenTree Applications SRL) <==== ATTENTION
Συλλογή φωτογραφιών (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3508.0205 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
גלריית התמונות (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
معرض الصور (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1007_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Math\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1007_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Math\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1007_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Math\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1007_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Math\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4002615419-2591733308-3372411449-1007_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Math\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

03-04-2015 10:39:52 TuneUp Utilities Language Pack (de-DE) wird entfernt
03-04-2015 10:58:49 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-08-16 21:09 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {004BE347-EAC2-44B4-B0FE-7C4861807AF3} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {1DCDBBC0-7424-480B-8896-DFCE92CDFD7D} - System32\Tasks\{7EB99D3E-7965-471F-8CC4-2C0C80AEB501} => pcalua.exe -a C:\Users\Matthias\Downloads\wlsetup-web.exe -d C:\Users\Matthias\Downloads
Task: {1E7AFAC3-212E-4D58-AD96-F8F8098D5E94} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-12-18] (ASUSTek Computer Inc.)
Task: {2B7FEF93-2666-476A-95B4-72F547E7E207} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {3A6A9222-FC6D-4F4A-A46B-46378CCD48F0} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {559AC206-F8FE-43B0-B835-AFB56F8B5AF6} - System32\Tasks\{65D99A42-C1E0-43AE-A02F-D5E91F5AA0D1} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/40950
Task: {594CA8D3-47E8-4F09-9ADB-9BBAC343A0D0} - System32\Tasks\{10B5A3E0-39FC-4F24-BF1C-186C572A0F4D} => pcalua.exe -a "C:\Users\Matthias\Downloads\wlsetup-all_16.4.3508.0205 (2).exe" -d C:\Users\Matthias\Downloads
Task: {63DAC438-3861-46C1-9162-57DCA6B747F0} - System32\Tasks\{536E0AD9-D762-46D5-AFE4-2C0E0D7B8451} => pcalua.exe -a G:\setup.exe -d G:\
Task: {648778C7-22CB-40CD-83FB-639A19EC5401} - System32\Tasks\{39295529-CD44-4104-B509-2A9E6B71FD8F} => pcalua.exe -a C:\Users\Matthias\AppData\Local\Temp\Temp1_bpmanalyzer.zip\BpmAnlyz.exe
Task: {6C1857B7-EEDD-4373-AC4C-F6BC6B7E0638} - System32\Tasks\{95A27A1F-0369-49BC-8B65-1B426BFB5D09} => pcalua.exe -a G:\setup5-A53.exe -d G:\
Task: {6CF4648D-F7AE-4390-9BBB-E0B75D010955} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {709D098E-CCFA-4514-A3D6-C2E10BDE5279} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {7662731C-9A17-494B-A3F5-FCB2D2C95C87} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {79453136-6EA3-4A36-B682-3457B091867B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {97764E45-5FEC-4711-B12D-3F8E912CE0CD} - System32\Tasks\{2E651BA8-50AE-4846-AFE3-BDDBD4FFC3F2} => pcalua.exe -a G:\Installer.exe -d G:\
Task: {AE6154AC-6A60-42C0-BC06-16BAB610AAD3} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-02] (ASUS)
Task: {B58344CE-02F2-4ABE-8163-F35999078A2E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: {B5E447D4-D77D-4B35-B81D-2C12F7DB234B} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {C1A8CBF3-8059-42B8-B2AA-4773ABE188E4} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-03-25] (Overwolf LTD)
Task: {CC78BC3F-9E9E-4BE0-88F6-D623D1CF9D24} - System32\Tasks\{F3317F8D-D9C2-473F-BBC2-2EECFA976440} => pcalua.exe -a C:\Users\Matthias\AppData\Local\Temp\InstallFlashPlayer.exe -d "C:\Program Files (x86)\Opera"
Task: {D4B786DB-B0DA-462D-B7AA-AFB7750FD083} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D8D7D512-62D1-41B1-863F-38CECDD27AE0} - System32\Tasks\{53E572A2-35F6-4909-8F8C-ABA6CC768F59} => pcalua.exe -a G:\Installer.exe -d G:\
Task: {DADB8F15-52DA-4E9A-9698-C2FCADE8517B} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {E098F91F-6134-4AAD-A0FB-074D143269D6} - System32\Tasks\Opera scheduled Autoupdate 1419193255 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {E12FC1C2-FDC6-41EF-BA46-7EDB81A0AEDA} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {E1FE3390-0EC5-4E57-B99F-23C6203ECF6E} - System32\Tasks\{321FF699-F676-4207-B0A0-3FC52600612F} => pcalua.exe -a "C:\Program Files (x86)\3D-Fahrschule Demo\starterDemo5.exe" -d "C:\Program Files (x86)\3D-Fahrschule Demo"
Task: {F3064CA5-883E-4C41-9D54-83D0C149FEB4} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AIRecoveryRemind.job => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe

==================== Loaded Modules (whitelisted) ==============

2014-06-26 12:34 - 2014-06-26 12:34 - 00019768 _____ () C:\Program Files (x86)\Infigo\InfigoOperator.exe
2013-02-19 19:55 - 2013-02-19 20:03 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-06-03 01:59 - 2013-03-14 08:28 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-08-31 16:54 - 2007-11-30 20:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
2010-04-03 04:21 - 2008-10-01 08:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2014-02-18 08:19 - 2013-12-17 03:17 - 01356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2010-07-15 01:11 - 2010-07-15 01:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2011-05-31 05:23 - 2011-01-27 02:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-09-24 01:53 - 2010-09-24 01:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2014-10-11 14:06 - 2014-10-11 14:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-06-26 12:34 - 2014-06-26 12:34 - 00047616 _____ () C:\Program Files (x86)\Infigo\EventsProvider.dll
2011-12-20 21:26 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\nsSign.dll
2011-12-20 21:26 - 2009-07-08 15:23 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PerformOcr.dll
2011-12-20 21:26 - 2009-12-04 18:21 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMISM.dll
2011-12-20 21:26 - 2009-11-20 14:20 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMCommon.dll
2011-12-20 21:26 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PHooKDlg.dll
2011-12-20 21:26 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\Qem.dll
2011-12-20 21:26 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\NetFun2k.dll
2011-12-20 21:26 - 2009-12-08 11:51 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\ScanModule.dll
2011-12-20 21:26 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMANO.dll
2011-12-20 21:26 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\ComClass.dll
2011-12-20 21:26 - 2009-12-07 12:07 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMTree.dll
2011-12-20 21:26 - 2009-11-27 18:50 - 00135168 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSet.dll
2011-12-20 21:26 - 2009-10-16 16:04 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMDB_N.dll
2011-12-20 21:26 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\FT.dll
2011-12-20 21:26 - 2009-12-18 17:12 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMINSO.dll
2011-12-20 21:26 - 2008-12-12 17:52 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMProp.dll
2011-12-20 21:26 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMVoice.dll
2011-12-20 21:26 - 2008-12-12 18:00 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\OutlookVBA.dll
2011-12-20 21:26 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMAppBar.dll
2011-12-20 21:26 - 2009-12-04 18:21 - 04567040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMView.dll
2011-12-20 21:26 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\NsOEMKey.dll
2011-12-20 21:26 - 2009-12-18 20:10 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMSave.dll
2011-12-20 21:26 - 2009-11-11 18:21 - 00450560 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMPageVW.dll
2011-12-20 21:26 - 2009-11-11 18:20 - 00098304 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMDocVW.dll
2011-12-20 21:26 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMApSet.dll
2011-12-20 21:26 - 2009-11-20 12:30 - 01032192 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\SlideBarDLL.dll
2011-12-20 21:26 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMAnoSet.dll
2011-12-20 21:26 - 2009-11-09 19:35 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMImgVW.dll
2011-12-20 21:26 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMIEVW.dll
2011-12-20 21:26 - 2009-07-14 14:25 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMPDFView.dll
2011-12-20 21:26 - 2009-10-22 18:50 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMStatus.dll
2011-12-20 21:26 - 2009-12-07 14:55 - 00253952 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMScnSet.dll
2011-12-20 21:26 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\Import.dll
2011-12-20 21:26 - 2008-04-24 11:46 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9 for EP\PMImageSplitter.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2014-02-21 15:57 - 2014-02-21 15:57 - 16265096 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:6764D965
AlternateDataStreams: C:\ProgramData\Temp:81F83028

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4002615419-2591733308-3372411449-1007\Control Panel\Desktop\\Wallpaper -> C:\Users\Math\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

==================== Accounts: =============================

Administrator (S-1-5-21-4002615419-2591733308-3372411449-500 - Administrator - Disabled)
Gast (S-1-5-21-4002615419-2591733308-3372411449-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-4002615419-2591733308-3372411449-1003 - Limited - Enabled)
Math (S-1-5-21-4002615419-2591733308-3372411449-1007 - Administrator - Enabled) => C:\Users\Math
Matthias (S-1-5-21-4002615419-2591733308-3372411449-1001 - Administrator - Enabled) => C:\Users\Matthias
Matthias^2 (S-1-5-21-4002615419-2591733308-3372411449-1004 - Limited - Enabled) => C:\Users\Matthias^2
UpdatusUser (S-1-5-21-4002615419-2591733308-3372411449-1000 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28x
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/03/2015 11:32:30 AM) (Source: WTabletServiceCon) (EventID: 1) (User: )
Description: Prefs: Failed to get user path

Error: (04/03/2015 05:54:07 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen

Error: (04/02/2015 03:48:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2153

Error: (04/02/2015 03:48:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2153

Error: (04/02/2015 03:48:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/02/2015 03:48:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1045

Error: (04/02/2015 03:48:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1045

Error: (04/02/2015 03:48:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/02/2015 02:21:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000053290
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (04/01/2015 08:01:44 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig


System errors:
=============
Error: (04/03/2015 11:31:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (04/03/2015 11:31:53 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (04/03/2015 11:28:04 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (04/03/2015 11:27:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "vToolbarUpdater18.1.9" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (04/01/2015 08:39:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (04/01/2015 08:39:33 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (04/01/2015 08:36:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "vToolbarUpdater18.1.9" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (03/31/2015 01:59:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (03/31/2015 01:59:01 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/31/2015 01:54:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "vToolbarUpdater18.1.9" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================
Error: (04/03/2015 11:32:30 AM) (Source: WTabletServiceCon) (EventID: 1) (User: )
Description: Prefs: Failed to get user path

Error: (04/03/2015 05:54:07 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen

Error: (04/02/2015 03:48:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2153

Error: (04/02/2015 03:48:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2153

Error: (04/02/2015 03:48:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/02/2015 03:48:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1045

Error: (04/02/2015 03:48:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1045

Error: (04/02/2015 03:48:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/02/2015 02:21:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Explorer.EXE6.1.7601.175674d672ee4ntdll.dll6.1.7601.18247521eaf24c00000050000000000053290

Error: (04/01/2015 08:01:44 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig


CodeIntegrity Errors:
===================================
  Date: 2014-08-16 21:08:18.169
  Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-08-16 21:08:17.927
  Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-10-24 19:45:28.732
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:45:27.780
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:45:26.641
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:45:26.049
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:40:35.576
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:40:35.233
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:40:34.859
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-10-24 19:40:34.406
  Description: Die Abbildintegritat der Datei "\Device\HarddiskVolume2\Users\Matthias\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht uberpruft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Percentage of memory in use: 27%
Total physical RAM: 8104.14 MB
Available physical RAM: 5866.88 MB
Total Pagefile: 16206.48 MB
Available Pagefile: 13840.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:8.15 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:254.45 GB) (Free:235.48 GB) NTFS
Drive e: (SDATA1) (Fixed) (Total:232.87 GB) (Free:232.77 GB) NTFS
Drive f: (SDATA2) (Fixed) (Total:232.89 GB) (Free:0 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: AA9693FE)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=186.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=254.5 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: BBC58B91)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================


Math20 11.04.2015 18:48

Verweise, dass es auf folgendem Link fortgeführt wird:

"hxxp://www.trojaner-board.de/165797-avast-free-antivirus-problem.html"

Math20 15.04.2015 23:13

Kann geschlossen werden. Der Fehler wurde behoben. Nach zu schauen im obrigen Link.


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:52 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131