Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Fehlermeldung in C:\Windows\system32\dbghelp.dll und ePowerTray.exe (https://www.trojaner-board.de/110624-fehlermeldung-c-windows-system32-dbghelp-dll-epowertray-exe.html)

stefan100 29.02.2012 11:35

Fehlermeldung in C:\Windows\system32\dbghelp.dll und ePowerTray.exe
 
THEMA: "fehlermeldung C:\Windows\system32\dbghelp.dll und ePowerTray.exe"

hallo!

beim hochfahren meines laptops erscheint ein fenster mit der meldung:

"C:\Windows\system32\dbghelp.dll ist entweder nicht für die Ausführung unter Windows vorgesehen oder enthält einen Fehler. Installieren Sie das Programm mit den Originalinstallationsmedien erneut, oder wenden Sie sich an den Systemadministratoroder Softwarelieferanten, um Unterstützung zu erhalten." oben links am fenster steht noch "ePowerTray.exe - Ungültiges Bild".

zudem funktioniert mein AVG free nicht mehr. exe-datei noch da aber evtl. kaputt?!

grüße

stefan

cosinus 29.02.2012 15:10

So ist nun in einem separaten Thema.

Bitte nun routinemäßig einen Vollscan mit malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss! Außerdem müssen alle Funde entfernt werden.

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset





Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

stefan100 10.03.2012 20:19

hallo arne!

hier die ergebnisse der beiden scans.

Code:

Malwarebytes Anti-Malware (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.03.10.03

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
dickbauch :: DICKBAUCH-PC [Administrator]

Schutz: Aktiviert

10.03.2012 17:15:59
mbam-log-2012-03-10 (17-15-59).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 339677
Laufzeit: 56 Minute(n), 36 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Code:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=7b9158d71b939745b2bbce4c5a5a2cd6
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-03-10 06:16:53
# local_time=2012-03-10 07:16:53 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=1032 16777213 100 88 5267783 74568182 0 0
# compatibility_mode=5893 16776574 100 94 31447875 83030288 0 0
# compatibility_mode=8192 67108863 100 0 3946 3946 0 0
# scanned=169133
# found=13
# cleaned=0
# scan_time=3143
C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe        probably a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.10        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.11        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.12        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.5        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.6        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.7        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.8        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.9        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Windows\Installer\58946.msi        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
${Memory}        a variant of Win32/Adware.Toolbar.Dealio application        00000000000000000000000000000000        I
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=7b9158d71b939745b2bbce4c5a5a2cd6
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-03-10 07:12:19
# local_time=2012-03-10 08:12:19 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=1032 16777213 100 88 5271189 74571588 0 0
# compatibility_mode=5893 16776574 100 94 31451281 83033694 0 0
# compatibility_mode=8192 67108863 100 0 7352 7352 0 0
# scanned=169131
# found=13
# cleaned=0
# scan_time=3063
C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe        probably a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.10        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.11        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.12        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.5        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.6        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.7        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.8        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.9        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
C:\Windows\Installer\58946.msi        a variant of Win32/Adware.Toolbar.Dealio application (unable to clean)        00000000000000000000000000000000        I
${Memory}        a variant of Win32/Adware.Toolbar.Dealio application        00000000000000000000000000000000        I

viele grüße
stefan

cosinus 12.03.2012 14:19

CustomScan mit OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT


stefan100 17.05.2012 18:10

hallo arne!

endlich kam ich jetzt mal dazu. hier das ergebnis von OTL. würde mich freuen wenn du mir trotz der langen pause antworten würdest.

VG
stefan

OTL Logfile:
Code:

OTL logfile created on: 17.05.2012 18:43:57 - Run 1
OTL by OldTimer - Version 3.2.43.0    Folder = C:\Users\dickbauch\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,74 Gb Total Physical Memory | 1,25 Gb Available Physical Memory | 45,57% Memory free
5,48 Gb Paging File | 3,80 Gb Available in Paging File | 69,43% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 284,99 Gb Total Space | 243,49 Gb Free Space | 85,44% Space Free | Partition Type: NTFS
 
Computer Name: DICKBAUCH-PC | User Name: dickbauch | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.05.17 18:39:55 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\dickbauch\Desktop\OTL.exe
PRC - [2012.04.23 20:48:00 | 000,983,904 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
PRC - [2012.04.23 20:38:30 | 000,785,304 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
PRC - [2012.01.13 15:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.01.13 15:53:18 | 000,460,872 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011.02.08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe
PRC - [2010.08.10 11:06:16 | 000,975,952 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2010.08.10 11:06:16 | 000,321,104 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
PRC - [2010.08.10 11:06:16 | 000,305,744 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
PRC - [2010.07.06 15:36:18 | 000,600,688 | ---- | M] (Chicony) -- C:\Program Files (x86)\Video Web Camera\traybar.exe
PRC - [2010.06.29 00:23:24 | 000,263,936 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
PRC - [2010.06.29 00:23:06 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
PRC - [2010.06.09 12:54:04 | 000,206,208 | ---- | M] () -- C:\Windows\PLFSetI.exe
PRC - [2010.04.13 18:57:58 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010.04.13 18:57:56 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
PRC - [2010.03.18 06:57:02 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010.03.18 06:56:56 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010.01.29 01:27:36 | 000,243,232 | ---- | M] (Acer Group) -- C:\Programme\Packard Bell\Packard Bell Updater\UpdaterService.exe
PRC - [2010.01.08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
PRC - [2009.10.09 05:45:56 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
PRC - [2009.01.08 16:36:42 | 002,521,464 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.03.20 22:43:04 | 011,824,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\2df79ab909c782d3796e4107d040327d\System.Web.ni.dll
MOD - [2012.03.20 22:42:51 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0a894f77b9aa64acbd3ce791916357d8\System.Runtime.Remoting.ni.dll
MOD - [2012.03.20 22:42:14 | 012,431,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ff30db6905f8ec024fc808ed8779c0f3\System.Windows.Forms.ni.dll
MOD - [2012.03.20 22:42:07 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\a09ee392fa90849f2e9313a1ebbe0279\System.Drawing.ni.dll
MOD - [2012.03.20 22:41:53 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\585ac5899ab444221c8b41df13b194bc\WindowsBase.ni.dll
MOD - [2012.03.20 22:41:45 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49f4cb0755ccc34cd35ff96dc2ef9e3\System.Xml.ni.dll
MOD - [2012.03.20 22:41:40 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\15742b3597258ce67cbe219005c197e5\System.Configuration.ni.dll
MOD - [2012.03.20 22:41:34 | 007,952,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\1f14b3e1ee0847f8662f513e67f92547\System.ni.dll
MOD - [2011.11.06 18:40:19 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll
MOD - [2010.10.16 20:38:45 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.10.16 20:38:41 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2010.06.29 00:20:54 | 000,465,576 | ---- | M] () -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\sqlite3.dll
MOD - [2010.06.09 12:54:04 | 000,206,208 | ---- | M] () -- C:\Windows\PLFSetI.exe
MOD - [2009.05.20 08:02:04 | 000,072,200 | ---- | M] () -- C:\Program Files (x86)\Launch Manager\CdDirIo.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2012.04.23 20:38:30 | 000,785,304 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2012.01.13 15:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011.08.18 01:33:06 | 007,390,560 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2011.02.08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2010.10.16 11:11:01 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.08.10 11:06:16 | 000,321,104 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
SRV - [2010.06.29 00:23:06 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2010.06.11 14:27:26 | 000,868,896 | ---- | M] (Acer Incorporated) [Auto | Stopped] -- C:\Programme\Packard Bell\Packard Bell Power Management\ePowerSvc.exe -- (ePowerSvc)
SRV - [2010.06.02 00:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)
SRV - [2010.04.13 18:57:58 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2010.04.04 01:01:24 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.03.18 06:57:02 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2010.03.18 06:56:56 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010.01.29 01:27:36 | 000,243,232 | ---- | M] (Acer Group) [Auto | Running] -- C:\Programme\Packard Bell\Packard Bell Updater\UpdaterService.exe -- (Updater Service)
SRV - [2010.01.15 23:08:38 | 000,935,208 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2010.01.08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe -- (GREGService)
SRV - [2009.10.09 05:45:56 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor8.0)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.12.10 16:24:08 | 000,023,152 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2011.05.27 19:05:26 | 000,118,864 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV:64bit: - [2011.04.05 00:59:54 | 000,377,936 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
DRV:64bit: - [2011.03.16 16:03:18 | 000,037,456 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:64bit: - [2011.03.11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.03.01 14:25:18 | 000,041,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:64bit: - [2011.02.22 08:12:46 | 000,026,704 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AVGIDSEH.sys -- (AVGIDSEH)
DRV:64bit: - [2011.02.10 07:53:34 | 000,029,264 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV:64bit: - [2011.01.07 06:41:44 | 000,304,720 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
DRV:64bit: - [2010.08.25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010.07.21 17:58:50 | 000,045,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:64bit: - [2010.06.21 11:45:56 | 000,287,232 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:64bit: - [2010.06.17 11:18:28 | 000,246,376 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2010.05.15 14:48:28 | 000,384,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
DRV:64bit: - [2010.05.11 12:11:38 | 002,229,608 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010.04.13 18:44:22 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.04.13 12:15:04 | 000,135,560 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2010.02.27 01:32:14 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2009.09.17 07:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.06 01:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:64bit: - [2009.05.06 01:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:64bit: - [2008.06.16 03:00:00 | 000,055,024 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://packardbell.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://packardbell.msn.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\..\SearchScopes,DefaultScope = {01266FB1-2F84-4793-BA55-FDB945D7C236}
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\..\SearchScopes\{01266FB1-2F84-4793-BA55-FDB945D7C236}: "URL" = hxxp://search.avg.com/?d=4df49df9&i=23&tp=chrome&q={searchTerms}&lng={language}&nt=1
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\..\SearchScopes\{24DF52BE-9CC6-414B-B2FE-3785A512EE8B}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316&ilc=12"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:5.0
FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1410
FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=827316&p="
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG10\Firefox4\ [2011.09.28 22:03:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.02.20 13:36:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.02.21 18:04:25 | 000,000,000 | ---D | M]
 
[2011.02.20 13:37:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dickbauch\AppData\Roaming\mozilla\Extensions
[2012.05.17 17:55:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dickbauch\AppData\Roaming\mozilla\Firefox\Profiles\r4tuail3.default\extensions
[2012.01.01 18:01:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.09.28 22:03:05 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES (X86)\AVG\AVG10\FIREFOX4
[2012.05.17 17:55:03 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\WTXPCOM
[2010.12.03 20:14:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.12.03 20:14:08 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.12.03 20:14:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.12.03 20:14:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.12.03 20:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - Extension: AVG Safe Search = C:\Users\dickbauch\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\10.0.0.1409_0\
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [Acer ePower Management] C:\Programme\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [ETDWare] C:\Programme\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG10\avgtray.exe ()
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe (NewTech Infosystems, Inc.)
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files (x86)\Video Web Camera\traybar.exe (Chicony)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-603748550-3600823005-564666069-1001..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11f_Plugin.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\OFFICE11\EXCEL.EXE/3000 File not found
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{53875C12-C16D-4F73-9E73-CA6B0CB2FEDD}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AA80D2BC-0D3E-40DD-87AB-7F9C62C57F22}: DhcpNameServer = 168.95.1.1
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgchsva.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgrsa.exe /sync /restart)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
 
 
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.05.17 18:39:52 | 000,595,456 | ---- | C] (OldTimer Tools) -- C:\Users\dickbauch\Desktop\OTL.exe
[2012.05.17 17:55:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
[2012.05.17 17:55:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\pdfforge Toolbar
[2012.05.17 17:55:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater
[2012.05.17 17:54:56 | 000,000,000 | -HSD | C] -- C:\Config.Msi
 
========== Files - Modified Within 30 Days ==========
 
[2012.05.17 18:39:55 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\dickbauch\Desktop\OTL.exe
[2012.05.17 18:00:57 | 001,520,734 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.05.17 18:00:57 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.05.17 18:00:57 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.05.17 18:00:57 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.05.17 18:00:57 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.05.17 17:58:19 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.05.17 17:58:19 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.05.17 17:57:33 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.05.17 17:55:01 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.05.17 17:48:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.05.17 17:48:08 | 2207,285,248 | -HS- | M] () -- C:\hiberfil.sys
 
========== Files Created - No Company Name ==========
 
[2011.02.21 17:56:01 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.02.20 13:36:51 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010.10.16 11:00:29 | 000,206,208 | ---- | C] () -- C:\Windows\PLFSetI.exe
[2010.10.16 11:00:29 | 000,000,302 | ---- | C] () -- C:\Windows\PidList_C.ini
[2010.09.13 10:44:17 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2010.09.13 10:44:17 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll
[2010.09.13 10:44:17 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll
[2010.09.13 10:44:17 | 000,104,796 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2010.09.13 10:44:16 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin
 
========== LOP Check ==========
 
[2011.03.13 19:36:23 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\AVG10
[2012.01.17 10:23:15 | 000,032,630 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2011.03.10 23:49:07 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\Adobe
[2011.03.13 19:36:23 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\AVG10
[2011.02.17 22:08:58 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\Identities
[2011.02.17 22:09:29 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\Intel Corporation
[2011.02.17 22:09:14 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\Macromedia
[2012.03.10 18:13:17 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\Malwarebytes
[2009.07.14 09:44:38 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\Media Center Programs
[2011.10.03 14:13:29 | 000,000,000 | --SD | M] -- C:\Users\dickbauch\AppData\Roaming\Microsoft
[2011.02.20 13:37:07 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\Mozilla
[2011.07.24 15:56:41 | 000,000,000 | ---D | M] -- C:\Users\dickbauch\AppData\Roaming\WinRAR
 
< %APPDATA%\*.exe /s >
 
< %SYSTEMDRIVE%\*.exe >
 
< MD5 for: AGP440.SYS  >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: IASTOR.SYS  >
[2010.04.13 03:44:22 | 000,540,696 | ---- | M] (Intel Corporation) MD5=1384872112E8E7FD5786ECEB8BDDF4C9 -- C:\OEM\Preload\Autorun\DRV\Intel AHCI\f6flpy-x64\iaStor.sys
[2010.04.13 18:44:22 | 000,540,696 | ---- | M] (Intel Corporation) MD5=1384872112E8E7FD5786ECEB8BDDF4C9 -- C:\Windows\SysNative\drivers\iaStor.sys
[2010.04.13 18:44:22 | 000,540,696 | ---- | M] (Intel Corporation) MD5=1384872112E8E7FD5786ECEB8BDDF4C9 -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_d085c8f0cb5c2856\iaStor.sys
[2010.04.13 03:35:20 | 000,435,736 | ---- | M] (Intel Corporation) MD5=E11ED9B1EA60E747655E1090C7509D08 -- C:\OEM\Preload\Autorun\DRV\Intel AHCI\f6flpy-x86\iaStor.sys
 
< MD5 for: IASTORV.SYS  >
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0033117673c16921\iaStorV.sys
[2011.03.11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 08:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\SysNative\netlogon.dll
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_38e464dbe521cc7f\nvstor.sys
[2011.03.11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 08:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\SysNative\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.20 14:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009.07.14 03:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\SysNative\user32.dll
[2009.07.14 03:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\SysWOW64\user32.dll
[2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
[2010.11.20 15:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2012.01.13 15:53:20 | 000,182,856 | ---- | M] () MD5=63EEC8A8B221AB79045E776E5F592868 -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2010.07.17 21:26:04 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2010.07.17 21:26:04 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2010.07.17 21:26:04 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >

< End of report >

--- --- ---

cosinus 17.05.2012 18:24

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)


Code:

:OTL
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\..\SearchScopes,DefaultScope = {01266FB1-2F84-4793-BA55-FDB945D7C236}
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\..\SearchScopes\{01266FB1-2F84-4793-BA55-FDB945D7C236}: "URL" = http://search.avg.com/?d=4df49df9&i=23&tp=chrome&q={searchTerms}&lng={language}&nt=1
IE - HKU\S-1-5-21-603748550-3600823005-564666069-1001\..\SearchScopes\{24DF52BE-9CC6-414B-B2FE-3785A512EE8B}: "URL" = http://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316&ilc=12"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "http://www.google.de/"
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:5.0
FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1410
FF - prefs.js..keyword.URL: "http://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=827316&p="
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O32 - HKLM CDRom: AutoRun - 1
:Files
C:\Program Files (x86)\Common Files\Spigot
C:\Program Files (x86)\Application Updater
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

stefan100 17.05.2012 20:17

hi arne!

hier das ergebnis ...

Code:

All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-603748550-3600823005-564666069-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{B922D405-6D13-4A2B-AE89-08A030DA4402} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ deleted successfully.
C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll moved successfully.
HKEY_USERS\S-1-5-21-603748550-3600823005-564666069-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-603748550-3600823005-564666069-1001\Software\Microsoft\Internet Explorer\SearchScopes\{01266FB1-2F84-4793-BA55-FDB945D7C236}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01266FB1-2F84-4793-BA55-FDB945D7C236}\ not found.
Registry key HKEY_USERS\S-1-5-21-603748550-3600823005-564666069-1001\Software\Microsoft\Internet Explorer\SearchScopes\{24DF52BE-9CC6-414B-B2FE-3785A512EE8B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{24DF52BE-9CC6-414B-B2FE-3785A512EE8B}\ not found.
Prefs.js: "Yahoo" removed from browser.search.defaultenginename
Prefs.js: "chr-greentree_ff&type=827316&ilc=12" removed from browser.search.param.yahoo-fr
Prefs.js: "Yahoo" removed from browser.search.selectedEngine
Prefs.js: "hxxp://www.google.de/" removed from browser.startup.homepage
Prefs.js: wtxpcom@mybrowserbar.com:5.0 removed from extensions.enabledItems
Prefs.js: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1410 removed from extensions.enabledItems
Prefs.js: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=827316&p=" removed from keyword.URL
Prefs.js: 0 removed from network.proxy.type
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found.
File C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{B922D405-6D13-4A2B-AE89-08A030DA4402} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found.
File C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings deleted successfully.
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe moved successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\PromptOnSecureDesktop deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
========== FILES ==========
C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components folder moved successfully.
C:\Program Files (x86)\Common Files\Spigot\wtxpcom folder moved successfully.
C:\Program Files (x86)\Common Files\Spigot\Search Settings\Res folder moved successfully.
C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang folder moved successfully.
C:\Program Files (x86)\Common Files\Spigot\Search Settings folder moved successfully.
C:\Program Files (x86)\Common Files\Spigot folder moved successfully.
C:\Program Files (x86)\Application Updater folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: dickbauch
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 65670 bytes
->FireFox cache emptied: 51013406 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 1666 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 66449453 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 112,00 mb
 
 
[EMPTYFLASH]
 
User: Administrator
 
User: All Users
 
User: Default
 
User: Default User
 
User: dickbauch
->Flash cache emptied: 0 bytes
 
User: Public
 
Total Flash Files Cleaned = 0,00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.43.0 log created on 05172012_210746

Files\Folders moved on Reboot...
C:\Users\dickbauch\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.

Registry entries deleted on Reboot...


cosinus 17.05.2012 22:25

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

stefan100 20.05.2012 15:28

hi arne!

ein objekt wurde gefunden. habs wie du gesagt hast mit SKIP behandelt.

Code:

16:23:41.0025 4592        TDSS rootkit removing tool 2.7.35.0 May 16 2012 07:37:57
16:23:41.0166 4592        ============================================================
16:23:41.0166 4592        Current date / time: 2012/05/20 16:23:41.0166
16:23:41.0166 4592        SystemInfo:
16:23:41.0166 4592       
16:23:41.0166 4592        OS Version: 6.1.7600 ServicePack: 0.0
16:23:41.0166 4592        Product type: Workstation
16:23:41.0166 4592        ComputerName: DICKBAUCH-PC
16:23:41.0166 4592        UserName: dickbauch
16:23:41.0166 4592        Windows directory: C:\Windows
16:23:41.0166 4592        System windows directory: C:\Windows
16:23:41.0166 4592        Running under WOW64
16:23:41.0167 4592        Processor architecture: Intel x64
16:23:41.0167 4592        Number of processors: 4
16:23:41.0167 4592        Page size: 0x1000
16:23:41.0167 4592        Boot type: Normal boot
16:23:41.0167 4592        ============================================================
16:23:41.0788 4592        Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:23:41.0794 4592        ============================================================
16:23:41.0794 4592        \Device\Harddisk0\DR0:
16:23:41.0795 4592        MBR partitions:
16:23:41.0795 4592        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1A00800, BlocksNum 0x32000
16:23:41.0795 4592        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1A32800, BlocksNum 0x239FB800
16:23:41.0795 4592        ============================================================
16:23:41.0832 4592        C: <-> \Device\Harddisk0\DR0\Partition1
16:23:41.0832 4592        ============================================================
16:23:41.0832 4592        Initialize success
16:23:41.0832 4592        ============================================================
16:24:50.0657 3024        ============================================================
16:24:50.0657 3024        Scan started
16:24:50.0657 3024        Mode: Manual; SigCheck; TDLFS;
16:24:50.0657 3024        ============================================================
16:24:51.0260 3024        1394ohci        (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
16:24:51.0604 3024        1394ohci - ok
16:24:51.0699 3024        ACPI            (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
16:24:51.0737 3024        ACPI - ok
16:24:51.0743 3024        AcpiPmi        (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
16:24:51.0845 3024        AcpiPmi - ok
16:24:52.0105 3024        AdobeActiveFileMonitor8.0 (34400005de52842c4d6d4ee978b4d7ce) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
16:24:52.0138 3024        AdobeActiveFileMonitor8.0 - ok
16:24:52.0268 3024        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
16:24:52.0343 3024        adp94xx - ok
16:24:52.0380 3024        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
16:24:52.0409 3024        adpahci - ok
16:24:52.0454 3024        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
16:24:52.0487 3024        adpu320 - ok
16:24:52.0554 3024        AeLookupSvc    (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
16:24:52.0712 3024        AeLookupSvc - ok
16:24:52.0807 3024        AFD            (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
16:24:52.0875 3024        AFD - ok
16:24:52.0884 3024        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
16:24:52.0908 3024        agp440 - ok
16:24:52.0918 3024        ALG            (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
16:24:52.0982 3024        ALG - ok
16:24:52.0996 3024        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
16:24:53.0016 3024        aliide - ok
16:24:53.0022 3024        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
16:24:53.0043 3024        amdide - ok
16:24:53.0052 3024        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
16:24:53.0111 3024        AmdK8 - ok
16:24:53.0121 3024        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
16:24:53.0157 3024        AmdPPM - ok
16:24:53.0197 3024        amdsata        (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
16:24:53.0220 3024        amdsata - ok
16:24:53.0238 3024        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
16:24:53.0263 3024        amdsbs - ok
16:24:53.0283 3024        amdxata        (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
16:24:53.0296 3024        amdxata - ok
16:24:53.0306 3024        AppID          (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
16:24:53.0404 3024        AppID - ok
16:24:53.0411 3024        AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
16:24:53.0515 3024        AppIDSvc - ok
16:24:53.0522 3024        Appinfo        (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll
16:24:53.0563 3024        Appinfo - ok
16:24:53.0635 3024        Application Updater - ok
16:24:53.0653 3024        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
16:24:53.0680 3024        arc - ok
16:24:53.0694 3024        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
16:24:53.0720 3024        arcsas - ok
16:24:53.0742 3024        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
16:24:53.0823 3024        AsyncMac - ok
16:24:53.0854 3024        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
16:24:53.0868 3024        atapi - ok
16:24:54.0078 3024        athr            (e642491f64e58cd5bc8fb8b347dcf65f) C:\Windows\system32\DRIVERS\athrx.sys
16:24:54.0193 3024        athr - ok
16:24:54.0412 3024        AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
16:24:54.0516 3024        AudioEndpointBuilder - ok
16:24:54.0524 3024        AudioSrv        (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
16:24:54.0571 3024        AudioSrv - ok
16:24:55.0414 3024        AVGIDSAgent    (7115fc6c14f8ef9be22eb3047a8fc6d5) C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
16:24:55.0490 3024        Suspicious file (Forged): C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe. Real md5: 7115fc6c14f8ef9be22eb3047a8fc6d5, Fake md5: 636bbe55020eadcc0724e4d1acce549e
16:24:55.0507 3024        AVGIDSAgent ( ForgedFile.Multi.Generic ) - warning
16:24:55.0507 3024        AVGIDSAgent - detected ForgedFile.Multi.Generic (1)
16:24:55.0703 3024        AVGIDSDriver    (e6671e90d38c88764412e07c9d9b3d63) C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
16:24:55.0754 3024        AVGIDSDriver - ok
16:24:55.0791 3024        AVGIDSEH        (1553b388e0f0462c25ad8f30c3c29e83) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
16:24:55.0810 3024        AVGIDSEH - ok
16:24:55.0839 3024        AVGIDSFilter    (dca426a66739e75f51a72160dfb945ad) C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
16:24:55.0857 3024        AVGIDSFilter - ok
16:24:55.0918 3024        Avgldx64        (ff7383388a7d2283dae5831abc2b0720) C:\Windows\system32\DRIVERS\avgldx64.sys
16:24:55.0956 3024        Avgldx64 - ok
16:24:56.0004 3024        Avgmfx64        (997d002827d3e3dcbbb25bf46db161ab) C:\Windows\system32\DRIVERS\avgmfx64.sys
16:24:56.0023 3024        Avgmfx64 - ok
16:24:56.0070 3024        Avgrkx64        (bccfe3374c887075cde2ac8fdb1cb2f8) C:\Windows\system32\DRIVERS\avgrkx64.sys
16:24:56.0088 3024        Avgrkx64 - ok
16:24:56.0154 3024        Avgtdia        (0d49adcebe243b79366ea523b647519a) C:\Windows\system32\DRIVERS\avgtdia.sys
16:24:56.0195 3024        Avgtdia - ok
16:24:56.0493 3024        avgwd          (fc2bc51120a945f7c70376495e4e7737) C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe
16:24:56.0537 3024        avgwd - ok
16:24:56.0578 3024        AxInstSV        (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll
16:24:56.0652 3024        AxInstSV - ok
16:24:56.0725 3024        b06bdrv        (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
16:24:56.0803 3024        b06bdrv - ok
16:24:56.0854 3024        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
16:24:56.0908 3024        b57nd60a - ok
16:24:56.0930 3024        BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
16:24:56.0978 3024        BDESVC - ok
16:24:56.0987 3024        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
16:24:57.0092 3024        Beep - ok
16:24:57.0181 3024        BFE            (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll
16:24:57.0301 3024        BFE - ok
16:24:57.0413 3024        BITS            (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll
16:24:57.0536 3024        BITS - ok
16:24:57.0586 3024        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
16:24:57.0627 3024        blbdrive - ok
16:24:57.0670 3024        bowser          (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
16:24:57.0751 3024        bowser - ok
16:24:57.0758 3024        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:24:57.0828 3024        BrFiltLo - ok
16:24:57.0833 3024        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:24:57.0881 3024        BrFiltUp - ok
16:24:57.0895 3024        Browser        (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll
16:24:57.0985 3024        Browser - ok
16:24:58.0016 3024        Brserid        (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
16:24:58.0151 3024        Brserid - ok
16:24:58.0159 3024        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
16:24:58.0188 3024        BrSerWdm - ok
16:24:58.0196 3024        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:24:58.0244 3024        BrUsbMdm - ok
16:24:58.0249 3024        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
16:24:58.0284 3024        BrUsbSer - ok
16:24:58.0293 3024        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
16:24:58.0324 3024        BTHMODEM - ok
16:24:58.0351 3024        bthserv        (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
16:24:58.0432 3024        bthserv - ok
16:24:58.0442 3024        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
16:24:58.0488 3024        cdfs - ok
16:24:58.0524 3024        cdrom          (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
16:24:58.0568 3024        cdrom - ok
16:24:58.0589 3024        CertPropSvc    (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
16:24:58.0676 3024        CertPropSvc - ok
16:24:58.0684 3024        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
16:24:58.0708 3024        circlass - ok
16:24:58.0757 3024        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
16:24:58.0797 3024        CLFS - ok
16:24:58.0894 3024        clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:24:58.0918 3024        clr_optimization_v2.0.50727_32 - ok
16:24:58.0953 3024        clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:24:58.0972 3024        clr_optimization_v2.0.50727_64 - ok
16:24:59.0182 3024        clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:24:59.0207 3024        clr_optimization_v4.0.30319_32 - ok
16:24:59.0335 3024        clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:24:59.0357 3024        clr_optimization_v4.0.30319_64 - ok
16:24:59.0382 3024        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
16:24:59.0415 3024        CmBatt - ok
16:24:59.0447 3024        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
16:24:59.0468 3024        cmdide - ok
16:24:59.0535 3024        CNG            (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
16:24:59.0703 3024        CNG - ok
16:24:59.0731 3024        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
16:24:59.0754 3024        Compbatt - ok
16:24:59.0765 3024        CompositeBus    (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
16:24:59.0807 3024        CompositeBus - ok
16:24:59.0811 3024        COMSysApp - ok
16:24:59.0819 3024        crcdisk        (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
16:24:59.0840 3024        crcdisk - ok
16:24:59.0893 3024        CryptSvc        (8c57411b66282c01533cb776f98ad384) C:\Windows\system32\cryptsvc.dll
16:24:59.0977 3024        CryptSvc - ok
16:25:00.0061 3024        DcomLaunch      (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
16:25:00.0162 3024        DcomLaunch - ok
16:25:00.0211 3024        defragsvc      (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
16:25:00.0300 3024        defragsvc - ok
16:25:00.0341 3024        DfsC            (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
16:25:00.0382 3024        DfsC - ok
16:25:00.0408 3024        Dhcp            (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll
16:25:00.0494 3024        Dhcp - ok
16:25:00.0503 3024        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
16:25:00.0570 3024        discache - ok
16:25:00.0593 3024        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
16:25:00.0607 3024        Disk - ok
16:25:00.0650 3024        Dnscache        (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll
16:25:00.0707 3024        Dnscache - ok
16:25:00.0756 3024        dot3svc        (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll
16:25:00.0855 3024        dot3svc - ok
16:25:00.0871 3024        DPS            (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll
16:25:00.0942 3024        DPS - ok
16:25:00.0965 3024        drmkaud        (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
16:25:01.0007 3024        drmkaud - ok
16:25:01.0160 3024        DsiWMIService  (9cf46fdf163e06b83d03ff929ef2296c) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
16:25:01.0196 3024        DsiWMIService - ok
16:25:01.0302 3024        DXGKrnl        (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
16:25:01.0364 3024        DXGKrnl - ok
16:25:01.0396 3024        EapHost        (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
16:25:01.0483 3024        EapHost - ok
16:25:01.0774 3024        ebdrv          (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
16:25:01.0925 3024        ebdrv - ok
16:25:02.0072 3024        EFS            (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe
16:25:02.0108 3024        EFS - ok
16:25:02.0214 3024        ehRecvr        (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe
16:25:02.0334 3024        ehRecvr - ok
16:25:02.0372 3024        ehSched        (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
16:25:02.0495 3024        ehSched - ok
16:25:02.0609 3024        elxstor        (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
16:25:02.0661 3024        elxstor - ok
16:25:02.0803 3024        ePowerSvc      (3ea2c4f68a782839d97b3c83595575b6) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
16:25:02.0858 3024        ePowerSvc - ok
16:25:02.0922 3024        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
16:25:02.0974 3024        ErrDev - ok
16:25:03.0031 3024        ETD            (0975bf32399a24117e317b5bf1d5d0aa) C:\Windows\system32\DRIVERS\ETD.sys
16:25:03.0055 3024        ETD - ok
16:25:03.0108 3024        EventSystem    (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
16:25:03.0210 3024        EventSystem - ok
16:25:03.0275 3024        exfat          (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
16:25:03.0378 3024        exfat - ok
16:25:03.0395 3024        fastfat        (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
16:25:03.0442 3024        fastfat - ok
16:25:03.0529 3024        Fax            (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe
16:25:03.0607 3024        Fax - ok
16:25:03.0615 3024        fdc            (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
16:25:03.0652 3024        fdc - ok
16:25:03.0670 3024        fdPHost        (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
16:25:03.0738 3024        fdPHost - ok
16:25:03.0744 3024        FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
16:25:03.0809 3024        FDResPub - ok
16:25:03.0835 3024        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
16:25:03.0848 3024        FileInfo - ok
16:25:03.0853 3024        Filetrace      (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
16:25:03.0912 3024        Filetrace - ok
16:25:04.0105 3024        FLEXnet Licensing Service (abedfd48ac042c6aaad32452e77217a1) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
16:25:04.0159 3024        FLEXnet Licensing Service - ok
16:25:04.0164 3024        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
16:25:04.0181 3024        flpydisk - ok
16:25:04.0206 3024        FltMgr          (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
16:25:04.0224 3024        FltMgr - ok
16:25:04.0345 3024        FontCache      (cb5e4b9c319e3c6bb363eb7e58a4a051) C:\Windows\system32\FntCache.dll
16:25:04.0414 3024        FontCache - ok
16:25:04.0518 3024        FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:25:04.0538 3024        FontCache3.0.0.0 - ok
16:25:04.0575 3024        FsDepends      (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
16:25:04.0599 3024        FsDepends - ok
16:25:04.0639 3024        Fs_Rec          (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys
16:25:04.0664 3024        Fs_Rec - ok
16:25:04.0738 3024        fvevol          (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
16:25:04.0769 3024        fvevol - ok
16:25:04.0792 3024        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
16:25:04.0812 3024        gagp30kx - ok
16:25:04.0893 3024        GameConsoleService (ce16683cfd11fe70bde435dda5ea1fca) C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe
16:25:04.0931 3024        GameConsoleService - ok
16:25:05.0027 3024        gpsvc          (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll
16:25:05.0115 3024        gpsvc - ok
16:25:05.0176 3024        GREGService    (0191dee9b9eb7902af2cf4f67301095d) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
16:25:05.0192 3024        GREGService - ok
16:25:05.0306 3024        gupdate        (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:25:05.0337 3024        gupdate - ok
16:25:05.0378 3024        gupdatem        (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:25:05.0394 3024        gupdatem - ok
16:25:05.0446 3024        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
16:25:05.0499 3024        hcw85cir - ok
16:25:05.0535 3024        HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
16:25:05.0598 3024        HdAudAddService - ok
16:25:05.0639 3024        HDAudBus        (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
16:25:05.0690 3024        HDAudBus - ok
16:25:05.0721 3024        HECIx64        (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
16:25:05.0739 3024        HECIx64 - ok
16:25:05.0768 3024        HidBatt        (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
16:25:05.0812 3024        HidBatt - ok
16:25:05.0824 3024        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
16:25:05.0855 3024        HidBth - ok
16:25:05.0867 3024        HidIr          (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
16:25:05.0911 3024        HidIr - ok
16:25:05.0956 3024        hidserv        (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
16:25:06.0037 3024        hidserv - ok
16:25:06.0042 3024        HidUsb          (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
16:25:06.0071 3024        HidUsb - ok
16:25:06.0101 3024        hkmsvc          (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll
16:25:06.0145 3024        hkmsvc - ok
16:25:06.0171 3024        HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll
16:25:06.0206 3024        HomeGroupListener - ok
16:25:06.0241 3024        HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll
16:25:06.0263 3024        HomeGroupProvider - ok
16:25:06.0272 3024        HpSAMD          (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
16:25:06.0288 3024        HpSAMD - ok
16:25:06.0348 3024        HTTP            (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
16:25:06.0427 3024        HTTP - ok
16:25:06.0431 3024        hwpolicy        (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
16:25:06.0444 3024        hwpolicy - ok
16:25:06.0454 3024        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
16:25:06.0470 3024        i8042prt - ok
16:25:06.0563 3024        iaStor          (1384872112e8e7fd5786eceb8bddf4c9) C:\Windows\system32\DRIVERS\iaStor.sys
16:25:06.0596 3024        iaStor - ok
16:25:06.0703 3024        IAStorDataMgrSvc (6b24d1c3096de796d15571079ea5e98c) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
16:25:06.0720 3024        IAStorDataMgrSvc - ok
16:25:06.0813 3024        iaStorV        (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
16:25:06.0864 3024        iaStorV - ok
16:25:07.0031 3024        idsvc          (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:25:07.0086 3024        idsvc - ok
16:25:07.0827 3024        igfx            (677aa5991026a65ada128c4b59cf2bad) C:\Windows\system32\DRIVERS\igdkmd64.sys
16:25:08.0185 3024        igfx - ok
16:25:08.0376 3024        iirsp          (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
16:25:08.0403 3024        iirsp - ok
16:25:08.0497 3024        IKEEXT          (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll
16:25:08.0615 3024        IKEEXT - ok
16:25:08.0680 3024        Impcd          (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
16:25:08.0737 3024        Impcd - ok
16:25:08.0948 3024        IntcAzAudAddService (235362d403d9d677514649d88db31914) C:\Windows\system32\drivers\RTKVHD64.sys
16:25:09.0093 3024        IntcAzAudAddService - ok
16:25:09.0277 3024        IntcDAud        (03c74719d48056a1078f3a51ceb76baa) C:\Windows\system32\DRIVERS\IntcDAud.sys
16:25:09.0342 3024        IntcDAud - ok
16:25:09.0376 3024        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
16:25:09.0401 3024        intelide - ok
16:25:09.0434 3024        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
16:25:09.0467 3024        intelppm - ok
16:25:09.0519 3024        IPBusEnum      (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
16:25:09.0598 3024        IPBusEnum - ok
16:25:09.0607 3024        IpFilterDriver  (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:25:09.0672 3024        IpFilterDriver - ok
16:25:09.0720 3024        iphlpsvc        (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll
16:25:09.0820 3024        iphlpsvc - ok
16:25:09.0829 3024        IPMIDRV        (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
16:25:09.0853 3024        IPMIDRV - ok
16:25:09.0865 3024        IPNAT          (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
16:25:09.0928 3024        IPNAT - ok
16:25:09.0943 3024        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
16:25:09.0976 3024        IRENUM - ok
16:25:09.0981 3024        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
16:25:09.0993 3024        isapnp - ok
16:25:10.0031 3024        iScsiPrt        (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
16:25:10.0076 3024        iScsiPrt - ok
16:25:10.0155 3024        k57nd60a        (37e053a2cf8f0082b689ed74106e0cec) C:\Windows\system32\DRIVERS\k57nd60a.sys
16:25:10.0208 3024        k57nd60a - ok
16:25:10.0225 3024        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
16:25:10.0247 3024        kbdclass - ok
16:25:10.0254 3024        kbdhid          (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
16:25:10.0270 3024        kbdhid - ok
16:25:10.0317 3024        KeyIso          (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
16:25:10.0342 3024        KeyIso - ok
16:25:10.0374 3024        KSecDD          (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
16:25:10.0399 3024        KSecDD - ok
16:25:10.0469 3024        KSecPkg        (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
16:25:10.0507 3024        KSecPkg - ok
16:25:10.0517 3024        ksthunk        (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
16:25:10.0610 3024        ksthunk - ok
16:25:10.0663 3024        KtmRm          (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
16:25:10.0775 3024        KtmRm - ok
16:25:10.0819 3024        LanmanServer    (81f1d04d4d0e433099365127375fd501) C:\Windows\system32\srvsvc.dll
16:25:10.0879 3024        LanmanServer - ok
16:25:10.0911 3024        LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll
16:25:11.0012 3024        LanmanWorkstation - ok
16:25:11.0029 3024        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
16:25:11.0088 3024        lltdio - ok
16:25:11.0149 3024        lltdsvc        (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
16:25:11.0201 3024        lltdsvc - ok
16:25:11.0222 3024        lmhosts        (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
16:25:11.0275 3024        lmhosts - ok
16:25:11.0399 3024        LMS            (dbc1136a62bd4decc3632df650284c2e) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
16:25:11.0416 3024        LMS - ok
16:25:11.0465 3024        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
16:25:11.0516 3024        LSI_FC - ok
16:25:11.0527 3024        LSI_SAS        (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
16:25:11.0550 3024        LSI_SAS - ok
16:25:11.0560 3024        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:25:11.0577 3024        LSI_SAS2 - ok
16:25:11.0591 3024        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:25:11.0607 3024        LSI_SCSI - ok
16:25:11.0618 3024        luafv          (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
16:25:11.0685 3024        luafv - ok
16:25:11.0732 3024        MBAMProtector  (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
16:25:11.0752 3024        MBAMProtector - ok
16:25:11.0942 3024        MBAMService    (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
16:25:12.0009 3024        MBAMService - ok
16:25:12.0054 3024        Mcx2Svc        (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll
16:25:12.0108 3024        Mcx2Svc - ok
16:25:12.0205 3024        MDM            (11f714f85530a2bd134074dc30e99fca) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
16:25:12.0237 3024        MDM - ok
16:25:12.0245 3024        megasas        (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
16:25:12.0272 3024        megasas - ok
16:25:12.0314 3024        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
16:25:12.0359 3024        MegaSR - ok
16:25:12.0393 3024        MMCSS          (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
16:25:12.0477 3024        MMCSS - ok
16:25:12.0482 3024        Modem          (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
16:25:12.0534 3024        Modem - ok
16:25:12.0554 3024        monitor        (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
16:25:12.0579 3024        monitor - ok
16:25:12.0586 3024        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
16:25:12.0599 3024        mouclass - ok
16:25:12.0605 3024        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
16:25:12.0624 3024        mouhid - ok
16:25:12.0647 3024        mountmgr        (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
16:25:12.0661 3024        mountmgr - ok
16:25:12.0730 3024        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:25:12.0776 3024        MozillaMaintenance - ok
16:25:12.0796 3024        mpio            (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
16:25:12.0827 3024        mpio - ok
16:25:12.0837 3024        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
16:25:12.0896 3024        mpsdrv - ok
16:25:12.0976 3024        MpsSvc          (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll
16:25:13.0085 3024        MpsSvc - ok
16:25:13.0114 3024        MRxDAV          (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
16:25:13.0224 3024        MRxDAV - ok
16:25:13.0263 3024        mrxsmb          (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:25:13.0310 3024        mrxsmb - ok
16:25:13.0372 3024        mrxsmb10        (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:25:13.0434 3024        mrxsmb10 - ok
16:25:13.0470 3024        mrxsmb20        (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:25:13.0491 3024        mrxsmb20 - ok
16:25:13.0513 3024        msahci          (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
16:25:13.0534 3024        msahci - ok
16:25:13.0551 3024        msdsm          (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
16:25:13.0573 3024        msdsm - ok
16:25:13.0599 3024        MSDTC          (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
16:25:13.0653 3024        MSDTC - ok
16:25:13.0682 3024        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
16:25:13.0762 3024        Msfs - ok
16:25:13.0777 3024        mshidkmdf      (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
16:25:13.0833 3024        mshidkmdf - ok
16:25:13.0837 3024        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
16:25:13.0850 3024        msisadrv - ok
16:25:13.0884 3024        MSiSCSI        (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
16:25:13.0956 3024        MSiSCSI - ok
16:25:13.0958 3024        msiserver - ok
16:25:13.0963 3024        MSKSSRV        (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
16:25:14.0025 3024        MSKSSRV - ok
16:25:14.0029 3024        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
16:25:14.0069 3024        MSPCLOCK - ok
16:25:14.0072 3024        MSPQM          (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
16:25:14.0137 3024        MSPQM - ok
16:25:14.0165 3024        MsRPC          (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
16:25:14.0187 3024        MsRPC - ok
16:25:14.0194 3024        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
16:25:14.0207 3024        mssmbios - ok
16:25:14.0211 3024        MSTEE          (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
16:25:14.0272 3024        MSTEE - ok
16:25:14.0276 3024        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
16:25:14.0289 3024        MTConfig - ok
16:25:14.0296 3024        Mup            (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
16:25:14.0309 3024        Mup - ok
16:25:14.0378 3024        napagent        (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll
16:25:14.0472 3024        napagent - ok
16:25:14.0531 3024        NativeWifiP    (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
16:25:14.0592 3024        NativeWifiP - ok
16:25:14.0699 3024        NDIS            (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
16:25:14.0778 3024        NDIS - ok
16:25:14.0786 3024        NdisCap        (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
16:25:14.0843 3024        NdisCap - ok
16:25:14.0858 3024        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
16:25:14.0916 3024        NdisTapi - ok
16:25:14.0923 3024        Ndisuio        (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
16:25:14.0987 3024        Ndisuio - ok
16:25:15.0002 3024        NdisWan        (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
16:25:15.0048 3024        NdisWan - ok
16:25:15.0069 3024        NDProxy        (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
16:25:15.0130 3024        NDProxy - ok
16:25:15.0362 3024        Nero BackItUp Scheduler 4.0 (7d2633295eb6ff2b938185874884059d) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
16:25:15.0418 3024        Nero BackItUp Scheduler 4.0 - ok
16:25:15.0424 3024        NetBIOS        (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
16:25:15.0479 3024        NetBIOS - ok
16:25:15.0500 3024        NetBT          (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
16:25:15.0564 3024        NetBT - ok
16:25:15.0595 3024        Netlogon        (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
16:25:15.0607 3024        Netlogon - ok
16:25:15.0680 3024        Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
16:25:15.0785 3024        Netman - ok
16:25:15.0825 3024        netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
16:25:15.0930 3024        netprofm - ok
16:25:16.0014 3024        NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:25:16.0036 3024        NetTcpPortSharing - ok
16:25:16.0062 3024        nfrd960        (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
16:25:16.0087 3024        nfrd960 - ok
16:25:16.0114 3024        NlaSvc          (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll
16:25:16.0192 3024        NlaSvc - ok
16:25:16.0444 3024        NOBU            (5839a8027d6d324a7cd494051a96628c) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
16:25:16.0573 3024        NOBU - ok
16:25:16.0712 3024        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
16:25:16.0790 3024        Npfs - ok
16:25:16.0809 3024        nsi            (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
16:25:16.0924 3024        nsi - ok
16:25:16.0929 3024        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
16:25:16.0988 3024        nsiproxy - ok
16:25:17.0181 3024        Ntfs            (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
16:25:17.0284 3024        Ntfs - ok
16:25:17.0427 3024        NTI IScheduleSvc (9a308fcdcca98a15b6f62d36a272160e) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
16:25:17.0462 3024        NTI IScheduleSvc - ok
16:25:17.0650 3024        NTIDrvr        (64ddd0dee976302f4bd93e5efcc2f013) C:\Windows\system32\drivers\NTIDrvr.sys
16:25:17.0666 3024        NTIDrvr - ok
16:25:17.0671 3024        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
16:25:17.0744 3024        Null - ok
16:25:17.0791 3024        nvraid          (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
16:25:17.0827 3024        nvraid - ok
16:25:17.0872 3024        nvstor          (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
16:25:17.0916 3024        nvstor - ok
16:25:17.0951 3024        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
16:25:17.0995 3024        nv_agp - ok
16:25:18.0005 3024        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
16:25:18.0044 3024        ohci1394 - ok
16:25:18.0111 3024        ose            (7a56cf3e3f12e8af599963b16f50fb6a) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:25:18.0133 3024        ose - ok
16:25:18.0213 3024        p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
16:25:18.0293 3024        p2pimsvc - ok
16:25:18.0363 3024        p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
16:25:18.0419 3024        p2psvc - ok
16:25:18.0432 3024        Parport        (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
16:25:18.0474 3024        Parport - ok
16:25:18.0508 3024        partmgr        (90061b1acfe8ccaa5345750ffe08d8b8) C:\Windows\system32\drivers\partmgr.sys
16:25:18.0531 3024        partmgr - ok
16:25:18.0550 3024        PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
16:25:18.0594 3024        PcaSvc - ok
16:25:18.0613 3024        pci            (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
16:25:18.0640 3024        pci - ok
16:25:18.0658 3024        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
16:25:18.0672 3024        pciide - ok
16:25:18.0695 3024        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
16:25:18.0715 3024        pcmcia - ok
16:25:18.0721 3024        pcw            (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
16:25:18.0738 3024        pcw - ok
16:25:18.0796 3024        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
16:25:18.0886 3024        PEAUTH - ok
16:25:18.0983 3024        PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
16:25:19.0012 3024        PerfHost - ok
16:25:19.0157 3024        pla            (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll
16:25:19.0284 3024        pla - ok
16:25:19.0360 3024        PlugPlay        (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll
16:25:19.0418 3024        PlugPlay - ok
16:25:19.0425 3024        PNRPAutoReg    (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
16:25:19.0491 3024        PNRPAutoReg - ok
16:25:19.0530 3024        PNRPsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
16:25:19.0557 3024        PNRPsvc - ok
16:25:19.0635 3024        Point64        (b8d8ec78b0f9ed8e220506181274f3d3) C:\Windows\system32\DRIVERS\point64.sys
16:25:19.0672 3024        Point64 - ok
16:25:19.0737 3024        PolicyAgent    (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll
16:25:19.0852 3024        PolicyAgent - ok
16:25:19.0890 3024        Power          (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
16:25:19.0986 3024        Power - ok
16:25:20.0037 3024        PptpMiniport    (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
16:25:20.0112 3024        PptpMiniport - ok
16:25:20.0139 3024        Processor      (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
16:25:20.0178 3024        Processor - ok
16:25:20.0216 3024        ProfSvc        (f381975e1f4346de875cb07339ce8d3a) C:\Windows\system32\profsvc.dll
16:25:20.0324 3024        ProfSvc - ok
16:25:20.0349 3024        ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
16:25:20.0367 3024        ProtectedStorage - ok
16:25:20.0408 3024        Psched          (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
16:25:20.0482 3024        Psched - ok
16:25:20.0522 3024        PxHlpa64        (fbf4db6d53585437e41a113300002a2b) C:\Windows\system32\Drivers\PxHlpa64.sys
16:25:20.0540 3024        PxHlpa64 - ok
16:25:20.0683 3024        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
16:25:20.0776 3024        ql2300 - ok
16:25:20.0925 3024        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
16:25:21.0009 3024        ql40xx - ok
16:25:21.0063 3024        QWAVE          (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
16:25:21.0118 3024        QWAVE - ok
16:25:21.0139 3024        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
16:25:21.0204 3024        QWAVEdrv - ok
16:25:21.0209 3024        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
16:25:21.0294 3024        RasAcd - ok
16:25:21.0343 3024        RasAgileVpn    (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:25:21.0405 3024        RasAgileVpn - ok
16:25:21.0416 3024        RasAuto        (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
16:25:21.0472 3024        RasAuto - ok
16:25:21.0484 3024        Rasl2tp        (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:25:21.0545 3024        Rasl2tp - ok
16:25:21.0583 3024        RasMan          (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll
16:25:21.0655 3024        RasMan - ok
16:25:21.0665 3024        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
16:25:21.0722 3024        RasPppoe - ok
16:25:21.0741 3024        RasSstp        (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
16:25:21.0788 3024        RasSstp - ok
16:25:21.0812 3024        rdbss          (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
16:25:21.0865 3024        rdbss - ok
16:25:21.0870 3024        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
16:25:21.0916 3024        rdpbus - ok
16:25:21.0920 3024        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:25:21.0978 3024        RDPCDD - ok
16:25:21.0984 3024        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
16:25:22.0045 3024        RDPENCDD - ok
16:25:22.0051 3024        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
16:25:22.0098 3024        RDPREFMP - ok
16:25:22.0150 3024        RDPWD          (074ac702d8b8b660b0e1371555995386) C:\Windows\system32\drivers\RDPWD.sys
16:25:22.0237 3024        RDPWD - ok
16:25:22.0258 3024        rdyboost        (e5dc9ba9e439d6dbdd79f8caacb5bf01) C:\Windows\system32\drivers\rdyboost.sys
16:25:22.0289 3024        rdyboost - ok
16:25:22.0325 3024        RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
16:25:22.0406 3024        RemoteAccess - ok
16:25:22.0441 3024        RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
16:25:22.0501 3024        RemoteRegistry - ok
16:25:22.0511 3024        RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
16:25:22.0555 3024        RpcEptMapper - ok
16:25:22.0581 3024        RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
16:25:22.0613 3024        RpcLocator - ok
16:25:22.0668 3024        RpcSs          (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
16:25:22.0726 3024        RpcSs - ok
16:25:22.0734 3024        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
16:25:22.0796 3024        rspndr - ok
16:25:22.0877 3024        RSUSBSTOR      (763ae0c6d9df4c24b7e2c26036a8188a) C:\Windows\system32\Drivers\RtsUStor.sys
16:25:22.0913 3024        RSUSBSTOR - ok
16:25:22.0938 3024        SamSs          (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
16:25:22.0958 3024        SamSs - ok
16:25:22.0986 3024        sbp2port        (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
16:25:23.0011 3024        sbp2port - ok
16:25:23.0041 3024        SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
16:25:23.0140 3024        SCardSvr - ok
16:25:23.0146 3024        scfilter        (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
16:25:23.0206 3024        scfilter - ok
16:25:23.0321 3024        Schedule        (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll
16:25:23.0396 3024        Schedule - ok
16:25:23.0437 3024        SCPolicySvc    (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
16:25:23.0474 3024        SCPolicySvc - ok
16:25:23.0494 3024        SDRSVC          (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll
16:25:23.0529 3024        SDRSVC - ok
16:25:23.0571 3024        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:25:23.0618 3024        secdrv - ok
16:25:23.0623 3024        seclogon        (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll
16:25:23.0684 3024        seclogon - ok
16:25:23.0706 3024        SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
16:25:23.0763 3024        SENS - ok
16:25:23.0768 3024        SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
16:25:23.0796 3024        SensrSvc - ok
16:25:23.0801 3024        Serenum        (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
16:25:23.0830 3024        Serenum - ok
16:25:23.0848 3024        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
16:25:23.0887 3024        Serial - ok
16:25:23.0897 3024        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
16:25:23.0910 3024        sermouse - ok
16:25:23.0961 3024        SessionEnv      (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll
16:25:24.0002 3024        SessionEnv - ok
16:25:24.0006 3024        sffdisk        (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
16:25:24.0056 3024        sffdisk - ok
16:25:24.0062 3024        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
16:25:24.0096 3024        sffp_mmc - ok
16:25:24.0101 3024        sffp_sd        (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys
16:25:24.0135 3024        sffp_sd - ok
16:25:24.0140 3024        sfloppy        (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
16:25:24.0160 3024        sfloppy - ok
16:25:24.0214 3024        SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
16:25:24.0314 3024        SharedAccess - ok
16:25:24.0345 3024        ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll
16:25:24.0385 3024        ShellHWDetection - ok
16:25:24.0392 3024        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:25:24.0408 3024        SiSRaid2 - ok
16:25:24.0423 3024        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
16:25:24.0439 3024        SiSRaid4 - ok
16:25:24.0501 3024        Smb            (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
16:25:24.0606 3024        Smb - ok
16:25:24.0634 3024        SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
16:25:24.0675 3024        SNMPTRAP - ok
16:25:24.0693 3024        spldr          (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
16:25:24.0716 3024        spldr - ok
16:25:24.0783 3024        Spooler        (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe
16:25:24.0851 3024        Spooler - ok
16:25:25.0127 3024        sppsvc          (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe
16:25:25.0264 3024        sppsvc - ok
16:25:25.0379 3024        sppuinotify    (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
16:25:25.0480 3024        sppuinotify - ok
16:25:25.0659 3024        srv            (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
16:25:25.0707 3024        srv - ok
16:25:25.0770 3024        srv2            (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
16:25:25.0828 3024        srv2 - ok
16:25:25.0874 3024        srvnet          (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
16:25:25.0902 3024        srvnet - ok
16:25:25.0929 3024        SSDPSRV        (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
16:25:26.0007 3024        SSDPSRV - ok
16:25:26.0037 3024        SstpSvc        (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
16:25:26.0104 3024        SstpSvc - ok
16:25:26.0162 3024        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
16:25:26.0186 3024        stexstor - ok
16:25:26.0274 3024        stisvc          (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll
16:25:26.0338 3024        stisvc - ok
16:25:26.0354 3024        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
16:25:26.0375 3024        swenum - ok
16:25:26.0419 3024        swprv          (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
16:25:26.0509 3024        swprv - ok
16:25:26.0693 3024        SysMain        (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll
16:25:26.0789 3024        SysMain - ok
16:25:26.0905 3024        TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll
16:25:26.0956 3024        TabletInputService - ok
16:25:26.0984 3024        TapiSrv        (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll
16:25:27.0064 3024        TapiSrv - ok
16:25:27.0072 3024        TBS            (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
16:25:27.0117 3024        TBS - ok
16:25:27.0400 3024        Tcpip          (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\drivers\tcpip.sys
16:25:27.0494 3024        Tcpip - ok
16:25:27.0764 3024        TCPIP6          (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\DRIVERS\tcpip.sys
16:25:27.0844 3024        TCPIP6 - ok
16:25:27.0957 3024        tcpipreg        (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
16:25:28.0028 3024        tcpipreg - ok
16:25:28.0042 3024        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
16:25:28.0098 3024        TDPIPE - ok
16:25:28.0135 3024        TDTCP          (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys
16:25:28.0170 3024        TDTCP - ok
16:25:28.0193 3024        tdx            (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
16:25:28.0257 3024        tdx - ok
16:25:28.0264 3024        TermDD          (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
16:25:28.0278 3024        TermDD - ok
16:25:28.0366 3024        TermService    (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll
16:25:28.0473 3024        TermService - ok
16:25:28.0483 3024        Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
16:25:28.0505 3024        Themes - ok
16:25:28.0536 3024        THREADORDER    (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
16:25:28.0583 3024        THREADORDER - ok
16:25:28.0594 3024        TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
16:25:28.0658 3024        TrkWks - ok
16:25:28.0715 3024        TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe
16:25:28.0754 3024        TrustedInstaller - ok
16:25:28.0768 3024        tssecsrv        (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:25:28.0855 3024        tssecsrv - ok
16:25:28.0884 3024        tunnel          (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
16:25:28.0954 3024        tunnel - ok
16:25:28.0978 3024        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
16:25:28.0992 3024        uagp35 - ok
16:25:28.0996 3024        UBHelper        (2e22c1fd397a5a9ffef55e9d1fc96c00) C:\Windows\system32\drivers\UBHelper.sys
16:25:29.0006 3024        UBHelper - ok
16:25:29.0032 3024        udfs            (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
16:25:29.0084 3024        udfs - ok
16:25:29.0094 3024        UI0Detect      (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
16:25:29.0124 3024        UI0Detect - ok
16:25:29.0132 3024        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
16:25:29.0145 3024        uliagpkx - ok
16:25:29.0152 3024        umbus          (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
16:25:29.0167 3024        umbus - ok
16:25:29.0170 3024        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
16:25:29.0185 3024        UmPass - ok
16:25:29.0478 3024        UNS            (7466809e6da561d60c2f1ce8ede3c73f) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
16:25:29.0576 3024        UNS - ok
16:25:29.0645 3024        Updater Service (f9ec9acd504d823d9b9ca98a4f8d3ca2) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
16:25:29.0682 3024        Updater Service - ok
16:25:29.0809 3024        upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
16:25:29.0911 3024        upnphost - ok
16:25:30.0036 3024        usbccgp        (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS\usbccgp.sys
16:25:30.0093 3024        usbccgp - ok
16:25:30.0142 3024        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
16:25:30.0187 3024        usbcir - ok
16:25:30.0217 3024        usbehci        (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\drivers\usbehci.sys
16:25:30.0255 3024        usbehci - ok
16:25:30.0319 3024        usbhub          (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
16:25:30.0366 3024        usbhub - ok
16:25:30.0416 3024        usbohci        (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
16:25:30.0441 3024        usbohci - ok
16:25:30.0469 3024        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
16:25:30.0514 3024        usbprint - ok
16:25:30.0560 3024        USBSTOR        (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:25:30.0599 3024        USBSTOR - ok
16:25:30.0617 3024        usbuhci        (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\drivers\usbuhci.sys
16:25:30.0640 3024        usbuhci - ok
16:25:30.0692 3024        usbvideo        (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
16:25:30.0733 3024        usbvideo - ok
16:25:30.0766 3024        UxSms          (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
16:25:30.0843 3024        UxSms - ok
16:25:30.0884 3024        VaultSvc        (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
16:25:30.0897 3024        VaultSvc - ok
16:25:30.0917 3024        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
16:25:30.0932 3024        vdrvroot - ok
16:25:30.0987 3024        vds            (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe
16:25:31.0061 3024        vds - ok
16:25:31.0077 3024        vga            (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
16:25:31.0119 3024        vga - ok
16:25:31.0125 3024        VgaSave        (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
16:25:31.0181 3024        VgaSave - ok
16:25:31.0219 3024        vhdmp          (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
16:25:31.0296 3024        vhdmp - ok
16:25:31.0302 3024        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
16:25:31.0319 3024        viaide - ok
16:25:31.0328 3024        volmgr          (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
16:25:31.0345 3024        volmgr - ok
16:25:31.0376 3024        volmgrx        (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
16:25:31.0402 3024        volmgrx - ok
16:25:31.0427 3024        volsnap        (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
16:25:31.0451 3024        volsnap - ok
16:25:31.0467 3024        vsmraid        (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
16:25:31.0481 3024        vsmraid - ok
16:25:31.0617 3024        VSS            (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe
16:25:31.0714 3024        VSS - ok
16:25:31.0851 3024        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
16:25:31.0947 3024        vwifibus - ok
16:25:32.0022 3024        vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
16:25:32.0067 3024        vwififlt - ok
16:25:32.0114 3024        W32Time        (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
16:25:32.0202 3024        W32Time - ok
16:25:32.0219 3024        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
16:25:32.0260 3024        WacomPen - ok
16:25:32.0282 3024        WANARP          (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
16:25:32.0353 3024        WANARP - ok
16:25:32.0368 3024        Wanarpv6        (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
16:25:32.0409 3024        Wanarpv6 - ok
16:25:32.0536 3024        wbengine        (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe
16:25:32.0645 3024        wbengine - ok
16:25:32.0769 3024        WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
16:25:32.0830 3024        WbioSrvc - ok
16:25:32.0899 3024        wcncsvc        (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll
16:25:32.0985 3024        wcncsvc - ok
16:25:32.0993 3024        WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
16:25:33.0041 3024        WcsPlugInService - ok
16:25:33.0166 3024        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
16:25:33.0191 3024        Wd - ok
16:25:33.0268 3024        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:25:33.0326 3024        Wdf01000 - ok
16:25:33.0338 3024        WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
16:25:33.0393 3024        WdiServiceHost - ok
16:25:33.0398 3024        WdiSystemHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
16:25:33.0433 3024        WdiSystemHost - ok
16:25:33.0493 3024        WebClient      (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll
16:25:33.0554 3024        WebClient - ok
16:25:33.0587 3024        Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
16:25:33.0732 3024        Wecsvc - ok
16:25:33.0741 3024        wercplsupport  (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
16:25:33.0798 3024        wercplsupport - ok
16:25:33.0816 3024        WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
16:25:33.0866 3024        WerSvc - ok
16:25:33.0906 3024        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
16:25:33.0984 3024        WfpLwf - ok
16:25:33.0989 3024        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
16:25:34.0003 3024        WIMMount - ok
16:25:34.0107 3024        WinDefend - ok
16:25:34.0118 3024        WinHttpAutoProxySvc - ok
16:25:34.0195 3024        Winmgmt        (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
16:25:34.0277 3024        Winmgmt - ok
16:25:34.0470 3024        WinRM          (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll
16:25:34.0625 3024        WinRM - ok
16:25:34.0846 3024        Wlansvc        (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
16:25:34.0925 3024        Wlansvc - ok
16:25:35.0047 3024        WmiAcpi        (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
16:25:35.0076 3024        WmiAcpi - ok
16:25:35.0118 3024        wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
16:25:35.0170 3024        wmiApSrv - ok
16:25:35.0275 3024        WMPNetworkSvc - ok
16:25:35.0299 3024        WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
16:25:35.0354 3024        WPCSvc - ok
16:25:35.0374 3024        WPDBusEnum      (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll
16:25:35.0416 3024        WPDBusEnum - ok
16:25:35.0424 3024        ws2ifsl        (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
16:25:35.0514 3024        ws2ifsl - ok
16:25:35.0564 3024        wscsvc          (8f9f3969933c02da96eb0f84576db43e) C:\Windows\System32\wscsvc.dll
16:25:35.0613 3024        wscsvc - ok
16:25:35.0620 3024        WSearch - ok
16:25:35.0860 3024        wuauserv        (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll
16:25:36.0022 3024        wuauserv - ok
16:25:36.0251 3024        WudfPf          (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
16:25:36.0318 3024        WudfPf - ok
16:25:36.0370 3024        WUDFRd          (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:25:36.0470 3024        WUDFRd - ok
16:25:36.0478 3024        wudfsvc        (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll
16:25:36.0557 3024        wudfsvc - ok
16:25:36.0577 3024        WwanSvc        (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
16:25:36.0649 3024        WwanSvc - ok
16:25:36.0686 3024        MBR (0x1B8)    (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
16:25:37.0143 3024        \Device\Harddisk0\DR0 - ok
16:25:37.0148 3024        Boot (0x1200)  (15b42b144542f8efe240cbc454c2b2a0) \Device\Harddisk0\DR0\Partition0
16:25:37.0150 3024        \Device\Harddisk0\DR0\Partition0 - ok
16:25:37.0188 3024        Boot (0x1200)  (79e53f571d77a718435a0b1fc9421e19) \Device\Harddisk0\DR0\Partition1
16:25:37.0191 3024        \Device\Harddisk0\DR0\Partition1 - ok
16:25:37.0191 3024        ============================================================
16:25:37.0191 3024        Scan finished
16:25:37.0191 3024        ============================================================
16:25:37.0216 2108        Detected object count: 1
16:25:37.0216 2108        Actual detected object count: 1
16:26:15.0187 2108        AVGIDSAgent ( ForgedFile.Multi.Generic ) - skipped by user
16:26:15.0187 2108        AVGIDSAgent ( ForgedFile.Multi.Generic ) - User select action: Skip

danke und grüße
stefan

cosinus 20.05.2012 20:45

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

stefan100 27.05.2012 15:21

hallo arne!

konnte leider den virenscanner und die hintergrundwächter nicht deaktivieren, da ich mein AVG nicht mehr aufbekomme. die exe scheint beschädigt zu sein. habe den scan dennoch durchgeführt. leider kommt die fehlermeldung immer noch beim hochfahren. was nun?

[code]
Combofix Logfile:
Code:

ComboFix 12-05-27.01 - dickbauch 27.05.2012  15:22:39.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7600.0.1252.49.1031.18.2807.1514 [GMT 2:00]
ausgeführt von:: c:\users\dickbauch\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-04-27 bis 2012-05-27  ))))))))))))))))))))))))))))))
.
.
2012-05-27 13:29 . 2012-05-27 13:29        --------        d-----w-        c:\users\Default\AppData\Local\temp
2012-05-17 19:07 . 2012-05-17 19:07        --------        d-----w-        C:\_OTL
2012-05-17 17:15 . 2012-03-01 06:54        22896        ----a-w-        c:\windows\system32\drivers\fs_rec.sys
2012-05-17 17:15 . 2012-03-01 06:45        220672        ----a-w-        c:\windows\system32\wintrust.dll
2012-05-17 17:15 . 2012-03-01 06:40        80896        ----a-w-        c:\windows\system32\imagehlp.dll
2012-05-17 17:15 . 2012-03-01 06:35        5120        ----a-w-        c:\windows\system32\wmi.dll
2012-05-17 17:15 . 2012-03-01 05:49        172544        ----a-w-        c:\windows\SysWow64\wintrust.dll
2012-05-17 17:15 . 2012-03-01 05:45        158720        ----a-w-        c:\windows\SysWow64\imagehlp.dll
2012-05-17 17:15 . 2012-03-01 05:40        5120        ----a-w-        c:\windows\SysWow64\wmi.dll
2012-05-17 16:16 . 2012-03-03 06:29        1541120        ----a-w-        c:\windows\system32\DWrite.dll
2012-05-17 16:16 . 2012-03-03 05:40        1074176        ----a-w-        c:\windows\SysWow64\DWrite.dll
2012-05-17 16:16 . 2012-03-03 06:29        320512        ----a-w-        c:\windows\system32\d3d10_1core.dll
2012-05-17 16:16 . 2012-03-03 06:29        1837568        ----a-w-        c:\windows\system32\d3d10warp.dll
2012-05-17 16:16 . 2012-03-03 05:40        1170944        ----a-w-        c:\windows\SysWow64\d3d10warp.dll
2012-05-17 16:16 . 2012-03-03 05:40        218624        ----a-w-        c:\windows\SysWow64\d3d10_1core.dll
2012-05-17 16:16 . 2012-03-03 06:29        197120        ----a-w-        c:\windows\system32\d3d10_1.dll
2012-05-17 16:16 . 2012-03-03 06:29        902656        ----a-w-        c:\windows\system32\d2d1.dll
2012-05-17 16:16 . 2012-03-03 05:40        739840        ----a-w-        c:\windows\SysWow64\d2d1.dll
2012-05-17 16:16 . 2012-03-03 05:40        161792        ----a-w-        c:\windows\SysWow64\d3d10_1.dll
2012-05-17 16:16 . 2012-04-02 05:34        5504880        ----a-w-        c:\windows\system32\ntoskrnl.exe
2012-05-17 16:14 . 2012-04-02 05:26        1732096        ----a-w-        c:\program files\Windows Journal\NBDoc.DLL
2012-05-17 16:14 . 2012-04-02 05:24        1367552        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-17 16:14 . 2012-04-02 04:40        936960        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-05-17 16:14 . 2012-04-02 05:24        1402880        ----a-w-        c:\program files\Windows Journal\JNWDRV.dll
2012-05-17 16:14 . 2012-04-02 05:24        1393664        ----a-w-        c:\program files\Windows Journal\JNTFiltr.dll
2012-05-17 15:55 . 2012-05-17 15:55        --------        d-----w-        c:\program files (x86)\pdfforge Toolbar
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-28 14:48 . 2011-06-26 15:31        414368        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" [2010-06-28 263936]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"Camera Assistant Software"="c:\program files (x86)\Video Web Camera\traybar.exe" [2010-07-06 600688]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG10\avgtray.exe" [2011-09-10 2338656]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0c:\progra~2\AVG\AVG10\avgchsva.exe /sync\0c:\progra~2\AVG\AVG10\avgrsa.exe /sync /restart
.
R2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2011-08-17 7390560]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2010-06-11 868896]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-13 136176]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-13 136176]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-09 169312]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG10\avgwdsvc.exe [2011-02-08 269520]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
S2 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [2010-01-08 23584]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-06-28 255744]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2010-01-28 243232]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-13 17:18]
.
2012-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-13 17:18]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-06-09 206208]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2010-06-11 861216]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 415256]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 2327952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://packardbell.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\dickbauch\AppData\Roaming\Mozilla\Firefox\Profiles\r4tuail3.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - www.google.de
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: AVG Safe Search: {1E73965B-8B48-48be-9C8D-68B920ABC1C4} - c:\program files (x86)\AVG\AVG10\Firefox4
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files (x86)\Launch Manager\LMworker.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-05-27  16:09:20 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-05-27 14:09
.
Vor Suchlauf: 9 Verzeichnis(se), 259.626.487.808 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 258.832.424.960 Bytes frei
.
- - End Of File - - 975B021EE5134BBEE8A0B5A6815650D4

--- --- ---


viele grüße
stefan

cosinus 28.05.2012 14:48

Kannst du AVG denn noch deinstallieren? Ein aktiver Scanner kann CF etwas einschränken

stefan100 28.05.2012 20:56

ich kanns versuchen. muss ja irgendwo eine uninstall geben. ich meld mich in den nächsten tagen wieder.

DANKE!

stefan100 03.07.2012 17:15

hi arne!

AVG ist jetzt runter.

soll ich combo fix jetzt nochmal mit gleichem inhalt laufen lassen?

grüße
stefan

cosinus 04.07.2012 14:55

Uff...nach 5 Wochen? :wtf: Wo haste die Zeit denn gesteckt? :confused:

Ja, CF nochmal machen, aber die combofix.exe unbedingt neu runterladen!

stefan100 02.08.2012 20:44

hi arne!

wunder mich warum nix von dir kommt und musste grade feststellen, dass meine letzte antwort nicht gesendet wurde.

wollte combo-fix ausführen.aber da kam die meldung, dass AVG als antivirus und antispyware immer noch aktiv sei.

ich bin verzweifelt. wie krieg ich AVG runter bzw. deaktiviert??

hilflose grüße
stefan

cosinus 03.08.2012 18:04

Ist Google bei dir kaputt?? => AVG - Temporäres Deaktivieren von AVG | Häufig gestellte Fragen

stefan100 05.08.2012 17:34

hi arne!

das problem ist ja, dass AVG offenbar noch aktiv ist, ich aber die exe nicht öffnen kann. ich kann avg nicht öffnen. komme nicht ran an die einstellungen. voll der mist. bin immer noch verzweifelt :-(

grüße
stefan

cosinus 05.08.2012 17:55

AVG deinstallieren, bringt ja nur Probleme das Teil
Wenn wir hier durch sind, kann wieder ein Virenscanner drauf, ob es wieder unbedingt AVG sein muss?! :pfeiff:

stefan100 05.08.2012 18:09

arne ich bin in computer ne doppelnull. leider :-( wie soll ich AVG deinstallieren? habe schon einiges probiert. die uninstall gibts nicht mehr. habe mir sogar ausm netz ein programm zum deinstallieren von AVG gezogen - ging auch nicht.

hilfe!

cosinus 05.08.2012 18:33

Probier das hier => http://www.chip.de/downloads/AVG-Rem..._49840577.html

stefan100 12.08.2012 09:53

tach arne!

mit dem programm hatte ich es schon versucht. nichtsdestotrotz (wasn wort!!) habe ich es nochmal laufen lassen. hier das ergebnis.

Code:

2012-08-12 08:42:56,710 INFO AvgRemover 2012.0.5
-------------------------------------------------------
2012-08-12 08:42:56,710 ERROR Wrong application platform. Use corresponding application version for 32bit or 64bit systems
2012-08-12 08:43:11,151 INFO AvgRemover 2012.0.5
-------------------------------------------------------
2012-08-12 08:43:11,151 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)
2012-08-12 08:43:11,151 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
2012-08-12 08:43:11,151 INFO Command line: "C:\Users\dickbauch\Downloads\avg_remover_stf_x64_2012_2125.exe"
2012-08-12 08:43:11,151 WARN AvgDir param empty.
2012-08-12 08:43:11,151 WARN AvgDataDir param empty.
2012-08-12 08:43:19,575 INFO AvgRemover runs in attempt number 1
2012-08-12 08:43:19,575 INFO Attempting to unregister AVG from the Windows Security Center.
2012-08-12 08:43:19,575 INFO Attempting to uninstall AVG Identity Protection.
2012-08-12 08:43:19,590 INFO Attempting to uninstall toolbar
2012-08-12 08:43:19,590 INFO *****    Msi data    *****
2012-08-12 08:43:19,590 DEBUG No product code found for our upgrade codes, nothing to do here
2012-08-12 08:43:19,590 INFO *****    Exchange&Outlook plugins data    *****
2012-08-12 08:43:19,590 INFO Removing AvgOutlook addin
2012-08-12 08:43:19,590 INFO  AvgOutlook Removing HKCR addin keys x86
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'avgoutlook.Addin': 0xe001003d
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'avgoutlook.Addin.1': 0xe001003d
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'CLSID\{9F39046C-801E-4E15-8CD9-ACF0ACF29048}': 0xe001003d
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'CLSID\{F083C5AB-08AD-4ABF-A2BE-8FA5C7D2F10A}': 0xe001003d
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'AppID\avgoutlook.DLL': 0xe001003d
2012-08-12 08:43:19,590 INFO  AvgOutlook Removing HKCR addin keys x64
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'avgoutlook.Addin': 0xe001003d
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'avgoutlook.Addin.1': 0xe001003d
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'CLSID\{9F39046C-801E-4E15-8CD9-ACF0ACF29048}': 0xe001003d
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'CLSID\{F083C5AB-08AD-4ABF-A2BE-8FA5C7D2F10A}': 0xe001003d
2012-08-12 08:43:19,590 DEBUG  Failed to delete key 'AppID\avgoutlook.DLL': 0xe001003d
2012-08-12 08:43:19,590 INFO Removing Sharepoint plugin if exists
2012-08-12 08:43:19,590 DEBUG  Failed to open key 'Software\Microsoft\Shared Tools\Web Server Extensions\AVScanner': 0xe0010013
2012-08-12 08:43:19,590 DEBUG  Failed to open key 'Software\Microsoft\Shared Tools\Web Server Extensions\AVScanner': 0xe0010013
2012-08-12 08:43:19,590 DEBUG Stopping service 'MSExchangeIS' to remove VSAPI plugin...
2012-08-12 08:43:19,590 DEBUG Service MSExchangeIS Stop failed (error: c0070424)
2012-08-12 08:43:19,590 DEBUG Exchange&Outlook plugins removal failed with error 0xc0070424
2012-08-12 08:43:19,590 INFO *****    Services    *****
2012-08-12 08:43:19,606 INFO Processing service avgfws8, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service avg8emc, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AvgWFPx, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AVGIDSErHrxpx, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AvgWFPa, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AvgMfx64, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AvgLdx86, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AvgTdiA, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AvgWfpX, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AvgRkx64, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service avg9emc, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AVGIDSAgent, it can take several minutes...
2012-08-12 08:43:19,606 INFO Service avgfws8 is not installed
2012-08-12 08:43:19,606 INFO Processing service AVGIDSWatcher, it can take several minutes...
2012-08-12 08:43:19,606 DEBUG Service avgfws8 RegCleanup
2012-08-12 08:43:19,606 DEBUG Registry keys for service avgfws8 are not present
2012-08-12 08:43:19,606 INFO Processing service AVGIDSDriverxpx, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AVGIDSDrivervta, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service avg9wd, it can take several minutes...
2012-08-12 08:43:19,606 INFO Service AvgWFPx is not installed
2012-08-12 08:43:19,621 DEBUG Service AvgWFPx RegCleanup
2012-08-12 08:43:19,621 INFO Processing service AvgWfpA, it can take several minutes...
2012-08-12 08:43:19,606 INFO Service AvgMfx64 is not installed
2012-08-12 08:43:19,621 DEBUG Service AvgMfx64 RegCleanup
2012-08-12 08:43:19,621 DEBUG Registry keys for service AvgMfx64 are not present
2012-08-12 08:43:19,606 INFO Service AvgLdx86 is not installed
2012-08-12 08:43:19,621 DEBUG Service AvgLdx86 RegCleanup
2012-08-12 08:43:19,621 DEBUG Registry keys for service AvgLdx86 are not present
2012-08-12 08:43:19,606 INFO Service AvgTdiA is not installed
2012-08-12 08:43:19,621 DEBUG Service AvgTdiA RegCleanup
2012-08-12 08:43:19,621 DEBUG Registry keys for service AvgTdiA are not present
2012-08-12 08:43:19,606 INFO Service AvgWfpX is not installed
2012-08-12 08:43:19,621 DEBUG Service AvgWfpX RegCleanup
2012-08-12 08:43:19,621 INFO Processing service AVGIDSDrivervtx, it can take several minutes...
2012-08-12 08:43:19,606 INFO Service avg9emc is not installed
2012-08-12 08:43:19,621 DEBUG Service avg9emc RegCleanup
2012-08-12 08:43:19,621 INFO Processing service AVGIDSErHrw7x, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service AVGIDSFiltervta, it can take several minutes...
2012-08-12 08:43:19,606 INFO Service AVGIDSWatcher is not installed
2012-08-12 08:43:19,621 DEBUG Service AVGIDSWatcher RegCleanup
2012-08-12 08:43:19,621 INFO Processing service AVGIDSErHrvta, it can take several minutes...
2012-08-12 08:43:19,621 INFO Processing service avgwd, it can take several minutes...
2012-08-12 08:43:19,637 INFO Processing service AVGIDSErHrw7a, it can take several minutes...
2012-08-12 08:43:19,606 INFO Processing service avg8wd, it can take several minutes...
2012-08-12 08:43:19,621 INFO Service AVGIDSDrivervta is not installed
2012-08-12 08:43:19,621 INFO Processing service AvgMfx86, it can take several minutes...
2012-08-12 08:43:19,621 INFO Service avg9wd is not installed
2012-08-12 08:43:19,621 INFO Processing service AvgLdx64, it can take several minutes...
2012-08-12 08:43:19,621 INFO Processing service AvgTdiX, it can take several minutes...
2012-08-12 08:43:19,621 DEBUG Registry keys for service AvgWFPx are not present
2012-08-12 08:43:19,606 INFO Service AvgWFPa is not installed
2012-08-12 08:43:19,637 DEBUG Service AvgWFPa RegCleanup
2012-08-12 08:43:19,637 DEBUG Registry keys for service AvgWFPa are not present
2012-08-12 08:43:19,621 INFO Processing service AvgRkx86, it can take several minutes...
2012-08-12 08:43:19,621 INFO Service AvgWfpA is not installed
2012-08-12 08:43:19,621 INFO Processing service avgfws9, it can take several minutes...
2012-08-12 08:43:19,621 INFO Processing service avgfws, it can take several minutes...
2012-08-12 08:43:19,621 INFO Processing service AVGIDSShimxpx, it can take several minutes...
2012-08-12 08:43:19,621 INFO Processing service AVGIDSFilterxpx, it can take several minutes...
2012-08-12 08:43:19,621 INFO Processing service AVGIDSFiltervtx, it can take several minutes...
2012-08-12 08:43:19,621 DEBUG Registry keys for service AvgWfpX are not present
2012-08-12 08:43:19,606 INFO Service AvgRkx64 is not installed
2012-08-12 08:43:19,653 DEBUG Service AvgRkx64 RegCleanup
2012-08-12 08:43:19,653 DEBUG Registry keys for service AvgRkx64 are not present
2012-08-12 08:43:19,621 INFO Processing service AVGIDSShimw7x, it can take several minutes...
2012-08-12 08:43:19,621 INFO Service AVGIDSDrivervtx is not installed
2012-08-12 08:43:19,621 INFO Processing service AVGIDSFilterw7x, it can take several minutes...
2012-08-12 08:43:19,621 INFO Processing service AVGIDSDriverw7a, it can take several minutes...
2012-08-12 08:43:19,621 DEBUG Registry keys for service avg9emc are not present
2012-08-12 08:43:19,606 INFO Service AVGIDSAgent is not installed
2012-08-12 08:43:19,653 DEBUG Service AVGIDSAgent RegCleanup
2012-08-12 08:43:19,653 DEBUG Registry keys for service AVGIDSAgent are not present
2012-08-12 08:43:19,621 INFO Processing service AVGIDSDriverw7x, it can take several minutes...
2012-08-12 08:43:19,653 INFO Service AVGIDSDriverw7x is not installed
2012-08-12 08:43:19,621 INFO Service AVGIDSFiltervta is not installed
2012-08-12 08:43:19,621 INFO Processing service AVGIDSFilterw7a, it can take several minutes...
2012-08-12 08:43:19,621 INFO Processing service AVGIDSErHrvtx, it can take several minutes...
2012-08-12 08:43:19,606 INFO Service AVGIDSErHrxpx is not installed
2012-08-12 08:43:19,621 DEBUG Registry keys for service AVGIDSWatcher are not present
2012-08-12 08:43:19,606 INFO Processing service AVGIDSShimvtx, it can take several minutes...
2012-08-12 08:43:19,606 INFO Service AVGIDSDriverxpx is not installed
2012-08-12 08:43:19,621 INFO Service AVGIDSErHrvta is not installed
2012-08-12 08:43:19,668 DEBUG Service AVGIDSErHrvta RegCleanup
2012-08-12 08:43:19,637 INFO Service avgwd is not installed
2012-08-12 08:43:19,637 INFO Service AVGIDSErHrw7a is not installed
2012-08-12 08:43:19,637 INFO Service avg8wd is not installed
2012-08-12 08:43:19,637 DEBUG Service AVGIDSDrivervta RegCleanup
2012-08-12 08:43:19,637 INFO Service AvgMfx86 is not installed
2012-08-12 08:43:19,637 DEBUG Service avg9wd RegCleanup
2012-08-12 08:43:19,637 INFO Service AvgLdx64 is not installed
2012-08-12 08:43:19,637 INFO Service AvgTdiX is not installed
2012-08-12 08:43:19,637 INFO Service AvgRkx86 is not installed
2012-08-12 08:43:19,637 DEBUG Service AvgWfpA RegCleanup
2012-08-12 08:43:19,637 INFO Service avgfws9 is not installed
2012-08-12 08:43:19,668 DEBUG Service avgfws9 RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service avgfws9 are not present
2012-08-12 08:43:19,637 INFO Service avgfws is not installed
2012-08-12 08:43:19,668 DEBUG Service avgfws RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service avgfws are not present
2012-08-12 08:43:19,637 INFO Service AVGIDSShimxpx is not installed
2012-08-12 08:43:19,668 DEBUG Service AVGIDSShimxpx RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service AVGIDSShimxpx are not present
2012-08-12 08:43:19,637 INFO Service AVGIDSFilterxpx is not installed
2012-08-12 08:43:19,668 DEBUG Service AVGIDSFilterxpx RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service AVGIDSFilterxpx are not present
2012-08-12 08:43:19,653 INFO Service AVGIDSFiltervtx is not installed
2012-08-12 08:43:19,668 DEBUG Service AVGIDSFiltervtx RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service AVGIDSFiltervtx are not present
2012-08-12 08:43:19,653 INFO Service AVGIDSShimw7x is not installed
2012-08-12 08:43:19,668 DEBUG Service AVGIDSShimw7x RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service AVGIDSShimw7x are not present
2012-08-12 08:43:19,653 DEBUG Service AVGIDSDrivervtx RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service AVGIDSDrivervtx are not present
2012-08-12 08:43:19,653 INFO Service AVGIDSFilterw7x is not installed
2012-08-12 08:43:19,668 DEBUG Service AVGIDSFilterw7x RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSFilterw7x are not present
2012-08-12 08:43:19,653 INFO Service AVGIDSDriverw7a is not installed
2012-08-12 08:43:19,684 DEBUG Service AVGIDSDriverw7a RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSDriverw7a are not present
2012-08-12 08:43:19,621 INFO Service AVGIDSErHrw7x is not installed
2012-08-12 08:43:19,684 DEBUG Service AVGIDSErHrw7x RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSErHrw7x are not present
2012-08-12 08:43:19,653 DEBUG Service AVGIDSDriverw7x RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSDriverw7x are not present
2012-08-12 08:43:19,653 DEBUG Service AVGIDSFiltervta RegCleanup
2012-08-12 08:43:19,653 INFO Service AVGIDSFilterw7a is not installed
2012-08-12 08:43:19,653 INFO Service AVGIDSErHrvtx is not installed
2012-08-12 08:43:19,684 DEBUG Service AVGIDSErHrvtx RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSErHrvtx are not present
2012-08-12 08:43:19,653 DEBUG Service AVGIDSErHrxpx RegCleanup
2012-08-12 08:43:19,653 INFO Service AVGIDSShimvtx is not installed
2012-08-12 08:43:19,684 DEBUG Service AVGIDSShimvtx RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSShimvtx are not present
2012-08-12 08:43:19,668 DEBUG Service AVGIDSDriverxpx RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSDriverxpx are not present
2012-08-12 08:43:19,606 INFO Service avg8emc is not installed
2012-08-12 08:43:19,668 DEBUG Registry keys for service AVGIDSErHrvta are not present
2012-08-12 08:43:19,668 DEBUG Service avgwd RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service avgwd are not present
2012-08-12 08:43:19,668 DEBUG Service AVGIDSErHrw7a RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSErHrw7a are not present
2012-08-12 08:43:19,668 DEBUG Service avg8wd RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service AVGIDSDrivervta are not present
2012-08-12 08:43:19,668 DEBUG Service AvgMfx86 RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AvgMfx86 are not present
2012-08-12 08:43:19,668 DEBUG Registry keys for service avg9wd are not present
2012-08-12 08:43:19,668 DEBUG Service AvgLdx64 RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AvgLdx64 are not present
2012-08-12 08:43:19,668 DEBUG Service AvgTdiX RegCleanup
2012-08-12 08:43:19,668 DEBUG Service AvgRkx86 RegCleanup
2012-08-12 08:43:19,668 DEBUG Registry keys for service AvgWfpA are not present
2012-08-12 08:43:19,684 DEBUG Registry keys for service AvgRkx86 are not present
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSFiltervta are not present
2012-08-12 08:43:19,684 DEBUG Service AVGIDSFilterw7a RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSErHrxpx are not present
2012-08-12 08:43:19,684 DEBUG Service avg8emc RegCleanup
2012-08-12 08:43:19,684 DEBUG Registry keys for service avg8wd are not present
2012-08-12 08:43:19,684 DEBUG Registry keys for service AvgTdiX are not present
2012-08-12 08:43:19,684 DEBUG Registry keys for service AVGIDSFilterw7a are not present
2012-08-12 08:43:19,684 DEBUG Registry keys for service avg8emc are not present
2012-08-12 08:43:19,684 INFO *****    Avg Fw NDIS driver(separate process)    *****
2012-08-12 08:43:19,699 INFO AvgRemover 2012.0.5
-------------------------------------------------------
2012-08-12 08:43:19,699 DEBUG Deleting stuck RunOnce value from registry.
2012-08-12 08:43:19,699 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)
2012-08-12 08:43:19,699 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
2012-08-12 08:43:19,699 INFO Command line: "C:\Users\dickbauch\Downloads\avg_remover_stf_x64_2012_2125.exe"  /ndisonly /skipask
2012-08-12 08:43:19,699 WARN AvgDir param empty.
2012-08-12 08:43:19,699 WARN AvgDataDir param empty.
2012-08-12 08:43:19,699 INFO AvgRemover runs in attempt number 1
2012-08-12 08:43:19,699 INFO *****    Avg Fw NDIS driver    *****
2012-08-12 08:43:19,699 INFO ...this operation can take several minutes...
2012-08-12 08:43:19,699 INFO FW removing policy
2012-08-12 08:43:20,495 INFO FW NDIS driver not present
2012-08-12 08:43:20,511 DEBUG Remove NDIS driver pass, next uninstalation step is 10, old was 1
2012-08-12 08:43:20,511 INFO *****    end of Fw NDIS separated process    *****
2012-08-12 08:43:20,511 INFO *****    Drivers    *****
2012-08-12 08:43:20,511 INFO *****    Running AVG process    *****
2012-08-12 08:43:21,337 INFO *****    Registry keys and values    *****
2012-08-12 08:43:21,337 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2012-08-12 08:43:21,337 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
2012-08-12 08:43:21,337 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
2012-08-12 08:43:21,337 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2012-08-12 08:43:21,337 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
2012-08-12 08:43:21,337 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
2012-08-12 08:43:21,337 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2012-08-12 08:43:21,337 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1E73965B-8B48-48be-9C8D-68B920ABC1C4} Remove
2012-08-12 08:43:21,337 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1E73965B-8B48-48be-9C8D-68B920ABC1C4} is not present
2012-08-12 08:43:21,337 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
2012-08-12 08:43:21,337 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt not found
2012-08-12 08:43:21,337 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt not found
2012-08-12 08:43:21,337 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt not found
2012-08-12 08:43:21,337 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found
2012-08-12 08:43:21,337 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
2012-08-12 08:43:21,337 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
2012-08-12 08:43:21,337 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
2012-08-12 08:43:21,337 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
2012-08-12 08:43:21,337 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2012-08-12 08:43:21,337 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2012-08-12 08:43:21,337 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2012-08-12 08:43:21,337 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar
2012-08-12 08:43:21,337 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove
2012-08-12 08:43:21,337 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2012-08-12 08:43:21,353 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2012-08-12 08:43:21,353 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
2012-08-12 08:43:21,353 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
2012-08-12 08:43:21,353 DEBUG Reading SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs failed (error: e001003d)
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify failed
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2012-08-12 08:43:21,353 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2012-08-12 08:43:21,353 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2012-08-12 08:43:21,353 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2012-08-12 08:43:21,353 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
2012-08-12 08:43:21,353 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2012-08-12 08:43:21,353 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY Remove
2012-08-12 08:43:21,353 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY is not present
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall
2012-08-12 08:43:21,353 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
2012-08-12 08:43:21,353 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
2012-08-12 08:43:21,353 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82}
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82}
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\.avgdi
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdi not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\.avgdx
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdx not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\.avgdx
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdx not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\.avgdx
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdx not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\.avgdx
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\.avgdx not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove
2012-08-12 08:43:21,369 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension not found
2012-08-12 08:43:21,369 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\avgsbg.state
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\avgsbg.state ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\avgsbg.state not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\avgsbg.state
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\avgsbg.state ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\avgsbg.state not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\avgsbg.state.1
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\avgsbg.state.1
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter.1
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter.1
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\MicroScanner.MicroScanner
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Classes\MicroScanner.MicroScanner
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL ForceRemove
2012-08-12 08:43:21,384 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL not found
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2012-08-12 08:43:21,384 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY Remove
2012-08-12 08:43:21,384 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY is not present
2012-08-12 08:43:21,384 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2012-08-12 08:43:21,384 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY Remove
2012-08-12 08:43:21,384 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY is not present
2012-08-12 08:43:21,400 INFO Processing registry SOFTWARE\Classes\AppID\avgsbg.DLL
2012-08-12 08:43:21,400 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL not found
2012-08-12 08:43:21,400 INFO Processing registry SOFTWARE\Classes\AppID\avgsbg.DLL
2012-08-12 08:43:21,400 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\Control\GroupOrderList
2012-08-12 08:43:21,400 DEBUG Value SYSTEM\ControlSet001\Control\GroupOrderList:AVG Remove
2012-08-12 08:43:21,400 INFO Value SYSTEM\ControlSet001\Control\GroupOrderList:AVG is not present
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\Avg
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\Avg ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\Avg not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\Avgfwfd
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\Avgfwfd ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\Avgfwfd not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\AVG Security Toolbar Service
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVG Security Toolbar Service ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVG Security Toolbar Service not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\Avgfws
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\Avgfws ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\Avgfws not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSAgent
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSAgent ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSAgent not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSDriver
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSDriver ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSDriver not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSEH
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSEH ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSEH not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSFilter
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSFilter ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSFilter not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgldx64
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgldx64 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgldx64 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgldx86
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgldx86 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgldx86 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgmfx64
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgmfx64 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgmfx64 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgmfx86
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgmfx86 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgmfx86 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgrkx64
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgrkx64 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgrkx64 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgrkx86
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgrkx86 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgrkx86 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgtdia
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgtdia ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgtdia not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgtdix
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgtdix ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgtdix not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgwd
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgwd ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgwd not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgfwdx
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgfwdx ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgfwdx not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgfwda
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgfwda ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgfwda not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgwfpa
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgwfpa ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgwfpa not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet001\services\avgwfpx
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgwfpx ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet001\services\avgwfpx not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\Avg
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\Avg ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\Avg not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\Avgfwfd
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\AVG Security Toolbar Service
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\Avgfws
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\Avgfws ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\Avgfws not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSAgent
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSDriver
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSEH
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSFilter
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\avgldx64
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\avgldx86
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx64
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 not found
2012-08-12 08:43:21,400 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx86
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 ForceRemove
2012-08-12 08:43:21,400 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx64
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx86
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgtdia
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgtdia ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgtdia not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgtdix
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgtdix ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgtdix not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgwd
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgwd ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgwd not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgfwdx
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgfwdx ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgfwdx not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgfwda
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgfwda ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgfwda not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgwfpa
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgwfpa ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgwfpa not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgwfpx
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgwfpx ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgwfpx not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\Avg
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\Avg ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\Avg not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\Avgfwfd
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\AVG Security Toolbar Service
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\Avgfws
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\Avgfws ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\Avgfws not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSAgent
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSDriver
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSEH
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSFilter
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgldx64
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgldx86
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx64
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx86
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx64
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx86
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgtdia
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgtdia ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgtdia not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgtdix
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgtdix ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgtdix not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\ControlSet002\services\avgwd
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgwd ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\ControlSet002\services\avgwd not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove
2012-08-12 08:43:21,415 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER failed (error e0010058)
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH ForceRemove
2012-08-12 08:43:21,415 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH failed (error e0010058)
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove
2012-08-12 08:43:21,415 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER failed (error e0010058)
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86 ForceRemove
2012-08-12 08:43:21,415 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86 not found
2012-08-12 08:43:21,415 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86 ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86 not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86 ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86 not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64 ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64 failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64 ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64 failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64 ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64 failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPX
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPX ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPX not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPA
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPA ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPA not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86 ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86 not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86 ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86 not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86 ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86 not found
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64 ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64 failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64 ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64 failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64 ForceRemove
2012-08-12 08:43:21,431 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64 failed (error e0010058)
2012-08-12 08:43:21,431 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX ForceRemove
2012-08-12 08:43:21,431 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA ForceRemove
2012-08-12 08:43:21,447 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA failed (error e0010058)
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPA
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPA ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPA not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove
2012-08-12 08:43:21,447 WARN Deleting key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER failed (error e0010058)
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH ForceRemove
2012-08-12 08:43:21,447 WARN Deleting key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH failed (error e0010058)
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove
2012-08-12 08:43:21,447 WARN Deleting key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER failed (error e0010058)
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86 ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86 not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86 ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86 not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86 ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86 not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64 ForceRemove
2012-08-12 08:43:21,447 WARN Deleting key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64 failed (error e0010058)
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64 ForceRemove
2012-08-12 08:43:21,447 WARN Deleting key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64 failed (error e0010058)
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64 ForceRemove
2012-08-12 08:43:21,447 WARN Deleting key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64 failed (error e0010058)
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA ForceRemove
2012-08-12 08:43:21,447 WARN Deleting key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA failed (error e0010058)
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX not found
2012-08-12 08:43:21,447 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPX
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPX ForceRemove
2012-08-12 08:43:21,447 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPX not found
2012-08-12 08:43:21,462 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPA
2012-08-12 08:43:21,462 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPA ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPA not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\Clients
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\Clients ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\Clients not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG8
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG8 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG9
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG9 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG10
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG10 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG10
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG10 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG2012
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG2012 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG2012 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG2012
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG2012 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG2012 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG IDS
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG IDS not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG IDS
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG IDS not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG
2012-08-12 08:43:21,462 DEBUG Value SOFTWARE\AVG:DumpType Remove
2012-08-12 08:43:21,462 DEBUG Value SOFTWARE\AVG:DumpType not present - Key not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Remove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Remove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG Security Toolbar
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG Security Toolbar
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG Secure Search
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Secure Search ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Secure Search not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG Secure Search
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Secure Search ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Secure Search not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG8
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG8 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG9
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG9 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG10
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG10 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG10
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG10 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG2012
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG2012 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG2012 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG\AVG2012
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG2012 ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG\AVG2012 not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Remove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Remove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG Security Toolbar
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\AVG Security Toolbar
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
2012-08-12 08:43:21,462 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} Remove
2012-08-12 08:43:21,462 INFO Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} is not present
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B206F26B-E6D1-43A0-8CF7-D3943147F867}
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B206F26B-E6D1-43A0-8CF7-D3943147F867} ForceRemove
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B206F26B-E6D1-43A0-8CF7-D3943147F867} not found
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser
2012-08-12 08:43:21,462 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove
2012-08-12 08:43:21,462 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present
2012-08-12 08:43:21,462 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2012-08-12 08:43:21,462 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2012-08-12 08:43:21,478 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2012-08-12 08:43:21,478 INFO Processing registry SOFTWARE\AppDataLow\Avg
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\AppDataLow\Avg ForceRemove
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\AppDataLow\Avg not found
2012-08-12 08:43:21,478 INFO Processing registry SOFTWARE\AppDataLow\Software\AVG Security Toolbar
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\AppDataLow\Software\AVG Security Toolbar ForceRemove
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\AppDataLow\Software\AVG Security Toolbar not found
2012-08-12 08:43:21,478 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2012-08-12 08:43:21,478 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2012-08-12 08:43:21,478 INFO Processing registry .avgdxa
2012-08-12 08:43:21,478 DEBUG Key .avgdxa ForceRemove
2012-08-12 08:43:21,478 DEBUG Key .avgdxa not found
2012-08-12 08:43:21,478 INFO Processing registry aAvgAPI.AvgBro
2012-08-12 08:43:21,478 DEBUG Key aAvgAPI.AvgBro ForceRemove
2012-08-12 08:43:21,478 DEBUG Key aAvgAPI.AvgBro not found
2012-08-12 08:43:21,478 INFO Processing registry AVG.Office
2012-08-12 08:43:21,478 DEBUG Key AVG.Office ForceRemove
2012-08-12 08:43:21,478 DEBUG Key AVG.Office not found
2012-08-12 08:43:21,478 INFO Processing registry AVG.Office.8
2012-08-12 08:43:21,478 DEBUG Key AVG.Office.8 ForceRemove
2012-08-12 08:43:21,478 DEBUG Key AVG.Office.8 not found
2012-08-12 08:43:21,478 INFO Processing registry AvgDiagFile
2012-08-12 08:43:21,478 DEBUG Key AvgDiagFile ForceRemove
2012-08-12 08:43:21,478 DEBUG Key AvgDiagFile not found
2012-08-12 08:43:21,478 INFO Processing registry AvgDiagExFile
2012-08-12 08:43:21,478 DEBUG Key AvgDiagExFile ForceRemove
2012-08-12 08:43:21,478 DEBUG Key AvgDiagExFile not found
2012-08-12 08:43:21,478 INFO Processing registry avgtoolbar.AVGTOOLBAR
2012-08-12 08:43:21,478 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove
2012-08-12 08:43:21,478 DEBUG Key avgtoolbar.AVGTOOLBAR not found
2012-08-12 08:43:21,478 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button
2012-08-12 08:43:21,478 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
2012-08-12 08:43:21,478 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found
2012-08-12 08:43:21,478 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button
2012-08-12 08:43:21,478 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
2012-08-12 08:43:21,478 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found
2012-08-12 08:43:21,478 INFO Processing registry LinkScannerIE.NavFilter
2012-08-12 08:43:21,478 DEBUG Key LinkScannerIE.NavFilter ForceRemove
2012-08-12 08:43:21,478 DEBUG Key LinkScannerIE.NavFilter not found
2012-08-12 08:43:21,478 INFO Processing registry LinkScannerIE.NavFilter.1
2012-08-12 08:43:21,478 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove
2012-08-12 08:43:21,478 DEBUG Key LinkScannerIE.NavFilter.1 not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2012-08-12 08:43:21,478 INFO Processing registry CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2012-08-12 08:43:21,478 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2012-08-12 08:43:21,478 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
2012-08-12 08:43:21,478 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
2012-08-12 08:43:21,478 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
2012-08-12 08:43:21,478 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
2012-08-12 08:43:21,478 INFO Processing registry Interface\{7F24AABF-C822-4C18-9432-21433208F4DC}
2012-08-12 08:43:21,478 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} ForceRemove
2012-08-12 08:43:21,478 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} not found
2012-08-12 08:43:21,478 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
2012-08-12 08:43:21,493 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
2012-08-12 08:43:21,493 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
2012-08-12 08:43:21,493 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
2012-08-12 08:43:21,493 INFO Processing registry TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
2012-08-12 08:43:21,493 INFO Processing registry CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2012-08-12 08:43:21,493 DEBUG Key CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2012-08-12 08:43:21,493 DEBUG Key CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
2012-08-12 08:43:21,493 DEBUG Removing Session Manager values
2012-08-12 08:43:21,493 DEBUG Registry remover failed for some registry item(s)
2012-08-12 08:43:21,493 INFO *****    Files and folders    *****
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 0
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 1
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 2
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 3
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 4
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 5
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 6
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 7
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 8
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 9
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 10
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 11
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 12
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 13
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 14
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 15
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 16
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 17
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 18
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 19
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 20
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 21
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 22
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 23
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 24
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 25
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\Users\dickbauch\AppData\Roaming\AVGTOOLBAR'
2012-08-12 08:43:21,493 INFO Directory 'C:\Users\dickbauch\AppData\Roaming\AVGTOOLBAR' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avg 8.0'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avg 8.0' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avg free 8.0'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avg free 8.0' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avg 8.5'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avg 8.5' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avg free 8.5'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avg free 8.5' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\Users\Public\Desktop\avg 8.0.lnk'
2012-08-12 08:43:21,493 INFO File 'C:\Users\Public\Desktop\avg 8.0.lnk' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\Users\Public\Desktop\avg free 8.0.lnk'
2012-08-12 08:43:21,493 INFO File 'C:\Users\Public\Desktop\avg free 8.0.lnk' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\Users\Public\Desktop\avg 8.5.lnk'
2012-08-12 08:43:21,493 INFO File 'C:\Users\Public\Desktop\avg 8.5.lnk' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\Users\Public\Desktop\avg free 8.5.lnk'
2012-08-12 08:43:21,493 INFO File 'C:\Users\Public\Desktop\avg free 8.5.lnk' not found
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 36
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 37
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 38
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 39
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 40
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 41
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 42
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 43
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 44
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 45
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 46
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 47
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 48
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 49
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 50
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 51
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 52
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 53
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 54
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 55
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 56
2012-08-12 08:43:21,493 DEBUG Missing ParentDir path for fileItem number 57
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\AVG Security Toolbar\Languages'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\AVG Security Toolbar\Languages' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\AVG Security Toolbar\Update'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\AVG Security Toolbar\Update' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\AVG Security Toolbar'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\AVG Security Toolbar' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 9.0'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 9.0' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG FREE 9.0'
2012-08-12 08:43:21,493 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG FREE 9.0' not found
2012-08-12 08:43:21,493 DEBUG Processing item 'C:\Users\Public\Desktop\avg 9.0.lnk'
2012-08-12 08:43:21,493 INFO File 'C:\Users\Public\Desktop\avg 9.0.lnk' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Users\Public\Desktop\avg free 9.0.lnk'
2012-08-12 08:43:21,509 INFO File 'C:\Users\Public\Desktop\avg free 9.0.lnk' not found
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 66
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 67
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 68
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 69
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 70

2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 135
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 136
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 137
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 138
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 139
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 140
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 141
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 142
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 143
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 144
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 145
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 146
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 147
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 148
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 149
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 150
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 151
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 152
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 153
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 154
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 155
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 156
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 157
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 158
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 159
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 160
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 161
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 162
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 163
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 164
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 165
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 166
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 167
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 168
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 169
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 170
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 171
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 172
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 173
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 174
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 175
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 176
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 177
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 178
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 179
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 180
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 181
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 182
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 183
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 184
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 185
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 186
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 187
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 188
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 189
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 190
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 191
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 192
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 193
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 194
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 195
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 196
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 197
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 198
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 199
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 200
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 201
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 202
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 203
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 204
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 205
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 206
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 207
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 208
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 209
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 210
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 211
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 212
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 213
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 214
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 215
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 216
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 217
2012-08-12 08:43:21,509 DEBUG Missing ParentDir path for fileItem number 218
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\AVG'
2012-08-12 08:43:21,509 INFO Directory 'C:\Windows\System32\Drivers\AVG' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsdriverx.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsdriverx.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsdrivera.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsdrivera.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsehx.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsehx.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidseha.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidseha.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsfilterx.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsfilterx.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsfiltera.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsfiltera.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsshimx.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsshimx.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsshimw8x.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsshimw8x.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsuniversalddx.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsuniversalddx.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32\Drivers\avgidsuniversaldda.sys'
2012-08-12 08:43:21,509 INFO File 'C:\Windows\System32\Drivers\avgidsuniversaldda.sys' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Windows\System32'
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget'
2012-08-12 08:43:21,509 INFO Directory 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget' not found
2012-08-12 08:43:21,509 DEBUG Processing item 'C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\AVG.Gadget'
2012-08-12 08:43:21,540 INFO Directory 'C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\AVG.Gadget' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG10\SetupCoreBackup'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG10\SetupCoreBackup' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG10\SetupBackup'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG10\SetupBackup' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG10\Chjw'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG10\Chjw' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG10\Antispam'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG10\Antispam' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG10'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG10' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2011'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2011' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG FREE 2011'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG FREE 2011' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Users\Public\Desktop\AVG 2011.lnk'
2012-08-12 08:43:21,540 INFO File 'C:\Users\Public\Desktop\AVG 2011.lnk' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Users\Public\Desktop\AVG FREE 2011.lnk'
2012-08-12 08:43:21,540 INFO File 'C:\Users\Public\Desktop\AVG FREE 2011.lnk' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Windows\SysWOW64\Drivers\AVG'
2012-08-12 08:43:21,540 INFO Directory 'C:\Windows\SysWOW64\Drivers\AVG' not found
2012-08-12 08:43:21,540 DEBUG Missing ParentDir path for fileItem number 249
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\MFAData\logs'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\MFAData\logs' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\MFAData\pack'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\MFAData\pack' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\MFAData\mkt'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\MFAData\mkt' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\MFAData'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\MFAData' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG2012\SetupCoreBackup'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG2012\SetupCoreBackup' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG2012\SetupBackup'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG2012\SetupBackup' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG2012\Chjw'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG2012\Chjw' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG2012\Antispam'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG2012\Antispam' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\AVG2012'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\AVG2012' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2012'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2012' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG FREE 2012'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG FREE 2012' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Users\Public\Desktop\AVG 2012.lnk'
2012-08-12 08:43:21,540 INFO File 'C:\Users\Public\Desktop\AVG 2012.lnk' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Users\Public\Desktop\AVG FREE 2012.lnk'
2012-08-12 08:43:21,540 INFO File 'C:\Users\Public\Desktop\AVG FREE 2012.lnk' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Windows\System32\Drivers'
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG LinkScanner® 9.0'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG LinkScanner® 9.0' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Standalone LinkScanner'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Standalone LinkScanner' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Users\Public\Desktop\AVG LinkScanner® 9.0.lnk'
2012-08-12 08:43:21,540 INFO File 'C:\Users\Public\Desktop\AVG LinkScanner® 9.0.lnk' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG'
2012-08-12 08:43:21,540 INFO Directory 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Program Files\AVG Secure Search'
2012-08-12 08:43:21,540 INFO Directory 'C:\Program Files\AVG Secure Search' not found
2012-08-12 08:43:21,540 DEBUG Processing item 'C:\Program Files (x86)\AVG Secure Search'
2012-08-12 08:43:21,540 INFO Directory 'C:\Program Files (x86)\AVG Secure Search' not found

text war zu lang. habe aus der mitte des berichts was gelöscht. dürfen nur 12000 zeichen rein.

aber würde mal behaupten, das hat wieder nicht geklappt. keine ahnung was da los ist.

aber weißt du was? ich nutze das laptop wirklich nur zum surfen als zweitgerät für draußen und unnawegs. im prinzip können wir das ding einmal komplett resten. ABER ich habe keinen plan wie das geht und wo ich dann wieder ein office-paket herbekommen soll. hatte ich nämlich vom IT-mensch meiner ex-firma "bekommen". darf ich sowas hier überhaupt schreiben?

alles bissel doof :-(

:heulen:

cosinus 12.08.2012 13:52

Wenn du es nur zum Surfen verwendest und hin und wieder mal etwas Office-Kram machst, muss es nicht mal Windows sein - das ist auch alles für Linux verfügbar - ich spreche von sowas wie LibreOffice oder AbiWord und Gnumeric

stefan100 12.08.2012 22:42

okay!
und wie müsste ich dann vorgehen?
habe wirklich keinen plan - leider:confused:

freunde von mir schwören seit jahren auf linux. ist zwar nicht 100% stabil - sagen sie - aber man pullert damit der großen krake so richtig schön in die tinte :party:

gibts hierzu vielleicht nen anderen thread? oder können wir hier weitermachen?

ich danke dir an dieser stelle schonmal für deine engelsgeduld ...

grüße
stefan

cosinus 13.08.2012 16:49

Zitat:

ist zwar nicht 100% stabil - sagen sie
So pauschal ist diese Aussage zu 100% Quatsch :D
Linux läuft äußerst stabil

Es gibt Dutzende Distros, Übersicht hier => DistroWatch.com: Put the fun back into computing. Use Linux, BSD. (englisch)

Für den Anfänger kann man wohl Ubuntu-basierte Distros nennen wie zB LinuxMint, die Derivate wie zB Lubuntu, Xubuntu oder halt eben Ubuntu selbst - ich selber nutze zu Hause Xubuntu

stefan100 19.08.2012 16:21

hi arne!

oder meinste ich kann das ding sogar drauf lassen wenn ich nur son bissel rumsurfe? ist aber wahrscheinlich zu riskant?! schreibe ja auch mails und sowas.
gibts evtl. hier ne anleitung zu format c: und wie ich danach linux raufkriege und mein rechner wieder läuft?

grüße
stefan

cosinus 20.08.2012 20:45

Ist das so schwierig mal Google anzuschmeißen? :confused:

Xubuntu Installation / http://wiki.ubuntuusers.de/Ubuntu_Installation_ab_Natty


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:10 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55