| Marcello13 | 11.03.2015 15:44 |
Windows 8:PC langsamer; Viren müssen bereinigt werden
Guten Tag.
Ich sitze momentan an einem Computer von einem Freund wo ich eure Hilfe bräuchte den Computer zu bereinigen.
Malwarebyte hat über 200 Infizierungen festgestellt.
Darüber hinaus klagt der Freund darüber das der PC extrem langsamer geworden ist.
Vor allem Streaming und Internet.
Das Problem liegt wahrscheinlich an den Infizierungen.
Ich wäre euch sehr verbunden wenn Ihr mir dabei helfen könntet oder ihr mir sagt, ob ein Formation die einfachste Möglichkeit wäre.
Vielen Dank schon einmal.
MFG
Marcel
FRST: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Salem (administrator) on ANNA on 11-03-2015 13:00:26
Running from C:\Users\Salem\Desktop
Loaded Profiles: Salem (Available profiles: Salem)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Systweak) C:\Program Files (x86)\Right Backup\RBClientService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(Systweak) C:\Program Files (x86)\Right Backup\RightBackup.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(McAfee, Inc.) C:\Program Files\McAfeeEx\MOCP\core\OcpTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\Bluetooth Headset Helper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1381744 2014-02-11] (Realtek Semiconductor)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [10590208 2013-03-14] (Broadcom Corporation)
HKLM\...\Run: [Bluetooth] => C:\Program Files\WIDCOMM\Bluetooth Software\bttray.exe [526704 2012-12-14] (Broadcom Corporation.)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3039984 2013-03-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740376 2013-02-06] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Parental Controls.lnk
ShortcutTarget: McAfee Parental Controls.lnk -> C:\Program Files\McAfeeEx\MOCP\core\OcpTray.exe (McAfee, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com
HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
SearchScopes: HKU\S-1-5-21-2939445438-3290321197-1501721921-1001 -> {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_dnldstr_14_23_ie&cd=2XzuyEtN2Y1L1QzutA0CtDyByBtCyByCyEyC0F0AyDtB0D0EtN0D0Tzu0SzzzzyEtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyBtCyCtCzyzyyDyDtGtDzyyDtDtGtC0A0D0FtG0FyD0BtDtGyD0BtBtCyCyByEtA0ByCtD0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAtDtA0D0FyB0AyCtG0ByEtA0FtG0DtAyE0CtGzytAtA0DtGyBtDtCyCyB0BtDyEzytDtD0D2Q&cr=1980482256&ir=
SearchScopes: HKU\S-1-5-21-2939445438-3290321197-1501721921-1001 -> {E38093CC-D3AC-456F-8992-1CF330A9A2C1} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-27] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-27] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-27] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-27] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2014-04-25] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2014-04-25] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.179.1
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\system32\npDeployJava1.dll [2013-12-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-12-27] (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-04-25] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-23] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-12-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-12-27] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\Sony\MSS\3.8.130\npMcAfeeMss.dll No File
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-04-25] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-11] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\5\NP_wtapp.dll [2014-12-02] ()
FF Plugin-x32: Adobe Reader -> c:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2939445438-3290321197-1501721921-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2013-02-19] (Intel)
FF Plugin HKU\S-1-5-21-2939445438-3290321197-1501721921-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2013-02-19] (Intel)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2013-12-27]
Chrome:
=======
CHR Profile: C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-11]
CHR Extension: (Google Docs) - C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-11]
CHR Extension: (Google Drive) - C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-11]
CHR Extension: (YouTube) - C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-11]
CHR Extension: (Google Search) - C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-11]
CHR Extension: (Google Sheets) - C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-11]
CHR Extension: (Gmail) - C:\Users\Salem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-11]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2015-01-26] (WildTangent)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129824 2013-01-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166688 2013-01-23] (Intel Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)
S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [603424 2014-06-12] (McAfee, Inc.)
S2 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 McOobeSv2; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-06-18] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
S3 mfeicfcoreocp; C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe [2782392 2013-12-31] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [639584 2013-02-05] (Sony Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-02-06] (Sony Corporation)
R2 RBClientService; C:\Program Files (x86)\Right Backup\RBClientService.exe [48240 2014-07-11] (Systweak)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-19] (Intel Corporation)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-12-05] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-12-05] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [6070272 2013-03-14] (Broadcom Corporation) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [6971056 2013-03-14] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-06-18] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-06-18] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
R3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2014-06-02] ()
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-03-14] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-12-05] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-11 13:00 - 2015-03-11 13:00 - 00020845 _____ () C:\Users\Salem\Desktop\FRST.txt
2015-03-11 12:47 - 2015-03-11 13:00 - 00000000 ____D () C:\FRST
2015-03-11 12:41 - 2015-03-11 12:41 - 02095616 _____ (Farbar) C:\Users\Salem\Desktop\FRST64.exe
2015-03-11 12:40 - 2015-03-11 12:40 - 00000472 _____ () C:\Users\Salem\Downloads\defogger_disable.log
2015-03-11 12:40 - 2015-03-11 12:40 - 00000000 _____ () C:\Users\Salem\defogger_reenable
2015-03-11 12:39 - 2015-03-11 12:39 - 00050477 _____ () C:\Users\Salem\Downloads\Defogger.exe
2015-03-11 12:37 - 2015-03-11 12:48 - 00001128 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-11 12:37 - 2015-03-11 12:48 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-11 12:37 - 2015-03-11 12:43 - 00004100 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-03-11 12:37 - 2015-03-11 12:43 - 00003864 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-03-11 12:37 - 2015-03-11 12:42 - 00002195 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-03-11 12:37 - 2015-03-11 12:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-03-11 12:37 - 2015-03-11 12:37 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-11 12:36 - 2015-03-11 12:37 - 00000000 ____D () C:\Users\Salem\AppData\Local\Google
2015-03-11 12:28 - 2015-03-11 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-03-09 14:56 - 2015-03-09 14:56 - 00001059 _____ () C:\Users\Salem\Desktop\Musik - Verknüpfung (2).lnk
2015-02-25 09:46 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-02-25 09:46 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-02-25 09:46 - 2014-10-29 02:27 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-02-25 09:46 - 2014-10-29 02:27 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2015-02-25 09:46 - 2014-10-29 02:04 - 00868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-02-25 09:46 - 2014-10-29 02:04 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2015-02-24 10:11 - 2015-02-24 10:11 - 00283960 _____ () C:\WINDOWS\Minidump\022415-20578-01.dmp
2015-02-24 10:11 - 2015-02-24 10:11 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-12 22:08 - 2015-02-12 22:08 - 00000000 ____D () C:\Users\Salem\AppData\Roaming\rightbackup
2015-02-12 22:08 - 2015-02-12 22:08 - 00000000 ____D () C:\Program Files (x86)\Right Backup
2015-02-11 23:45 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-11 23:45 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-10 23:26 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-10 23:26 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-10 23:26 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-10 23:26 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-10 23:26 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-10 23:26 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-10 23:26 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-10 23:26 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-10 23:26 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-10 23:26 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-10 23:26 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-10 23:26 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-10 23:26 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-10 23:26 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-10 23:26 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-10 23:26 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-10 23:26 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-10 23:26 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-10 23:26 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-10 23:26 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-10 23:26 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-10 23:26 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-10 23:26 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-10 23:26 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-10 23:26 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-10 23:26 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-10 23:25 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-10 23:25 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-10 23:25 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-10 23:25 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-10 23:25 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-10 23:25 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-10 23:25 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-10 23:25 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-10 23:25 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-10 23:25 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-10 23:25 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-10 23:25 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-10 23:25 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-10 23:25 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-10 23:25 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-10 23:25 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-10 23:25 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-10 23:25 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-10 23:25 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-10 23:25 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-10 23:25 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-10 23:25 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-10 23:25 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-10 23:25 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-10 23:25 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-10 23:25 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-10 23:25 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-10 23:25 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-10 23:25 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-10 23:25 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-10 23:25 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-10 23:25 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-10 23:25 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-10 23:25 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-10 23:25 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-10 23:25 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-10 23:25 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-10 23:25 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-10 23:25 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-10 23:25 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-10 23:25 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-10 23:25 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-02-10 23:25 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-02-10 23:25 - 2014-12-09 00:12 - 00391526 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-10 23:24 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-11 13:00 - 2013-12-27 14:03 - 00000000 ____D () C:\ProgramData\MOCP
2015-03-11 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-03-11 12:58 - 2014-06-02 21:37 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2939445438-3290321197-1501721921-1001
2015-03-11 12:53 - 2014-12-05 19:59 - 01345535 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-11 12:40 - 2014-12-05 19:32 - 00000000 ____D () C:\Users\Salem
2015-03-11 12:36 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-03-11 12:31 - 2014-12-11 19:16 - 00003090 _____ () C:\WINDOWS\System32\Tasks\RegClean Pro
2015-03-11 12:29 - 2014-12-06 01:59 - 00003914 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{885E96E0-2B0B-4A29-BAC2-7CFC96805671}
2015-03-11 12:28 - 2015-02-08 22:56 - 00003068 _____ () C:\WINDOWS\System32\Tasks\Right Backup_startup
2015-03-11 12:27 - 2014-12-06 01:54 - 00000000 ____D () C:\Users\Salem\OneDrive
2015-03-11 12:27 - 2014-06-02 22:44 - 00000000 ____D () C:\Users\Salem\AppData\Roaming\Skype
2015-03-11 01:18 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-03-10 15:01 - 2014-07-27 06:54 - 00000268 _____ () C:\WINDOWS\Tasks\RegClean Pro_DEFAULT.job
2015-03-09 11:34 - 2014-09-24 07:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-03-09 11:34 - 2014-09-24 06:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2015-03-09 11:34 - 2014-09-24 06:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2015-03-09 09:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-09 08:39 - 2013-08-22 15:46 - 00291151 _____ () C:\WINDOWS\setupact.log
2015-03-09 08:39 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-09 08:39 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-03-08 02:14 - 2014-09-23 22:06 - 00009776 _____ () C:\WINDOWS\PFRO.log
2015-03-02 15:05 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-02-24 10:11 - 2014-06-04 08:24 - 495925718 _____ () C:\WINDOWS\MEMORY.DMP
2015-02-21 00:46 - 2014-06-02 22:44 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-02-21 00:46 - 2014-06-02 22:44 - 00000000 ____D () C:\ProgramData\Skype
2015-02-19 01:03 - 2014-06-03 16:47 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-19 00:55 - 2014-06-03 16:47 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-18 07:54 - 2014-07-27 06:54 - 00000276 _____ () C:\WINDOWS\Tasks\RegClean Pro_UPDATES.job
2015-02-15 13:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-12 22:08 - 2014-07-27 06:55 - 00001066 _____ () C:\Users\Public\Desktop\Right Backup.lnk
2015-02-12 22:08 - 2014-07-27 06:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Right Backup
2015-02-12 22:08 - 2014-07-27 06:54 - 00000000 ____D () C:\Users\Salem\AppData\Roaming\Systweak
2015-02-12 22:07 - 2014-07-27 06:53 - 00000997 _____ () C:\Users\Public\Desktop\RegClean Pro.lnk
2015-02-12 22:07 - 2014-07-27 06:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
2015-02-12 22:07 - 2014-07-27 06:53 - 00000000 ____D () C:\Program Files (x86)\RCP
2015-02-11 16:16 - 2014-07-27 06:53 - 00020216 _____ () C:\WINDOWS\system32\roboot64.exe
2015-02-11 15:31 - 2013-08-22 15:44 - 00359936 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-11 15:28 - 2014-12-13 20:30 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-11 15:28 - 2014-09-24 08:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
==================== Files in the root of some directories =======
2014-06-02 22:37 - 2014-11-18 00:37 - 0000127 _____ () C:\Users\Salem\AppData\Roaming\WB.CFG
2014-12-05 19:25 - 2014-12-05 19:25 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-23 00:27
==================== End Of Log ============================
Addition: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Salem at 2015-03-11 13:01:11
Running from C:\Users\Salem\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Disabled - Out of date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Reader XI MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)
Advanced-System Protector (HKLM-x32\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.13665 - Systweak Software) <==== ATTENTION
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Behind The Reflection 2: Witch's Revenge (x32 Version: 3.0.2.32 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version: 6.30.59.125 - Broadcom Corporation)
Build-a-lot: On Vacation (x32 Version: 2.2.0.110 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.2529 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.6201.52 - CyberLink Corp.)
Einstellungen für VAIO Media Server (HKLM\...\{62A172B2-550E-499D-9A82-5190D18390AA}) (Version: 1.1.0.02220 - Sony Corporation)
Enchanted Cavern 2 (x32 Version: 2.2.0.110 - WildTangent) Hidden
ESDL (x32 Version: 1.0.0 - Sony Corporation) Hidden
Extended Update (HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\...\UpdaterEX) (Version: - Extended Update) <==== ATTENTION
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FDUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.89 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Heroes of Hellas 3: Athens (x32 Version: 3.0.2.32 - WildTangent) Hidden
Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41800) (Version: 3.8.0.41800.66 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
Intel(R) PROSet/Wireless NFC-Software (HKLM\...\Intel(R) PROSet/Wireless NFC-Software) (Version: 1.0.1.003 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 7 Update 13 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417013FF}) (Version: 7.0.130 - Oracle)
Java 7 Update 13 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217013FF}) (Version: 7.0.130 - Oracle)
Luxor HD (x32 Version: 2.2.0.110 - WildTangent) Hidden
Mahjongg Artifacts (x32 Version: 2.2.0.110 - WildTangent) Hidden
McAfee Internet Security (HKLM-x32\...\MSC) (Version: 12.8.958 - McAfee, Inc.)
McAfee Parental Controls (HKLM-x32\...\MOCP) (Version: 3.2.226.1 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
My Kingdom for the Princess 3 (x32 Version: 2.2.0.110 - WildTangent) Hidden
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayMemories Home (HKLM-x32\...\{1E5C7043-09C5-4974-A69F-A5271FD82BBC}) (Version: 7.0.02.14060 - Sony Corporation)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Price Meter (remove only) (HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\...\Price Meter) (Version: 1.1.4.0 - Price Meter) <==== ATTENTION
PriceMeter Express (remove only) (HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\...\PriceMeter Express) (Version: 7.7.0.0 - PriceMeter Express) <==== ATTENTION
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.10.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7177 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{0D61A55C-3ADC-409F-BF5B-A1766D1F5944}) (Version: 6.2.9200.28135 - Realtek Semiconductor Corp.)
RegClean-Pro (HKLM-x32\...\RegClean-Pro_is1) (Version: 6.21 - systweak.com) <==== ATTENTION
Restore (x32 Version: 1.0.0 - Sony Corporation) Hidden
Right Backup (HKLM-x32\...\980124D4-3D52-4c2d-AD41-9E90BDF4C031_Systweak_Ri~01F2B2E8_is1) (Version: 2.1.1000.4398 - Systweak Software)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
Speedial (HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\...\Speedial) (Version: - Speedial) <==== ATTENTION!
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.4.0.1 - Synaptics Incorporated)
Update for PriceMeter (HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\...\Price Meter Updater) (Version: - Update for PriceMeter) <==== ATTENTION
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Vacation Quest™ - Australia (x32 Version: 3.0.2.32 - WildTangent) Hidden
VAIO - Xperia Link (HKLM-x32\...\{D91558BF-D1F3-411F-AEFE-8774CB406512}) (Version: 1.2.0.02040 - Sony Corporation)
VAIO BIOS Data Transfer Utility (x32 Version: 1.0.0.02050 - Sony Corporation) Hidden
VAIO Care (HKLM\...\{92907606-B2FC-4193-B0CE-A21159DA3ABB}) (Version: 8.4.0.14286 - Sony Corporation)
VAIO Care-Hardwarediagnose-Plugin (HKLM-x32\...\{EC153498-00E1-4C9C-89BE-81527C6750BE}) (Version: 4.8.0.13250 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 6.2.0.03070 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.11.0.13250 - Sony Corporation)
VAIO Easy Connect (x32 Version: 8.2.0.14170 - Sony Corporation) Hidden
VAIO Gesture Control (HKLM-x32\...\{692955F2-DE9F-4078-8FAA-858D6F3A1776}) (Version: 2.2.0.01230 - Sony Corporation)
VAIO Gesture Control (x32 Version: 2.2.0.01230 - Sony Corporation) Hidden
VAIO Image Optimizer (HKLM-x32\...\InstallShield_{5597C927-029A-46A7-A0C0-8DABD9891A50}) (Version: 3.1.00.14260 - Sony Corporation)
VAIO Image Optimizer (x32 Version: 3.1.00.14260 - Sony Corporation) Hidden
VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 2.2.0.01240 - Sony Corporation)
VAIO Movie Creator (HKLM-x32\...\InstallShield_{C2CC5822-32E6-4D21-88EA-DE8CED09EE2F}) (Version: 4.1.01.15140 - Sony Corporation)
VAIO Movie Creator (x32 Version: 4.1.01.15140 - Sony Corporation) Hidden
VAIO Sample Music (HKLM-x32\...\{FBEE3D44-0933-4B84-BB6A-49957F89187F}) (Version: 1.0.0.03051 - Sony Corporation)
VAIO*CPU-Lüfterdiagnose (HKLM-x32\...\{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}) (Version: 1.2.0.03050 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.9.0.11060 - Sony Corporation)
VCCx64 (Version: 1.0.0 - Sony Corporation) Hidden
VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VHD (x32 Version: 1.0.0 - Sony Corporation) Hidden
Virtual Villagers 5 - New Believers (x32 Version: 3.0.2.32 - WildTangent) Hidden
VIx64 (Version: 1.0.0 - Sony Corporation) Hidden
VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VPMx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.4900 - Broadcom Corporation)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
XperiaLinkx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Youda Jewel Shop (x32 Version: 3.0.2.32 - WildTangent) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2939445438-3290321197-1501721921-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2939445438-3290321197-1501721921-1001_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-2939445438-3290321197-1501721921-1001_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
==================== Restore Points =========================
06-02-2015 08:53:46 Windows Update
11-02-2015 00:25:55 Windows Update
14-02-2015 01:29:23 Windows Update
17-02-2015 23:55:38 Windows Update
01-03-2015 23:05:28 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {045D4B33-23BA-47CA-A5CF-44F15A739128} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterSystem => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-03-08] (Sony Corporation)
Task: {083EF9A1-4F67-4700-8E6A-EF72675B7AE9} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-02-02] (Sony Corporation)
Task: {0CB1E5B4-0B71-412D-97C7-13C6660A9F67} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: {18458848-7E7E-4B78-911B-25D016F9265B} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: {20382E8C-7598-4EF8-ACC8-D487095D78FB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {264982A2-386F-4D6E-A3FD-70C82538F40C} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient
Task: {342C8061-3AE8-40DF-B3D2-DFB440463580} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: {342E6315-C6E1-47FB-9C40-ABA1B625B76D} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: {34B34AAF-7C8C-47A2-A85F-B74924FF60B4} - System32\Tasks\Sony Corporation\VAIO Hardware Diagnostics\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2013-01-25] (Sony Corporation)
Task: {4925DC5C-7990-4695-A395-E7C8FC997084} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterUser => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-03-08] (Sony Corporation)
Task: {4FCCF95C-C39D-41B3-9850-1C3D5A598011} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2013-01-23] (Sony Corporation)
Task: {59E49CB0-81BF-4CD6-A5BE-BA3412ECDC37} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2014-01-16] (Sony Corporation)
Task: {7E78CD62-3AA0-4916-9879-A8BE3B1DFEBC} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Ultimate Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2014-03-01] (Sony Corporation)
Task: {8224EF3B-7596-42E3-9C8E-A93163FD42EF} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {83C65CCD-86BC-46BA-B5EA-40849434FC91} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2013-01-24] (Sony Corporation)
Task: {928511BD-7B9C-43C4-8AAF-AC58AECA2D28} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: {93476036-FAED-41DD-A347-B4AE49FEED0E} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)
Task: {969F398D-C9DC-4A7C-9DC1-69B2D4AC1F63} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: {9C19A088-7DCF-47D9-A028-F0222D43D6FC} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: {9D52F6E9-C2AB-42B6-B06A-6125D1B77A80} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RCP\RegCleanPro.exe [2015-02-11] () <==== ATTENTION
Task: {AB53818C-E808-447B-A5D8-9E2DC5C72E41} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RCP\RegCleanPro.exe [2015-02-11] () <==== ATTENTION
Task: {ACD48160-0637-46AE-9992-45444DF1DB41} - System32\Tasks\Sony Corporation\Xperia Link\Xperia Link Logon Start => C:\Program Files (x86)\Sony\Xperia Link\Xperia Link.exe [2013-02-04] (Sony Corporation)
Task: {ACF1E2B8-9E91-4BA8-8E4A-BFBF27D1BC2D} - System32\Tasks\Right Backup_startup => C:\Program Files (x86)\Right Backup\RightBackup.exe [2014-07-11] (Systweak)
Task: {B1E79896-FECA-4799-A8A7-65E68E4CDEB5} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe [2015-02-11] () <==== ATTENTION
Task: {C3AE47D8-0D7E-4408-8387-37B920A63B41} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-02-02] (Sony Corporation)
Task: {D0C8E026-769C-44B0-8178-BE44A72B8C92} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: {E8A5DDC8-12AF-46D2-AA53-F77F48F086F9} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2014-02-27] (Sony Corporation)
Task: {EBBE3F55-DC45-4C23-A7BC-5B9CFB57FE78} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-02-19] (Microsoft Corporation)
Task: {F40ACDA3-124C-424B-8240-4A9D6125FBD5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {FDC81EC2-7855-46AC-9F47-E5630CAE10E3} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-02-20] (Sony Corporation)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Loaded Modules (whitelisted) ==============
2012-12-14 14:27 - 2012-12-14 14:27 - 00049520 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll
2013-11-19 09:21 - 2013-11-19 09:21 - 00062464 _____ () C:\Program Files\Sony\VAIO Care\listener.exe
2014-12-07 09:56 - 2014-12-07 09:56 - 01782784 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Windows.App640a3541#\3f4dc590466037f015f65bc07d1ea923\Windows.ApplicationModel.ni.dll
2014-12-07 09:56 - 2014-12-07 09:56 - 00207872 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Windows.System\a4efa88b742703220e527956d8ab4e84\Windows.System.ni.dll
2014-12-07 09:56 - 2014-12-07 09:56 - 00632320 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Windows.Security\c7f6d022c5d5aec4891cb6b3b9934336\Windows.Security.ni.dll
2014-12-06 19:00 - 2014-12-06 19:00 - 00363520 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Windows.Foundation\6382e6f5ad8b7a9db4f5cd4817e70319\Windows.Foundation.ni.dll
2014-12-07 09:56 - 2014-12-07 09:56 - 01278464 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Windows.Storage\f9ac074d298db459c5eff6d3256861c8\Windows.Storage.ni.dll
2014-12-07 09:56 - 2014-12-07 09:56 - 00521216 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Windows.Data\fae2b750f87849ca11806d20b2504bf2\Windows.Data.ni.dll
2015-02-12 22:08 - 2013-08-02 19:21 - 00886272 _____ () C:\Program Files (x86)\Right Backup\System.Data.SQLite.dll
2013-12-27 13:32 - 2013-01-23 10:26 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-03-11 12:37 - 2015-03-07 07:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\libglesv2.dll
2015-03-11 12:37 - 2015-03-07 07:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\libegl.dll
2015-03-11 12:37 - 2015-03-07 07:13 - 09279304 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\pdf.dll
2015-03-11 12:37 - 2015-03-07 07:13 - 14974280 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Salem\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2939445438-3290321197-1501721921-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Salem\AppData\Local\Microsoft\Windows\Themes\Reflectio\DesktopBackground\reflections1.jpg
DNS Servers: 192.168.179.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-2939445438-3290321197-1501721921-500 - Administrator - Disabled)
Gast (S-1-5-21-2939445438-3290321197-1501721921-501 - Limited - Disabled)
Salem (S-1-5-21-2939445438-3290321197-1501721921-1001 - Administrator - Enabled) => C:\Users\Salem
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/11/2015 00:37:22 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 66b0
Startzeit: 01d05bee50e9cb34
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: fa59207a-c7e2-11e4-beb3-342387835e16
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/11/2015 00:34:52 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm wwahost.exe, Version 6.3.9600.17031 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 4ae4
Startzeit: 01d05bee53d38b1b
Endzeit: 4294967295
Anwendungspfad: C:\WINDOWS\system32\wwahost.exe
Berichts-ID: a0ef536e-c7e2-11e4-beb3-342387835e16
Vollständiger Name des fehlerhaften Pakets: BD9B8345.VAIOMessageCenter_2.1.1.2210_x64__05bme2bjq6sag
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SonyCorporation.VAIOMessageCenter
Error: (03/11/2015 01:26:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: bcmwltry.exe, Version: 6.30.59.125, Zeitstempel: 0x5114b33d
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007ff9455f8062
ID des fehlerhaften Prozesses: 0x1b208
Startzeit der fehlerhaften Anwendung: 0xbcmwltry.exe0
Pfad der fehlerhaften Anwendung: bcmwltry.exe1
Pfad des fehlerhaften Moduls: bcmwltry.exe2
Berichtskennung: bcmwltry.exe3
Vollständiger Name des fehlerhaften Pakets: bcmwltry.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: bcmwltry.exe5
Error: (03/11/2015 01:24:50 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1de68
Startzeit: 01d05b90b6fbb57e
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 04577d88-c785-11e4-beb3-342387835e16
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 11:30:58 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 12bd0
Startzeit: 01d05b80775d7e4f
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 1dbdb26f-c775-11e4-beb3-342387835e16
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 11:28:53 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (03/10/2015 03:41:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 19830
Startzeit: 01d05b3f39a7936f
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 86b6f8ec-c733-11e4-beb3-342387835e16
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 02:38:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1d530
Startzeit: 01d05b36d7dc51d1
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: cb7a33fb-c72a-11e4-beb3-342387835e16
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 01:41:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2ee0
Startzeit: 01d05b2e761d38eb
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: c321662b-c722-11e4-beb3-342387835e16
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 01:16:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.17416 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 10cac
Startzeit: 01d05b1215fcf1b0
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
Berichts-ID: 3a260c50-c71f-11e4-beb3-342387835e16
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
System errors:
=============
Error: (03/10/2015 11:59:05 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252.
Error: (03/10/2015 11:59:05 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252.
Error: (03/10/2015 11:59:05 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252.
Error: (03/10/2015 11:59:05 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252.
Error: (03/09/2015 02:59:33 PM) (Source: DCOM) (EventID: 10010) (User: ANNA)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}
Error: (03/09/2015 02:59:33 PM) (Source: DCOM) (EventID: 10010) (User: ANNA)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}
Error: (03/09/2015 02:59:31 PM) (Source: DCOM) (EventID: 10010) (User: ANNA)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}
Error: (03/09/2015 02:59:29 PM) (Source: DCOM) (EventID: 10010) (User: ANNA)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}
Error: (03/09/2015 02:59:12 PM) (Source: DCOM) (EventID: 10010) (User: ANNA)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}
Error: (03/09/2015 02:59:08 PM) (Source: DCOM) (EventID: 10010) (User: ANNA)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}
Microsoft Office Sessions:
=========================
Error: (03/11/2015 00:37:22 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2068966b001d05bee50e9cb344294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exefa59207a-c7e2-11e4-beb3-342387835e16microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (03/11/2015 00:34:52 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.170314ae401d05bee53d38b1b4294967295C:\WINDOWS\system32\wwahost.exea0ef536e-c7e2-11e4-beb3-342387835e16BD9B8345.VAIOMessageCenter_2.1.1.2210_x64__05bme2bjq6sagSonyCorporation.VAIOMessageCenter
Error: (03/11/2015 01:26:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: bcmwltry.exe6.30.59.1255114b33dunknown0.0.0.000000000c000000500007ff9455f80621b20801d05b91e7857ac6C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exeunknown324840ad-c785-11e4-beb3-342387835e16
Error: (03/11/2015 01:24:50 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.206891de6801d05b90b6fbb57e4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe04577d88-c785-11e4-beb3-342387835e16microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 11:30:58 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2068912bd001d05b80775d7e4f4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe1dbdb26f-c775-11e4-beb3-342387835e16microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 11:28:53 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (03/10/2015 03:41:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.206891983001d05b3f39a7936f4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe86b6f8ec-c733-11e4-beb3-342387835e16microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 02:38:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.206891d53001d05b36d7dc51d14294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.execb7a33fb-c72a-11e4-beb3-342387835e16microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 01:41:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.206892ee001d05b2e761d38eb4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exec321662b-c722-11e4-beb3-342387835e16microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2015 01:16:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe11.0.9600.1741610cac01d05b1215fcf1b04294967295C:\Program Files\Internet Explorer\iexplore.exe3a260c50-c71f-11e4-beb3-342387835e16
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU 2117U @ 1.80GHz
Percentage of memory in use: 55%
Total physical RAM: 3974.8 MB
Available physical RAM: 1772.26 MB
Total Pagefile: 8070.8 MB
Available Pagefile: 5568.07 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:438.39 GB) (Free:390.43 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 3476912F)
Partition: GPT Partition Type.
==================== End Of Log ============================
GMER: Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-03-11 13:16:18
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\0000002a TOSHIBA_MQ01ABF050 rev.AM0G3H 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\Salem\AppData\Local\Temp\pxldrpow.sys
---- User code sections - GMER 2.1 ----
.text C:\Windows\system32\mfevtps.exe[1820] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 506 00007ff9b01a169a 4 bytes [1A, B0, F9, 7F]
.text C:\Windows\system32\mfevtps.exe[1820] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 514 00007ff9b01a16a2 4 bytes [1A, B0, F9, 7F]
.text C:\Windows\system32\mfevtps.exe[1820] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 118 00007ff9b01a181a 4 bytes [1A, B0, F9, 7F]
.text C:\Windows\system32\mfevtps.exe[1820] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 142 00007ff9b01a1832 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[1840] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ff9b01a169a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[1840] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ff9b01a16a2 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[1840] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ff9b01a181a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[1840] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ff9b01a1832 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Sony\VAIO Care\VCPerfService.exe[2840] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ff9b01a169a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Sony\VAIO Care\VCPerfService.exe[2840] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ff9b01a16a2 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Sony\VAIO Care\VCPerfService.exe[2840] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ff9b01a181a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Sony\VAIO Care\VCPerfService.exe[2840] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ff9b01a1832 4 bytes [1A, B0, F9, 7F]
.text C:\WINDOWS\Explorer.EXE[75436] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ff9b01a169a 4 bytes [1A, B0, F9, 7F]
.text C:\WINDOWS\Explorer.EXE[75436] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ff9b01a16a2 4 bytes [1A, B0, F9, 7F]
.text C:\WINDOWS\Explorer.EXE[75436] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ff9b01a181a 4 bytes [1A, B0, F9, 7F]
.text C:\WINDOWS\Explorer.EXE[75436] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ff9b01a1832 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[102392] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194 00007ff9a2671f6a 4 bytes [67, A2, F9, 7F]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[102392] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218 00007ff9a2671f82 4 bytes [67, A2, F9, 7F]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[102392] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ff9b01a169a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[102392] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ff9b01a16a2 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[102392] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ff9b01a181a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[102392] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ff9b01a1832 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[146172] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ff9b01a169a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[146172] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ff9b01a16a2 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[146172] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ff9b01a181a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[146172] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ff9b01a1832 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[96000] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194 00007ff9a2671f6a 4 bytes [67, A2, F9, 7F]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[96000] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218 00007ff9a2671f82 4 bytes [67, A2, F9, 7F]
.text C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[79708] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ff9b01a169a 4 bytes [1A, B0, F9, 7F]
.text C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[79708] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ff9b01a16a2 4 bytes [1A, B0, F9, 7F]
.text C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[79708] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ff9b01a181a 4 bytes [1A, B0, F9, 7F]
.text C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[79708] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ff9b01a1832 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe[34812] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ff9b01a169a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe[34812] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ff9b01a16a2 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe[34812] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ff9b01a181a 4 bytes [1A, B0, F9, 7F]
.text C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe[34812] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ff9b01a1832 4 bytes [1A, B0, F9, 7F]
---- Threads - GMER 2.1 ----
Thread C:\WINDOWS\system32\csrss.exe [140716:103604] fffff960008f3b90
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Malwarebyte: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 11.03.2015
Scan Time: 13:21:51
Logfile: Malwarebyte.txt
Administrator: Yes
Version: 2.00.4.1028
Malware Database: v2015.03.11.04
Rootkit Database: v2015.02.25.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 8.1
CPU: x64
File System: NTFS
User: Salem
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 365024
Time Elapsed: 29 min, 9 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 19
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\IEXPLORE.EXE, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\IEXPLORE.EXE, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean Pro_is1, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean-Pro_is1, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\Advanced System Protector, , [61df59ebcfbb78bedc45d9ef41c215eb],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\RegClean Pro, , [81bfb094deacda5c7699a92927dc916f],
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, , [3010ea5acac065d1b6ad745e6d96f50b],
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PriceMeter, , [f24efe46c5c5b185531c8268649ff808],
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PriceMeterLiveUpdate, , [82be2a1a37533303610d4470739024dc],
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PriceMeterUpdater, , [ea568abaed9d8da96b04bff58f741ee2],
PUP.Optional.Speedial.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\speedial, , [55eb6bd98bff6dc9a551bc246b98bf41],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [182856eeb3d7a096c15322d5758e07f9],
PUP.Optional.Speedial.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\Speedial, , [360a063ef595c571658eb22ec63dc53b],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [1d23f94b92f88ea8658c9b7160a5837d],
PUP.Optional.AdvancedSystemProtector.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\Advanced System Protector, , [f44cc381cfbb1f17130fa0281ae908f8],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\RegClean Pro, , [83bdba8a06845adc1b711bf76a9b0af6],
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, , [43fd370db9d1e6503230498926ddac54],
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PriceMeter Express, , [ed53261e5238e05628b7f1a0a06352ae],
Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2939445438-3290321197-1501721921-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0R2Y1I1P1N0J1U1C, , [1d23f94b92f88ea8658c9b7160a5837d]
Registry Data: 0
(No malicious items detected)
Folders: 24
PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro, , [56eaf94b088249ed5d1fb02ff013d729],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector, , [053b0a3a96f48caa3e3fa738dc270df3],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice\de, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.SystemSpeedup, C:\Users\Salem\AppData\Roaming\Systweak\ssd, , [a49c98acd1b950e62c899be7df24d62a],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\2.1.1000.13665, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\2.1.1000.13665, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\Backup, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\Logs, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\ASP, , [1f2182c24644e551baddabdcb94a0000],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced System Protector, , [ad93e85c9cee50e6bfe6bcd0699af20e],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.13644, , [ad93e85c9cee50e6bfe6bcd0699af20e],
PUP.Optional.PriceMeter.A, C:\Users\Salem\AppData\Local\PriceMeter Express, , [ed53261e5238e05628b7f1a0a06352ae],
Files: 213
PUP.Optional.AdvancedSystemProtector, C:\Windows\System32\sasnative64.exe, , [e9570f356f1bff379ecf735509f89b65],
PUP.Optional.RegCleanerPro, C:\Users\Public\Desktop\RegClean Pro.lnk, , [c37d95af4347c76f74b807c4c241c23e],
PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\RegClean Pro, , [152be75dcac0999de94583484fb422de],
PUP.Optional.AdvancedSystemProtector, C:\Users\Public\Desktop\Advanced System Protector.lnk, , [ba86eb590387ad89ec65933f8182db25],
PUP.Optional.RegCleanPro.A, C:\Windows\System32\Tasks\RegClean Pro_DEFAULT, , [7ac6d56f8bffa78fc42a9b3913f0639d],
PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\Register RegClean Pro.lnk, , [56eaf94b088249ed5d1fb02ff013d729],
PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\RegClean Pro entfernen.lnk, , [56eaf94b088249ed5d1fb02ff013d729],
PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\RegClean Pro.lnk, , [56eaf94b088249ed5d1fb02ff013d729],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector\Register Advanced System Protector.lnk, , [053b0a3a96f48caa3e3fa738dc270df3],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector\Advanced System Protector entfernen.lnk, , [053b0a3a96f48caa3e3fa738dc270df3],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector\Advanced System Protector Trouble Shooter.lnk, , [053b0a3a96f48caa3e3fa738dc270df3],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector\Advanced System Protector.lnk, , [053b0a3a96f48caa3e3fa738dc270df3],
PUP.Optional.RegCleanerPro.J, C:\Windows\Tasks\RegClean Pro_UPDATES.job, , [ef51b88c8703f73fe57341b88e75a957],
PUP.Optional.RegCleanPro.A, C:\Windows\Tasks\RegClean Pro_DEFAULT.job, , [0b350e364a406dc9c9cb17f40bfa1ce4],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe.config, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\norwegian_asp_NO.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\System.Core.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AppResource.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\asp.ico, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AspManager.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\aspsys.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\ASPUninstall.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\categories.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Chinese_asp_ZH-CN.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Chinese_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Communication.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\danish_asp_DA.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Danish_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\dutch_asp_NL.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Dutch_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\eng_asp_en.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\eng_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\filetypehelper.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Finnish_asp_FI.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Finnish_uninst_fi.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\french_asp_FR.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\French_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\german_asp_DE.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\German_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Norwegian_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\polish_uninst_pl.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\portugese_uninst_pt.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\portuguese_asp_PT-BR.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Portuguese_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\russian_asp_ru.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\russian_uninst_ru.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\scandll.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\spanish_asp_ES.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\spanish_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\SSDPTstub.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\swedish_asp_SV.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\swedish_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\greek_uninst_el.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Interop.IWshRuntimeLibrary.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\italian_asp_IT.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Italian_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\japanese_asp_JA.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Japanese_uninst.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\korean_uninst_ko.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\loading_withWhiteBG.avi, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Microsoft.Win32.TaskScheduler.DLL, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\System.Data.SQLite.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\TPS.ico, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\traditionalcn_uninst_zh-tw.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Turkish_uninst_tr.ini, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.dat, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.msg, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unrar.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Compression.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Compression.Formats.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.FileSystem.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Zip.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\clamscan.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\libclamav.dll, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\readme.txt, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter\asp-fixer.com, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter\asp-fixer.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter\asp-fixer.pif, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter\asp-fixer.scr, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter\ASP-Troubleshooter.chm, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter\firefox.com, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter\iexplore.exe, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Troubleshooter\iexplore.lnk, , [023e2f159ceedf57d6c8b777b84dfe02],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Chinese_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\isxdl.dll, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\RegCleanPro.dll, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Chinese_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\CleanSchedule.exe, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Danish_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Danish_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Dutch_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Dutch_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Italian_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Italian_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Japanese_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Japanese_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\korean_rcp_ko.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\korean_uninst_ko.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\LicMgr.dll, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Norwegian_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Norwegian_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\polish_rcp_pl.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\polish_uninst_pl.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\portugese_rcp_pt.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\portugese_uninst_pt.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Portuguese_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Portuguese_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\RCPUninstall.exe, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\eng_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\eng_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\FileList.rcp, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Finnish_rcp_fi.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Finnish_uninst_fi.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\French_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\French_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\German_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\German_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\greek_rcp_el.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\greek_uninst_el.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\install_left_image.bmp, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\RegCleanPro.exe, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\RegList.rcp, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\russian_rcp_ru.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\russian_uninst_ru.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Spanish_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\spanish_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Swedish_rcp.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\swedish_uninst.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\systweakasp.exe, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\TPS.ico, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\TraditionalCn_rcp_zh-tw.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\traditionalcn_uninst_zh-tw.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\turkish_rcp_tr.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Turkish_uninst_tr.ini, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\unins000.dat, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\unins000.exe, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\unins000.msg, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\xmllite.dll, , [5de3123211790432752b72bc7e879d63],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\backup1.bin, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\backup3.bin, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\backup4.bin, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\backup6.bin, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\German_rcp.dat, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_03-05-2015.log, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_03-07-2015.log, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_03-08-2015.log, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_03-09-2015.log, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_03-10-2015.log, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_03-11-2015.log, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\productSetup_Setup_12_15_2014.exe, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\productSetup_Setup_2_12_2015.exe, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\rcpupdate.ini, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rmx, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rxb, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.RegCleanerPro.A, C:\Users\Salem\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice\de\voice.wav, , [c57b02420b7fdd595e10c9a208fb8a76],
PUP.Optional.SystemSpeedup, C:\Users\Salem\AppData\Roaming\Systweak\ssd\SSDPTstub.exe, , [a49c98acd1b950e62c899be7df24d62a],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\AddonSafelist, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\completedatabase.db, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Cookies.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\DigSign.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FilePathFIX.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FilePaths.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FileSignature.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Folders.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Md5.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Registry.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\SetupSign.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\StrSetupSign.bin, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\100oupdate.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1835completedatabase.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1891mupdate.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1892update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1893update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1894update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1895update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1896update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1897update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1898update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1899update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1900update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1901update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1902update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1903update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1904update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1905update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1906update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1907update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1908update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1909update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1910update.zip, , [013fdd67a7e3af87badc7f084fb4659b],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\ASPStartupManagerErrorLog.txt, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\QDetail.db, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\Settings.db, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\Update.ini, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\2.1.1000.13665\ASPLog.txt, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\Logs\log_27-07-14_08-27-18.xml, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced-System-Protector\Logs\SMLog.xml, , [e55ba2a2a0ead4623462d5b2778cd828],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\ASP\AddonSafelist, , [1f2182c24644e551baddabdcb94a0000],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\ASP\log.xslt, , [1f2182c24644e551baddabdcb94a0000],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced System Protector\Settings.db, , [ad93e85c9cee50e6bfe6bcd0699af20e],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\Salem\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.13644\ASPLog.txt, , [ad93e85c9cee50e6bfe6bcd0699af20e],
PUP.Optional.PriceMeter.A, C:\Users\Salem\AppData\Local\PriceMeter Express\icon.ico, , [ed53261e5238e05628b7f1a0a06352ae],
PUP.Optional.PriceMeter.A, C:\Users\Salem\AppData\Local\PriceMeter Express\installer_icon.ico, , [ed53261e5238e05628b7f1a0a06352ae],
PUP.Optional.PriceMeter.A, C:\Users\Salem\AppData\Local\PriceMeter Express\PriceMeterExpress.crx, , [ed53261e5238e05628b7f1a0a06352ae],
PUP.Optional.PriceMeter.A, C:\Users\Salem\AppData\Local\PriceMeter Express\PriceMeterExpress.xpi, , [ed53261e5238e05628b7f1a0a06352ae],
PUP.Optional.PriceMeter.A, C:\Users\Salem\AppData\Local\PriceMeter Express\PriceMeterExpressIE.dll, , [ed53261e5238e05628b7f1a0a06352ae],
PUP.Optional.PriceMeter.A, C:\Users\Salem\AppData\Local\PriceMeter Express\PriceMeterExpressIEIE64.dll, , [ed53261e5238e05628b7f1a0a06352ae],
PUP.Optional.PriceMeter.A, C:\Users\Salem\AppData\Local\PriceMeter Express\uninst.exe, , [ed53261e5238e05628b7f1a0a06352ae],
Physical Sectors: 0
(No malicious items detected)
(end)
|
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
AdwCleaner auf deinen Desktop.
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
dann auf 
und dann auf 
. 
