Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Adobe Flash Player funktioniert nicht mehr (https://www.trojaner-board.de/123820-adobe-flash-player-funktioniert-mehr.html)

Pannonia 09.09.2012 21:55
Adobe Flash Player funktioniert nicht mehr
 
Hallo,

seit knapp 2 Monaten geht mein Adobe Flash Player nicht mehr.Ich habe ihn schon mehrfach deinstalliert und neu draufgespielt aber jedes mal wenn ich ihn wieder brauche zeigt mir mein PC an das die neueste Version nicht installiert ist aber wenn ich dann nachschaue dann sehe ich das die neueste Version drauf ist.Ich habe schon auf mehreren Seiten nachgeschaut und auch mehrere Foren durchsucht aber irgendwie komme ich nicht weiter.Könnt ihr mir bitte weiterhelfen?
Danke im voraus

Mfg

cosinus 11.09.2012 12:05
Bitte erstmal routinemäßig einen Vollscan mit malwarebytes machen und Log posten. =>ALLE lokalen Datenträger (außer CD/DVD) überprüfen lassen!
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Die Funde mit Malwarebytes bitte alle entfernen, sodass sie in der Quarantäne von Malwarebytes aufgehoben werden! NICHTS voreilig aus der Quarantäne entfernen!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset




Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
hier steht das Log

Pannonia 11.09.2012 15:42
Ok.Hier der Log

Zitat:
Malwarebytes Anti-Malware (Test) 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.09.11.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Melanie :: MELANIE-PC [Administrator]

Schutz: Aktiviert

11.09.2012 15:41:27
mbam-log-2012-09-11 (15-41-27).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|Q:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 324782
Laufzeit: 56 Minute(n), 21 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Leider werden bei mir keine Komponente heruntergeladen. Anti-Virus-Programm und Firewall habe ich deaktiviert. Wenn ich auf den Eset Button klicke und dann Yes, i accept the Terms of Use und auf Start drücke dann kommt nur ein leerer Bildschirm und dann passiert nichts mehr.

Danke für deine Hilfe

cosinus 11.09.2012 21:28
Du kannst ESET entweder mit Firefox oder IE ausführen. Du hast auch bestimmt beide Browser ausprobiert?

Pannonia 12.09.2012 12:41
Hallo.
Endlich hat es geklappt.Hier ist das was er gefunden hat.Danke für deine Hilfe


Zitat:
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.6.4.6\BabylonToolbarApp.dll a variant of Win32/Toolbar.Babylon application
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.6.4.6\BabylonToolbarsrv.exe probably a variant of Win32/Toolbar.Babylon application

cosinus 12.09.2012 14:36
adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Falls der adwCleaner schon mal in der runtergeladen wurde, bitte die alte adwcleaner.exe löschen und neu runterladen!!
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Suche.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[Rx].txt. (x=fortlaufende Nummer)

Pannonia 12.09.2012 15:05
Hier sind die Daten



Zitat:
# AdwCleaner v2.001 - Datei am 09/12/2012 um 16:03:31 erstellt
# Aktualisiert am 09/09/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Melanie - MELANIE-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Melanie\Downloads\adwcleaner.exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gefunden : C:\user.js
Ordner Gefunden : C:\Program Files (x86)\BabylonToolbar
Ordner Gefunden : C:\Program Files (x86)\Conduit
Ordner Gefunden : C:\Program Files (x86)\DVDVideoSoftTB
Ordner Gefunden : C:\ProgramData\Babylon
Ordner Gefunden : C:\Users\Melanie\AppData\Local\Conduit
Ordner Gefunden : C:\Users\Melanie\AppData\LocalLow\Conduit
Ordner Gefunden : C:\Users\Melanie\AppData\LocalLow\DVDVideoSoftTB
Ordner Gefunden : C:\Users\Melanie\AppData\LocalLow\PriceGong
Ordner Gefunden : C:\Users\Melanie\AppData\Roaming\Babylon
Ordner Gefunden : C:\Users\Melanie\AppData\Roaming\BabylonToolbar

***** [Registrierungsdatenbank] *****

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gefunden : HKCU\Software\BabylonToolbar
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gefunden : HKLM\Software\Babylon
Schlüssel Gefunden : HKLM\Software\BabylonToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\b
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\Software\DVDVideoSoftTB
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C959C042-DE58-404E-866D-38E972416B87}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6A2D969-6086-4932-A7A1-DC989AEED156}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gefunden : HKU\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKU\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v15.0.1 (de)

cosinus 12.09.2012 15:28
Du solltest in CODE und nicht in Zitat-Tags posten!

Pannonia 12.09.2012 15:48
So? Anders bekomme ich es leider nicht hin.

Code:
# AdwCleaner v2.001 - Datei am 09/12/2012 um 16:03:31 erstellt
# Aktualisiert am 09/09/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Melanie - MELANIE-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Melanie\Downloads\adwcleaner.exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gefunden : C:\user.js
Ordner Gefunden : C:\Program Files (x86)\BabylonToolbar
Ordner Gefunden : C:\Program Files (x86)\Conduit
Ordner Gefunden : C:\Program Files (x86)\DVDVideoSoftTB
Ordner Gefunden : C:\ProgramData\Babylon
Ordner Gefunden : C:\Users\Melanie\AppData\Local\Conduit
Ordner Gefunden : C:\Users\Melanie\AppData\LocalLow\Conduit
Ordner Gefunden : C:\Users\Melanie\AppData\LocalLow\DVDVideoSoftTB
Ordner Gefunden : C:\Users\Melanie\AppData\LocalLow\PriceGong
Ordner Gefunden : C:\Users\Melanie\AppData\Roaming\Babylon
Ordner Gefunden : C:\Users\Melanie\AppData\Roaming\BabylonToolbar

***** [Registrierungsdatenbank] *****

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gefunden : HKCU\Software\BabylonToolbar
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gefunden : HKLM\Software\Babylon
Schlüssel Gefunden : HKLM\Software\BabylonToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\b
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\Software\DVDVideoSoftTB
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C959C042-DE58-404E-866D-38E972416B87}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6A2D969-6086-4932-A7A1-DC989AEED156}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gefunden : HKU\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKU\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v15.0.1 (de)

Profilname : default
Datei : C:\Users\Melanie\AppData\Roaming\Mozilla\Firefox\Profiles\jet5q2o7.default\prefs.js

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [10930 octets] - [12/09/2012 16:03:31]

########## EOF - C:\AdwCleaner[R1].txt - [10991 octets] ##########

cosinus 12.09.2012 19:09
ja so ist richtig :)

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Löschen.
  • Bestätige jeweils mit Ok.
  • Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[Sx].txt. (x=fortlaufende Nummer)

Pannonia 12.09.2012 19:26
Code:
# AdwCleaner v2.001 - Datei am 09/12/2012 um 20:20:00 erstellt
# Aktualisiert am 09/09/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Melanie - MELANIE-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Melanie\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\user.js
Ordner Gelöscht : C:\Program Files (x86)\BabylonToolbar
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\DVDVideoSoftTB
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Users\Melanie\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Melanie\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Melanie\AppData\LocalLow\DVDVideoSoftTB
Ordner Gelöscht : C:\Users\Melanie\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Melanie\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Melanie\AppData\Roaming\BabylonToolbar

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\b
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DVDVideoSoftTB
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C959C042-DE58-404E-866D-38E972416B87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6A2D969-6086-4932-A7A1-DC989AEED156}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

Wiederhergestellt : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

-\\ Mozilla Firefox v15.0.1 (de)

Profilname : default
Datei : C:\Users\Melanie\AppData\Roaming\Mozilla\Firefox\Profiles\jet5q2o7.default\prefs.js

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [11031 octets] - [12/09/2012 16:03:31]
AdwCleaner[S3].txt - [10985 octets] - [12/09/2012 20:20:00]

########## EOF - C:\AdwCleaner[S3].txt - [11046 octets] ##########

cosinus 13.09.2012 08:14
Hätte da mal zwei Fragen bevor es weiter geht

1.) Geht der normale Modus von Windows (wieder) uneingeschränkt?
2.) Vermisst du irgendwas im Startmenü? Sind da leere Ordner unter alle Programme oder ist alles vorhanden?

Pannonia 13.09.2012 15:46
Der einzigste Ordner der leer ist,ist der Autostart Ordner.Hab aber keine Ahnung wozu ich den brauche.

1.) Geht der normale Modus von Windows (wieder) uneingeschränkt?

Wie meinst du das genau???

cosinus 13.09.2012 21:58
Ich geh mal von einem "ja" aus ;)

Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
hier steht das Log
CustomScan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.
Code:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT

Pannonia 14.09.2012 15:00
So richtig???? :lach:

OTL Logfile:
Code:
OTL logfile created on: 14.09.2012 15:39:22 - Run 1
OTL by OldTimer - Version 3.2.61.4    Folder = C:\Users\Melanie\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,78 Gb Available Physical Memory | 69,51% Memory free
7,99 Gb Paging File | 6,30 Gb Available in Paging File | 78,90% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452,66 Gb Total Space | 390,60 Gb Free Space | 86,29% Space Free | Partition Type: NTFS
Drive D: | 727,56 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: MELANIE-PC | User Name: Melanie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.09.14 15:32:32 | 000,599,552 | ---- | M] (OldTimer Tools) -- C:\Users\Melanie\Downloads\OTL.exe
PRC - [2012.09.07 17:04:46 | 000,676,936 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.09.07 17:04:46 | 000,399,432 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012.09.07 17:04:44 | 000,766,536 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.03.14 17:38:14 | 000,913,752 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
PRC - [2012.03.06 18:39:50 | 000,574,296 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe
PRC - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.09.16 17:11:45 | 000,206,208 | ---- | M] () -- C:\Windows\PLFSetI.exe
PRC - [2011.07.21 12:08:02 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.04.21 07:52:51 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011.04.21 07:52:36 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.08.10 11:06:16 | 000,975,952 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2010.08.10 11:06:16 | 000,321,104 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
PRC - [2010.08.10 11:06:16 | 000,305,744 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
PRC - [2010.06.29 00:23:12 | 000,265,984 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
PRC - [2010.06.29 00:23:06 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
PRC - [2010.05.27 04:41:24 | 000,349,552 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
PRC - [2010.05.27 04:41:06 | 000,305,520 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
PRC - [2010.03.11 07:11:56 | 000,407,920 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
PRC - [2010.03.11 07:11:42 | 000,201,584 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
PRC - [2010.01.29 01:27:36 | 000,243,232 | ---- | M] (Acer Group) -- C:\Programme\Acer\Acer Updater\UpdaterService.exe
PRC - [2010.01.08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2011.09.16 17:11:45 | 000,206,208 | ---- | M] () -- C:\Windows\PLFSetI.exe
MOD - [2010.06.29 00:20:54 | 000,465,576 | ---- | M] () -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
MOD - [2009.05.20 08:02:04 | 000,072,200 | ---- | M] () -- C:\Program Files (x86)\Launch Manager\CdDirIo.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2010.04.21 01:34:40 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012.09.09 16:19:25 | 000,250,568 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.09.07 17:04:46 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.09.07 17:04:46 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012.09.06 03:25:06 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.03.14 17:38:14 | 000,913,752 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe -- (AdvancedSystemCareService5)
SRV - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011.09.16 17:25:29 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011.08.12 01:38:04 | 000,140,672 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Programme\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE)
SRV - [2011.07.21 12:08:02 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.04.21 07:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.03.28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.09.22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2010.08.10 11:06:16 | 000,321,104 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
SRV - [2010.06.29 00:23:06 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2010.06.11 14:27:26 | 000,868,896 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Programme\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc)
SRV - [2010.05.27 04:41:06 | 000,305,520 | ---- | M] (Egis Technology Inc.) [Auto | Running] -- C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe -- (MWLService)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.29 01:27:36 | 000,243,232 | ---- | M] (Acer Group) [Auto | Running] -- C:\Programme\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
SRV - [2010.01.09 22:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010.01.08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe -- (GREGService)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.09.07 17:04:46 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012.03.08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.10.01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011.10.01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011.10.01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011.10.01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011.07.21 12:11:10 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2011.07.21 12:11:09 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.07.09 05:51:50 | 000,017,408 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:64bit: - [2010.06.17 11:18:28 | 000,246,376 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2010.05.14 23:48:28 | 000,384,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
DRV:64bit: - [2010.05.11 12:11:38 | 002,229,608 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010.04.21 03:15:04 | 006,406,144 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)
DRV:64bit: - [2010.04.21 00:39:36 | 000,188,928 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010.04.20 04:35:14 | 000,018,432 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:64bit: - [2010.01.27 05:05:00 | 000,231,328 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2009.12.10 13:25:10 | 000,301,104 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2009.08.23 11:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.06.03 04:15:30 | 000,060,464 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV:64bit: - [2009.06.03 04:15:30 | 000,022,576 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV:64bit: - [2009.06.03 04:15:30 | 000,020,016 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
DRV - [2011.07.22 18:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV - [2011.07.12 23:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
 
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.de/ig?hl=de&source=webhp [binary data]
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.eschalle04.de/cms/index.php
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\..\URLSearchHook:  - No CLSID value found
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_deDE479
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.12 11:02:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2012.09.09 16:05:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Melanie\AppData\Roaming\mozilla\Extensions
[2012.09.12 11:05:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Melanie\AppData\Roaming\mozilla\Firefox\Profiles\jet5q2o7.default\extensions
[2012.09.12 11:02:47 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.09.06 03:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.09.06 04:07:37 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.06 04:07:37 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.09.06 04:07:37 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.09.06 04:07:37 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.09.06 04:07:37 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.09.06 04:07:37 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [Acer ePower Management] C:\Programme\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [mwlDaemon] C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (Egis Technology Inc.)
O4:64bit: - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (NewTech Infosystems, Inc.)
O4 - HKLM..\Run: [EgisTecPMMUpdate] C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (Egis Technology Inc.)
O4 - HKLM..\Run: [EgisUpdate] C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Egis Technology Inc.)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SuiteTray] C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (Egis Technology Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1432040542-156192184-1118736734-1000..\Run: [Advanced SystemCare 5] C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-1432040542-156192184-1118736734-1000..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Melanie\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Melanie\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2B95D8D9-26CA-4970-B4A6-2F8EF9A7BB65}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.01.26 10:41:23 | 000,000,000 | R--D | M] - D:\AutoRun -- [ UDF ]
O32 - AutoRun File - [2007.01.26 10:36:30 | 000,700,416 | R--- | M] (Electronic Arts Inc.) - D:\AutoRun.exe -- [ UDF ]
O32 - AutoRun File - [2007.01.26 10:40:58 | 000,000,149 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2007.01.26 09:06:20 | 000,651,264 | R--- | M] (Electronic Arts Inc.) - D:\AutoRunGUI.dll -- [ UDF ]
O33 - MountPoints2\{42f4b37b-e074-11e0-b960-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{42f4b37b-e074-11e0-b960-806e6f6e6963}\Shell\AutoRun\command - "" = D:\0data\cbs.exe
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
 
 
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: MCODS - Reg Error: Value error.
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: !SASCORE - C:\Programme\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com)
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MCODS - Reg Error: Value error.
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: MCODS - Reg Error: Value error.
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: !SASCORE - C:\Programme\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com)
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: MCODS - Reg Error: Value error.
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Windows Media Player 5.2
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.09.14 15:28:08 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{6752E9BD-8D05-4461-834D-B79A72F58855}
[2012.09.13 20:53:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.09.13 20:53:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2012.09.13 15:49:10 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{3E5E6523-6244-40C8-B7F7-90B8F31219C4}
[2012.09.12 11:04:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2012.09.12 11:02:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012.09.12 10:50:44 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{598B5BF9-11CF-4B55-9371-1283D3BA5F3D}
[2012.09.11 17:09:09 | 000,000,000 | ---D | C] -- C:\blöd
[2012.09.11 15:39:15 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Roaming\Malwarebytes
[2012.09.11 15:39:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.09.11 15:39:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.09.11 15:39:08 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.09.11 15:39:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.09.11 14:09:45 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{082DBCE7-2E3E-4BE6-821E-E1716687559F}
[2012.09.10 16:05:24 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E2A3370B-6143-4529-B556-DC794268E2EA}
[2012.09.09 22:03:56 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{519F27C3-8811-4FF1-AF67-D3185DC1B647}
[2012.09.09 16:05:25 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\Mozilla
[2012.09.09 16:05:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012.09.09 10:03:32 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{2AED8D60-55D8-40AB-A869-51AA8ED04BD5}
[2012.09.08 15:15:50 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Roaming\Origin
[2012.09.08 15:13:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
[2012.09.08 12:00:37 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{1D0E2B24-0B1D-4B5A-AEB2-2945045EFEE7}
[2012.09.07 18:33:20 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9174F11E-1851-4B96-AF7B-771A62CCDAD8}
[2012.09.06 16:03:56 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{708CCAEE-DCB1-4B19-B782-74F5D2878B21}
[2012.09.05 17:28:01 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8E80F03E-49A6-43C9-8F04-E01E8B7CB91D}
[2012.09.04 16:04:10 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{288CF970-E55E-4711-B4C3-8A37406FEB86}
[2012.09.03 15:29:47 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{D71A6E0B-700F-42DB-BC1B-8D4396EECF0F}
[2012.09.02 09:55:52 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{F8817253-DC49-4895-94AF-9CA1CA5814E2}
[2012.09.01 11:10:42 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{78874EDC-22B6-42B4-B3D6-C767A0FEA6B4}
[2012.08.31 19:54:12 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{DDC6340C-6987-436C-87CE-FE3121E86C56}
[2012.08.30 11:06:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{2E205CD7-8761-4657-8D43-958121C546FF}
[2012.08.29 13:47:47 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{0C979E78-B458-4822-86B2-AF6CDF7C1EBF}
[2012.08.28 17:22:27 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{520D8755-E930-4A0A-B6C0-4597F030DFA9}
[2012.08.27 12:48:52 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E1DF6D72-4FAC-4D8E-AAC9-1067611A62B6}
[2012.08.26 21:40:21 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{61B4189D-DE38-4E48-8921-9C4CF87E86D5}
[2012.08.26 09:39:57 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{83B10B6B-263D-4099-BBDE-9F951BD1FD76}
[2012.08.25 11:35:38 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{5DCB6AED-E9ED-48A7-91C7-630D8C0D85A7}
[2012.08.24 18:02:57 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8BC3F8D9-153A-41AE-BAAB-4D7CB67D3BC2}
[2012.08.23 16:25:35 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A7AD3349-6292-42B1-A9E8-67754F09DE5B}
[2012.08.22 16:53:33 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{ECCBB953-B911-4250-9A13-742E0EE7161A}
[2012.08.21 15:47:22 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E7D33AF7-57F0-41FA-834B-364B4655CF92}
[2012.08.20 18:17:30 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Roaming\PhotoFiltre 7
[2012.08.20 18:16:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012.08.20 14:53:52 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{CABE789E-23F8-4741-821A-4C8369039445}
[2012.08.19 11:06:53 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E9039DE7-AF15-4371-836B-63B5FDD7BD31}
[2012.08.18 14:47:27 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{6C4F06C4-73A7-4134-919E-4EB14C9E9D15}
[2012.08.18 14:47:15 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{AD65091C-5999-4638-B8FE-77CF721B9ADA}
[2012.08.16 13:42:26 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{F2FCC17F-FE97-43EC-A353-BE4C104A8AD6}
[2012.08.16 13:42:03 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{169D05CD-9B51-42E3-89AF-A32B8001A18D}
[2012.08.15 16:27:12 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{462C8F94-1323-4815-9BA2-CE08630A2F58}
[2012.08.15 16:27:01 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{22649002-A8A2-40D3-A166-676067EEA2C6}
 
========== Files - Modified Within 30 Days ==========
 
[2012.09.14 15:38:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.09.14 15:34:15 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.14 15:34:15 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.14 15:27:29 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.09.14 15:26:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.09.14 15:26:36 | 3217,211,392 | -HS- | M] () -- C:\hiberfil.sys
[2012.09.13 21:18:05 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.09.13 20:53:25 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2012.09.13 18:43:47 | 000,043,348 | ---- | M] () -- C:\Users\Melanie\Desktop\424635_10151140019374528_76253238_n.jpg
[2012.09.13 17:41:27 | 000,011,587 | ---- | M] () -- C:\Users\Melanie\Desktop\303508_353316984755933_1709311885_n.jpg
[2012.09.12 20:59:43 | 000,034,956 | ---- | M] () -- C:\Users\Melanie\Desktop\0_big.jpg
[2012.09.12 20:26:13 | 001,500,098 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.09.12 20:26:13 | 000,654,808 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.09.12 20:26:13 | 000,616,650 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.09.12 20:26:13 | 000,130,390 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.09.12 20:26:13 | 000,106,772 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.09.12 11:50:15 | 000,014,747 | ---- | M] () -- C:\Users\Melanie\Desktop\423903_352862441468054_901957897_n.jpg
[2012.09.12 11:49:35 | 000,045,047 | ---- | M] () -- C:\Users\Melanie\Desktop\557462_10151137514174528_455807735_n.jpg
[2012.09.12 11:02:50 | 000,001,134 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.09.11 15:39:11 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.09.08 17:05:46 | 000,046,113 | ---- | M] () -- C:\Users\Melanie\Desktop\395231_343448099077733_1438542871_n.jpg
[2012.09.08 15:13:31 | 000,000,073 | ---- | M] () -- C:\Windows\wininit.ini
[2012.09.07 17:04:46 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.08.20 18:16:55 | 005,512,161 | ---- | M] () -- C:\Users\Melanie\Desktop\PhotoFiltre7-de.zip
[2012.08.18 14:46:14 | 000,274,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
 
========== Files Created - No Company Name ==========
 
[2012.09.13 18:43:56 | 000,043,348 | ---- | C] () -- C:\Users\Melanie\Desktop\424635_10151140019374528_76253238_n.jpg
[2012.09.13 17:41:43 | 000,011,587 | ---- | C] () -- C:\Users\Melanie\Desktop\303508_353316984755933_1709311885_n.jpg
[2012.09.12 20:59:42 | 000,034,956 | ---- | C] () -- C:\Users\Melanie\Desktop\0_big.jpg
[2012.09.12 11:50:19 | 000,014,747 | ---- | C] () -- C:\Users\Melanie\Desktop\423903_352862441468054_901957897_n.jpg
[2012.09.12 11:49:44 | 000,045,047 | ---- | C] () -- C:\Users\Melanie\Desktop\557462_10151137514174528_455807735_n.jpg
[2012.09.12 11:02:50 | 000,001,146 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012.09.12 11:02:50 | 000,001,134 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.09.11 15:39:11 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.09.08 17:06:00 | 000,046,113 | ---- | C] () -- C:\Users\Melanie\Desktop\395231_343448099077733_1438542871_n.jpg
[2012.09.08 15:13:31 | 000,000,073 | ---- | C] () -- C:\Windows\wininit.ini
[2012.08.20 18:16:48 | 005,512,161 | ---- | C] () -- C:\Users\Melanie\Desktop\PhotoFiltre7-de.zip
[2012.04.29 19:06:43 | 000,010,240 | ---- | C] () -- C:\Windows\SysWow64\vidx16.dll
[2011.11.10 22:24:50 | 001,526,948 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.09.23 17:53:49 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2011.09.16 17:11:53 | 000,206,208 | ---- | C] () -- C:\Windows\PLFSetI.exe
[2011.09.16 17:11:53 | 000,113,264 | ---- | C] () -- C:\Windows\FixUVC.exe
[2011.09.16 17:11:53 | 000,000,302 | ---- | C] () -- C:\Windows\PidList_C.ini
[2011.09.16 17:04:56 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.08.30 05:01:45 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe
 
========== LOP Check ==========
 
[2012.05.27 23:13:27 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Ahnenblatt
[2012.01.05 21:51:57 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\DVDVideoSoft
[2011.09.23 15:22:31 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.07.08 14:34:03 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\ICQ
[2012.07.08 14:33:55 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\ICQ Search
[2012.04.09 20:31:48 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\IObit
[2012.09.08 15:16:19 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Origin
[2012.08.20 18:17:36 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\PhotoFiltre 7
[2012.04.30 16:33:52 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\ScummVM
[2012.08.26 23:07:04 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\SoftGrid Client
[2011.11.10 22:26:13 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\TP
[2011.10.20 20:32:48 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Windows Live Writer
[2012.07.30 13:45:44 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2012.01.21 21:49:33 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Adobe
[2012.05.27 23:13:27 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Ahnenblatt
[2011.09.16 17:53:40 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\ATI
[2011.09.21 18:58:53 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Avira
[2012.01.05 21:51:57 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\DVDVideoSoft
[2011.09.23 15:22:31 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.04.09 19:06:32 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Google
[2012.07.08 14:34:03 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\ICQ
[2012.07.08 14:33:55 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\ICQ Search
[2011.09.16 17:51:59 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Identities
[2012.04.09 20:31:48 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\IObit
[2011.09.16 17:52:27 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Macromedia
[2012.09.11 15:39:15 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Malwarebytes
[2009.07.14 09:44:38 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Media Center Programs
[2012.05.03 11:15:02 | 000,000,000 | --SD | M] -- C:\Users\Melanie\AppData\Roaming\Microsoft
[2012.09.09 16:05:45 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Mozilla
[2012.09.08 15:16:19 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Origin
[2012.08.20 18:17:36 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\PhotoFiltre 7
[2012.04.30 16:33:52 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\ScummVM
[2012.09.13 20:53:53 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Skype
[2012.08.26 23:07:04 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\SoftGrid Client
[2011.09.16 18:07:00 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\SUPERAntiSpyware.com
[2011.11.10 22:26:13 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\TP
[2011.09.16 21:53:06 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\vlc
[2011.10.20 20:32:48 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Windows Live Writer
 
< %APPDATA%\*.exe /s >
 
< %SYSTEMDRIVE%\*.exe >
 
< MD5 for: AGP440.SYS  >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: IASTORV.SYS  >
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 08:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 08:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.20 14:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.20 14:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009.07.14 03:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
[2010.11.20 15:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll
[2010.11.20 15:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2012.09.07 17:04:42 | 000,218,696 | ---- | M] () MD5=4E0D8C9F83B7FD82393F7D8CCC27E7AE -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2010.07.17 21:26:04 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2010.07.17 21:26:04 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
<          >
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:CDFF58FE
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:E3C56885

< End of report >
--- --- ---

cosinus 14.09.2012 19:54
Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:
:OTL
FF - user.js - File not found
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\..\URLSearchHook:  - No CLSID value found
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-1432040542-156192184-1118736734-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.01.26 10:41:23 | 000,000,000 | R--D | M] - D:\AutoRun -- [ UDF ]
O32 - AutoRun File - [2007.01.26 10:36:30 | 000,700,416 | R--- | M] (Electronic Arts Inc.) - D:\AutoRun.exe -- [ UDF ]
O32 - AutoRun File - [2007.01.26 10:40:58 | 000,000,149 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2007.01.26 09:06:20 | 000,651,264 | R--- | M] (Electronic Arts Inc.) - D:\AutoRunGUI.dll -- [ UDF ]
O33 - MountPoints2\{42f4b37b-e074-11e0-b960-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{42f4b37b-e074-11e0-b960-806e6f6e6963}\Shell\AutoRun\command - "" = D:\0data\cbs.exe
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:CDFF58FE
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:E3C56885
:Files
D:\0data
C:\Program Files (x86)\BabylonToolbar
C:\Users\Melanie\AppData\Local\{*
C:\ProgramData\FullRemove.exe
C:\Users\Melanie\AppData\Roaming\ICQ Search
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[resethosts]
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Pannonia 14.09.2012 20:25
Ich habe das jetzt gemacht wie du mir das gesagt hast jetzt als er sich wieder hochgefahren hat,zeigt er mir das an:

Code:
All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKEY_USERS\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\ deleted successfully.
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll moved successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
File  not found.
File move failed. D:\AutoRun.exe scheduled to be moved on reboot.
File move failed. D:\autorun.inf scheduled to be moved on reboot.
File move failed. D:\AutoRunGUI.dll scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{42f4b37b-e074-11e0-b960-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42f4b37b-e074-11e0-b960-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{42f4b37b-e074-11e0-b960-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42f4b37b-e074-11e0-b960-806e6f6e6963}\ not found.
File D:\0data\cbs.exe not found.
ADS C:\ProgramData\Temp:CDFF58FE deleted successfully.
ADS C:\ProgramData\Temp:E3C56885 deleted successfully.
========== FILES ==========
File\Folder D:\0data not found.
File\Folder C:\Program Files (x86)\BabylonToolbar not found.
C:\Users\Melanie\AppData\Local\{0030EFCC-50B8-4063-9E55-B02640CBDC87} folder moved successfully.
C:\Users\Melanie\AppData\Local\{00FC9AE7-F41D-4049-B8FD-9A94FF4D219C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{01B754CC-C33F-4855-BEE2-EB56D3384F36} folder moved successfully.
C:\Users\Melanie\AppData\Local\{03C8E4A0-15DF-4760-89C2-16E971E09857} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0486571B-C2CF-4CA3-BDEF-4B0DB402FAD6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{04CC86D8-603E-47A7-BC33-2246A403B88C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{04E801B0-28C3-4FF2-B9A7-BBEB244DF09D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{05D4F607-6968-4E03-A8C9-E4A053950968} folder moved successfully.
C:\Users\Melanie\AppData\Local\{05E786F1-0344-4766-8E3F-954DDF8A2E7C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{067122E4-C3AD-4C93-AE48-8FA82E71CA1A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{06E0500A-6E0C-40ED-A7C0-96E29C1D9BA8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0828B8F3-F7AB-498E-A4F5-DBB0DC59DD38} folder moved successfully.
C:\Users\Melanie\AppData\Local\{082DBCE7-2E3E-4BE6-821E-E1716687559F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{08E9CFB6-8AFA-48A8-A095-B00E4FA0D3A9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{08FC3A63-CF6D-460D-9339-60BD2AB685B8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{09344D57-C7CC-4E0A-943B-551D683863A2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{099BA482-84BF-43CD-B5BF-1268538376B3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{09FDA880-C0B9-4529-A384-ADF5D852DC89} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0A9BDBF8-4DDE-47D2-BB0B-CB10626EDFA3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0AF0C5AD-FF05-4123-AB66-33F6F2EAEC80} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0B06D8C8-4352-46B3-9D40-DFF781939EE1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0B63828A-9034-4EAA-81F5-09C7C2B2F406} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0C8B831E-A294-495C-B434-A65C995CD8BB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0C979E78-B458-4822-86B2-AF6CDF7C1EBF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0C99E989-906B-43EB-A70C-FFFC9C616789} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0CC8F33C-8784-44B0-A0EA-2609A73E4D66} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0D7B2D4C-9C6F-4B56-86CD-B470BC1DA59C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0DADA1FB-AE78-4AD0-94C7-E67F35E6179B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0DEE95C0-A8B4-43A7-8838-B169502F4F0D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0E22858B-82F8-4E8B-BB19-854A4DB2F4F6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0E3A3808-BC60-4B94-9322-7FCC1AAFC088} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0EAFAFDB-E756-41FA-BF32-CFCD7B04FC05} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0F3168F3-DDDD-47CD-BBDE-C4B291E49F34} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0FADC998-BB34-4FB2-8C8A-65C4B6FE4D9A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{0FBF43D6-CE4C-4E0D-9D99-3EB2A733DDDB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1010ACF7-4A38-4FEB-A4A8-4C764F77082F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{10261138-3621-4922-9A28-8F2A70B2E949} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1042356A-7B83-4D4B-AC81-4CA858D1A5A6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{11170934-2C25-449A-9A20-372AF877CAD1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{124658BF-DCBC-446C-9B2F-80DD0A8E9DA6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{12560B52-561F-4928-A1A5-22B66DBA3443} folder moved successfully.
C:\Users\Melanie\AppData\Local\{12DAAF28-2020-4315-9F72-F366733CB25A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{12EBC12C-9663-473A-AE0C-7D4ADD5BD5A4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{147DE701-D6A2-42C1-8E99-A708BCA6F973} folder moved successfully.
C:\Users\Melanie\AppData\Local\{15274827-FCE7-475A-A02E-F2361633EE89} folder moved successfully.
C:\Users\Melanie\AppData\Local\{16141A07-00B2-43CE-8818-24D7649335E5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{169D05CD-9B51-42E3-89AF-A32B8001A18D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{16B80DA2-D002-49A6-8FFE-8367024AA91B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{16FBEBE0-89A6-460B-99E2-B7A6BC1BB95D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{17996057-DB17-4811-9B86-A5AA992A6C9C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{17A1911A-C905-447E-B1E4-79886D072847} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1893EB09-D94C-4D8B-9B35-BE0E4F805292} folder moved successfully.
C:\Users\Melanie\AppData\Local\{18D3BA5E-1003-4311-836B-2F84714624AF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{19788900-B59C-4FA8-AED5-6074EDB016D0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{197A695C-6502-40FB-A43B-9CFE5CB405FD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1A2871D2-B186-4D1C-8D73-ED0AD313DB5D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1B9EE54C-D2C8-4F5A-A3F1-071CD6C420D4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1C1055D9-E04E-4B7F-84AC-A98BF36D0DF9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1C1B4F69-69D1-48C2-A978-4197E620A357} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1C6C4EE0-9E08-49CF-89B7-6DFA585211D8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1C718F1F-6E93-449E-873D-8BE5B1A05A87} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1C7921AB-41EB-4F34-9292-2B8F8788F4F0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1D0E2B24-0B1D-4B5A-AEB2-2945045EFEE7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1D197DEA-8614-4984-9D29-1A0E5669812B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1D41274B-56AB-430F-B1AC-02ECAC2CC9BD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1F8202E5-914B-4CC5-A631-48ECE066EF16} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1FB34C0F-A474-425F-B61A-F2D4AAE064DF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{1FCAD53B-9D77-468B-9146-43F3EE8BF206} folder moved successfully.
C:\Users\Melanie\AppData\Local\{20021867-7FC1-4FF6-82DC-B0FF25873AD8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2015DD73-7749-4AB2-BB7E-17F2DD3D42F2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{20EF0939-B667-4333-8E0B-DA8A3762608E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{20EF3604-3C3D-4B95-869F-C83E17B54A5F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{21BEB49C-6D84-418A-B05C-D2436E7AC910} folder moved successfully.
C:\Users\Melanie\AppData\Local\{21C07D33-D2C0-4796-A8BF-541248B880C1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{22649002-A8A2-40D3-A166-676067EEA2C6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2295CAC7-E6F4-4A91-825B-2B143FBFCDB6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{239E6726-612E-4907-A09E-0F2515E60CFB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{24AD1D87-255C-41F8-B524-E77A77287125} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2518489A-6F7B-4D46-B453-89C20B599217} folder moved successfully.
C:\Users\Melanie\AppData\Local\{254714FC-30E6-462D-AAEA-B1569FD2DB31} folder moved successfully.
C:\Users\Melanie\AppData\Local\{263A7BCC-A8A1-4E7D-8E73-1128C050B4AB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{26FCD428-DE64-4C8F-9466-DAD4274D2C5C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{27294222-EE4D-4AD3-9443-D3C52AA3A054} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2755AECD-6A09-4C89-B684-4B82B0C8ED35} folder moved successfully.
C:\Users\Melanie\AppData\Local\{288CF970-E55E-4711-B4C3-8A37406FEB86} folder moved successfully.
C:\Users\Melanie\AppData\Local\{28AF6EF1-20E8-462F-BC8A-401CB42703C0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{292B0FA4-6F77-4B73-BE71-3B0754F372AF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2986CDE0-EFF9-44E9-87EB-13B3EDC85C15} folder moved successfully.
C:\Users\Melanie\AppData\Local\{29AA516B-56BC-4474-8DC6-07710D6313F2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2A978B17-85A1-48F5-B7F8-5498B5BEDADC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2AED8D60-55D8-40AB-A869-51AA8ED04BD5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2B612C59-63AC-49DB-BA88-AEB504A42109} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2B99460F-2511-4D47-A528-39C641128902} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2CE596D9-A306-48B9-8ED9-7A771EDDE54C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2D0071F2-4180-4ECC-89E8-14A0610217C8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2D450A3D-DD96-470A-BFC3-CEDA6F8550BC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2DF7036F-B5A5-4D26-8A89-7DACE19E867A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2E205CD7-8761-4657-8D43-958121C546FF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2EA22856-2E8D-4B2E-98DD-CFBD0B2C3CA3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2F0FC11E-3860-4818-B6D4-660509217B85} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2F407F71-CE69-4EBF-BE7A-32D4D8CE57D0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{2FDB22D4-8878-40A8-950A-046F4B975643} folder moved successfully.
C:\Users\Melanie\AppData\Local\{311BC5D7-3791-4D45-B32C-5122A7530BE9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{31D1778F-8D0B-4AF3-8D59-580F580F1887} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3229160E-20EB-4D0C-AD85-58D392312249} folder moved successfully.
C:\Users\Melanie\AppData\Local\{331BAD84-522F-476B-BC06-DCA0606C7A22} folder moved successfully.
C:\Users\Melanie\AppData\Local\{342C098A-90CB-4543-AB4B-4F26FE4FCC01} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3545252F-AB6F-4C52-8EDA-29D8610CFD5F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{35AFB0E7-F5EC-4C3F-923A-88BCC3BD59C8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{35DF95D7-745E-493C-B363-1FEEF9CB75E2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{36B38125-E729-4A89-B5F4-EDEC840ED984} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3715F1B0-BA15-4072-AF59-BE1EE9727D91} folder moved successfully.
C:\Users\Melanie\AppData\Local\{37AE9E9F-610C-4ED0-B2E8-CDA638E8CC6D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{388CB3B9-0001-4305-B5A5-04E3D6891411} folder moved successfully.
C:\Users\Melanie\AppData\Local\{394AA256-EE4C-4E21-A5C3-929619965B21} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3959C510-6CC7-4304-9159-D3230E1322A7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{399014CE-801E-42C1-9114-8439BA4A216E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3AE55016-1380-4A27-AD95-91CBCBFEE96F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3C1D5576-4B92-4046-8B7E-8C2A73453BBD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3CD0F3F8-3D39-4B4B-BCEE-F04234123FA9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3CED44EE-89BE-4082-AF29-DFA009F45FCD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3D502E34-45C0-49E5-9941-F6F03A27EB20} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3DB7CD1F-8E97-44D9-857D-0F2EFC5FC00D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3E5E6523-6244-40C8-B7F7-90B8F31219C4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{3FB0DAC3-DA67-4EC8-A26E-6590AA438B73} folder moved successfully.
C:\Users\Melanie\AppData\Local\{40F1837D-1E6C-42DD-8ADC-242E530940CB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4103EDD8-749D-4A74-AF12-D85AED892C6C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{422EE593-25E9-4EA3-A836-BF280D57E9CB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{42BBAFF8-91C0-4A90-B5CA-3491640FFB70} folder moved successfully.
C:\Users\Melanie\AppData\Local\{42C98FA8-EC31-4B66-8F1B-B70C19C4B13B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{42D0C3DA-BDE7-4062-94C4-CA435783C1AC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{43164CBB-0D89-4A43-93F3-D735CC0D7242} folder moved successfully.
C:\Users\Melanie\AppData\Local\{435F2934-7084-4B4F-924E-33AAF9E89419} folder moved successfully.
C:\Users\Melanie\AppData\Local\{43FC01E4-0A2E-4350-9F9B-31BF69E37B4A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4473F09A-510B-442D-8E6F-735E0425EA43} folder moved successfully.
C:\Users\Melanie\AppData\Local\{448A546F-D24B-41A2-A139-70E32CCC6853} folder moved successfully.
C:\Users\Melanie\AppData\Local\{44C54C1F-A3FC-47C5-B315-7857A3FDED7F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4597BBA2-B4E7-49BE-AC97-8B128B5DBA0A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{45B1B091-4629-4AC0-81CC-9201A03309A4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{46062B32-ECF5-4585-9A63-9BD7EF69598C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{46110A78-4791-496B-B0CC-5B8F913EBA6E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{462C8F94-1323-4815-9BA2-CE08630A2F58} folder moved successfully.
C:\Users\Melanie\AppData\Local\{46E8015E-08F0-41F8-8D52-7844ADF787ED} folder moved successfully.
C:\Users\Melanie\AppData\Local\{47696B61-69B3-415D-95BB-B4DD951D6BD1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{477BF34A-6AAB-4250-B0FB-B98A6FF3CEBB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{48662074-BAC1-4A07-ACB7-1F7E9D8FB08F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4A2E9405-B98D-41C4-B695-C6EA3CF6365C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4A591910-AA58-4AB0-BB44-13AC7CEFFF4F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4C8188FE-2350-4457-AB34-88E5DCE4C3A8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4C87B87F-9B93-4A0A-8DD4-7F38F1219819} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4CFCCE4E-53B6-4D85-96D1-3BC85AA79D0F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4D3AE202-37A7-4191-AE6E-CC31AA32567C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4D666F67-D2AA-43AD-B854-50AE3452CFE6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4DDA20C4-0EB9-4149-AD8B-E32E3F3E8A79} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4DE65079-FD04-4903-A392-4E20F6A3B5E8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4F09DFC8-2BAC-49A3-A192-EB10FAE159C9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4F2D1396-CED6-4CA5-AB20-AD866684F551} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4FCFE33B-0A7D-41E4-BC1D-D37A17BE7974} folder moved successfully.
C:\Users\Melanie\AppData\Local\{4FF92188-1824-49DB-9F12-8683D5E258CB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{505174B3-3097-4D17-8E13-39A5A25E7413} folder moved successfully.
C:\Users\Melanie\AppData\Local\{519F27C3-8811-4FF1-AF67-D3185DC1B647} folder moved successfully.
C:\Users\Melanie\AppData\Local\{51FA061E-2549-44BC-8AC4-37FAA9BD3FC9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{520D8755-E930-4A0A-B6C0-4597F030DFA9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5406041B-4B11-473C-91B9-D9754EB659EC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{54AE382B-90DE-4365-8F36-8C32AF78AB4D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{54B3E14C-268A-4BE1-A7F0-C1F1D866CDD6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{54CF6C54-2609-4C86-AFC8-982263B213F8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{55769E01-EA73-48C9-8995-BAFA0315AC4E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{55FA71C7-6C15-45F2-B372-9DE70348B951} folder moved successfully.
C:\Users\Melanie\AppData\Local\{56122E37-2F24-4AC7-8493-E0F36CEE319A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{563C9814-851D-427D-B935-F696A567E43D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{574D5D59-A599-44D0-BDD9-65B02173F55A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5765863B-6D7A-4653-9145-A1109354C646} folder moved successfully.
C:\Users\Melanie\AppData\Local\{576CCC68-06AA-4439-A54A-0BFD39ABEBD5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{577D96A4-C32C-4720-B085-68D70D9C959D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5793BA23-6BA2-4638-93D1-0BFB98C9D2CC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{58EAFD40-9396-481A-890B-1907CF06ACCE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{590AC50D-AF09-4D64-8D31-070A00EBBC87} folder moved successfully.
C:\Users\Melanie\AppData\Local\{59825608-D0B1-40AF-8E2B-F2A865037752} folder moved successfully.
C:\Users\Melanie\AppData\Local\{598B5BF9-11CF-4B55-9371-1283D3BA5F3D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{59F751F6-E68A-4515-B75D-F54B1838CE3B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5AA93088-98F5-40DB-B253-E3A1F30668AC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5B5E2A63-1058-4CB3-B8E7-57DC799AD875} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5BAF971A-D184-4D16-9F94-22BCDE3ED2DE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5C3E5A0A-00AC-4ACF-B319-85E30B400254} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5D8C6634-9852-4599-9E69-A6364FA0D20B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5DCB6AED-E9ED-48A7-91C7-630D8C0D85A7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5E884E18-9423-4F59-BD50-CE4ACF749668} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5F0CCA6F-E72C-4760-A453-A132B6257121} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5F1F347B-9F16-40FC-827E-453EBB255B18} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5FBA47AE-F382-46D3-80EA-77A2451691D7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{5FD6F127-082B-4181-973B-E3EB1DD47F97} folder moved successfully.
C:\Users\Melanie\AppData\Local\{605DF49D-B99A-474C-B0C9-1AD9E28BF279} folder moved successfully.
C:\Users\Melanie\AppData\Local\{61B4189D-DE38-4E48-8921-9C4CF87E86D5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{61C584D9-0443-4201-8111-AC7CCEF1215B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{61F88197-3B99-4D53-B3BC-F8D61EF3C045} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6210CC4A-150C-4881-B707-14BE4EE7A2A6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{62A5E531-41EC-4E88-90AA-766F6E3500A0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{63ADCF8B-CC90-4E34-810F-3A0D23D84035} folder moved successfully.
C:\Users\Melanie\AppData\Local\{63BC9441-F64E-4A11-9F58-C491224AD194} folder moved successfully.
C:\Users\Melanie\AppData\Local\{647F7569-37F1-418E-A636-F0FDFFE89805} folder moved successfully.
C:\Users\Melanie\AppData\Local\{64D90090-E41F-4A7C-94FB-AD146C27C8E0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{650E0D1F-4102-49E0-9F72-741E76DCBF31} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6587B1F9-14C1-4DFF-A6B2-D6B39A063533} folder moved successfully.
C:\Users\Melanie\AppData\Local\{66C8F7CE-C918-4E85-A588-3C9835FC97F4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6752E9BD-8D05-4461-834D-B79A72F58855} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6765AB66-7DA9-41A0-8BD0-E5709E511080} folder moved successfully.
C:\Users\Melanie\AppData\Local\{689FF632-DBB8-4DAD-B534-650D71FFB4B9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{68B09E44-E207-40B3-AD27-16280B6C2F6A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{69BE68EE-DE52-4E1F-89D5-4E42D5FB0C85} folder moved successfully.
C:\Users\Melanie\AppData\Local\{69FDA125-01BC-44E5-98AF-39C41CDCE687} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6A2F4217-CEC0-4D9A-A889-6EFF1DE02DA8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6AF4EBF0-5C0A-4EFD-A91E-0DEEE985A487} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6B19279F-D289-486C-B538-EBB955F67C9C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6BE2C0D7-BD1B-470F-B70E-82138FECFA88} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6C4F06C4-73A7-4134-919E-4EB14C9E9D15} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6CB94A0C-DF95-43F9-B196-9EF0A18B7CB1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6D2DB84E-F5E0-44A6-8129-F3D37D014686} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6D37D969-B338-4A47-A0DE-939A75AA64B6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6DFC61BF-A940-4857-99D2-8B28A0AF7103} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6EB59363-9774-4C38-A718-7168BB034D9E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6F4DA4DB-0D1D-495F-A134-9B0CD63CD34D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6F62078C-7B2A-46DC-AFFD-9F424210C59D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{6FAE1316-58D2-4F78-B4ED-38E4F372282C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{70049997-D12D-4497-82ED-C79A63DC2765} folder moved successfully.
C:\Users\Melanie\AppData\Local\{708CCAEE-DCB1-4B19-B782-74F5D2878B21} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7131BA2E-314D-4C7B-99B3-0B630E0FAD79} folder moved successfully.
C:\Users\Melanie\AppData\Local\{71BCA5A1-4C7D-415F-880B-AAC68F0CD421} folder moved successfully.
C:\Users\Melanie\AppData\Local\{71DFF0A3-1990-49F0-99D5-859763067E6C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{72644E8F-7FB6-4D60-8913-E61BB836874A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{72DF68F2-5E15-4427-959B-D0A3532AC865} folder moved successfully.
C:\Users\Melanie\AppData\Local\{72E38378-517F-4041-A2FC-FE4665305B4E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{73818952-D2E9-44F3-909E-98F751943AA6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{74433BDD-1D60-44F4-A7FF-23F376E80228} folder moved successfully.
C:\Users\Melanie\AppData\Local\{747FADDE-1395-4B16-83FF-355B1EC3F397} folder moved successfully.
C:\Users\Melanie\AppData\Local\{74802F3C-3208-42CD-87F6-C8F3C77BE6BE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{750C8C6C-4EBF-4662-B3CE-A01B6644C2B9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{75FBC189-A5FD-4890-B5E2-25F6571E763E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{77903B0E-718E-4DD0-B8E7-9B163612237F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7819F607-AB2A-4649-8D13-953A8595B40A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{78874EDC-22B6-42B4-B3D6-C767A0FEA6B4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7888132F-60C4-4E61-BD7A-9C50BD7ECF00} folder moved successfully.
C:\Users\Melanie\AppData\Local\{78BB26BA-4C92-456F-B754-92DF4694E80F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{79225090-CC9B-405B-B1C1-871443FDC220} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7930C0D2-E8B3-4427-84E9-C897F7BA4CA8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7AD8EFE5-5F93-496E-9739-EF0723BE8C64} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7B123CB6-8333-4E79-99C7-EC6851850837} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7C054CA1-9E53-44D9-942C-894C33D1CF28} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7C162E15-738C-4283-86FD-19239C2F84CE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7C51DD84-DF27-4A99-97B6-B633627F15EB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7D0DE264-75FB-4FDE-ABCB-9BDB8657CDD5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7D780509-8A5A-4870-AE4A-3CEED8717848} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7DA6F287-A34B-426C-923D-EC1B19232647} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7DB699D1-CE7E-4669-8D59-F58DD5C59526} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7DDAC93D-55F7-4BF3-9839-F1CD5DCE9F03} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7EE20FB5-DA0E-4487-BCB5-8ED73191D4B9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7EFF9C7C-125F-4ABA-8A2B-A612A7A4FE82} folder moved successfully.
C:\Users\Melanie\AppData\Local\{7F540A40-6563-4EF4-803F-9977E85B749C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{801529AE-68E5-499D-8C01-3017F85E7711} folder moved successfully.
C:\Users\Melanie\AppData\Local\{808F63FD-D40B-48D3-9572-EF2915BD0F69} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8236840D-3761-4EB6-8964-7512EA15A4A3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8269F409-A885-41AE-9B92-EA4FC6F61A26} folder moved successfully.
C:\Users\Melanie\AppData\Local\{83047CCC-9706-4BCA-88D5-BAA615FB429A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{835804F3-6050-47E0-9E1B-7AB380630844} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8398082F-3208-45A4-9112-BFAE25DD4B78} folder moved successfully.
C:\Users\Melanie\AppData\Local\{83B10B6B-263D-4099-BBDE-9F951BD1FD76} folder moved successfully.
C:\Users\Melanie\AppData\Local\{841EB7F0-2623-4935-A1C0-6CC1BE4534F8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{847A79D1-02DD-42AE-8DA8-C2F323FB668D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{84F00F99-2AC4-4DDC-8EBE-80DE5191F409} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8594FBE1-1C3C-4C5A-A8A0-24F350054E8D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{85EC9321-A9FD-4C3B-8262-14CE0B15CD67} folder moved successfully.
C:\Users\Melanie\AppData\Local\{86426521-B3C4-4E5D-AEC7-42BAF4E05EA4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{86A5E74B-2D83-4AD2-9CA9-AF13B295886F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{86BF36BF-B21A-45C4-86FB-E33350F7D0F4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{88290AEE-1BD5-440E-A05F-CA9D0231EB40} folder moved successfully.
C:\Users\Melanie\AppData\Local\{88F24C6C-FFD2-422B-B8F1-6B959ACF7F43} folder moved successfully.
C:\Users\Melanie\AppData\Local\{88F443C8-BCEC-46A8-8058-95FA93F7A637} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8995A7EC-3DDA-470E-BC96-1E0D6E64F4F0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8A0D0548-803F-4B7A-A777-456CD506A51E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8A956C46-601E-418A-8EEA-E09D477B9193} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8AAF1B44-7A8A-4E13-B2A1-8C57C060F419} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8AE06928-B3E8-43B9-9327-E98E2FCA4AF8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8BC3F8D9-153A-41AE-BAAB-4D7CB67D3BC2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8C6111CE-4E5D-4DAD-A7F3-DD94BB483D91} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8DD4BCCE-1DA6-476B-8F14-5F5D6348B7F5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8E5534E2-4C26-44BC-93B6-9B7FDD39A61D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8E5B2F68-5938-4187-A34F-92DDD5AE9382} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8E80F03E-49A6-43C9-8F04-E01E8B7CB91D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8EECE079-2780-480F-A3AE-C9CDCF12D2D4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{8F322C86-4370-41ED-943B-627DFCF0E358} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9174F11E-1851-4B96-AF7B-771A62CCDAD8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{919E2E6E-CD89-41E8-AABF-A36062F708B2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{922D063F-5C74-4134-861D-27DC1E63CF08} folder moved successfully.
C:\Users\Melanie\AppData\Local\{92B68EBE-3C57-40CC-83B7-F0357D400736} folder moved successfully.
C:\Users\Melanie\AppData\Local\{92F5264D-2AD2-42BE-BE53-2A4581268230} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9372B481-0B30-4B5F-9651-26CAB4379D55} folder moved successfully.
C:\Users\Melanie\AppData\Local\{93CB1384-BA01-4571-BA2D-0695C6AF22A4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{93FD2E79-1C30-4D62-8026-D8BA22BAB93A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{94957495-5C25-49C0-8CCB-2B4498DD5C1C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{94DE7817-DED2-4AD7-A49A-D3AC6B78880F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9520E2BB-17B1-44FB-8FB9-8B37C40E7BEB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{952BD867-AFC0-43ED-AF37-7F964281A374} folder moved successfully.
C:\Users\Melanie\AppData\Local\{95B28C38-4E8C-4496-BEF5-BC6F8E84F331} folder moved successfully.
C:\Users\Melanie\AppData\Local\{95C93DD6-2480-4C2D-849B-B7E08876C1BD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{96731445-37AC-4804-AACC-B8EF3BC9D2C8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{96E134FB-C964-4965-B27E-70F7B0C4D74E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{97C5E8CA-9FD9-4202-89DF-1A1D29FBFBB3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{97E648E6-9C18-4C23-818B-CCD893F2A77E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{98751E83-F77E-47FB-BBC4-944B05850A82} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9878CAB8-A03D-48D1-85CA-F034649B7621} folder moved successfully.
C:\Users\Melanie\AppData\Local\{997A58D5-3DF9-4C38-9588-862456E65B64} folder moved successfully.
C:\Users\Melanie\AppData\Local\{99E020FC-DD81-4661-9D33-540AD10AB695} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9A5D33C6-8220-4B71-81D2-FA0275F923FB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9B54C466-AA99-4683-A439-A5B36A87F32F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9C3B571C-CE58-4C41-8EF4-2AAD608426DD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9C80081B-B783-4A01-8282-EB90F1687A6E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9C8823F9-1582-45AD-B102-8534BE0B9246} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9CC0914C-6ABE-4090-A627-A0A60400FE62} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9D2EB4C2-D572-4C28-8585-3638EA87CE3F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9D8C7686-7254-4067-B4B6-1A7D77DCB214} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9DFC6571-1821-4FB3-8F3D-7E2CF2DF4CBE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9E40DA5C-BF61-4960-B29D-7F105A0673E9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9E5C92C1-8C66-4D7B-A83E-68A5014CDB15} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9F50794B-7E72-4995-B0CE-155FFCF847CA} folder moved successfully.
C:\Users\Melanie\AppData\Local\{9F8DA80E-B2F0-4684-9023-41769343E5E7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A0BAB5BF-B1A3-450B-A007-0AA14A3538A8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A0EB1482-37F1-47CB-B228-5C92ADAF276C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A14B4F13-5506-46DA-BD57-9B958FFB9C15} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A17C3373-6BC1-4AF9-B445-615DEDE91E8A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A22DFF78-4F9A-4F83-8F84-C63B160CB31F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A28EFE49-7A6E-4EDF-B448-058DBF81DDD2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A2DB85AA-9190-4B3B-AFE9-84B2764E09EF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A39E35D8-51C5-479B-94F3-44556842FCC0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A3BC2949-94B9-4C1B-876C-640C458723F7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A45BF175-A94E-438E-A0CB-BFF2A91792CB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A508F2B4-EA22-4ADE-887C-3C872C475C61} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A5CBA170-318F-4305-931D-380279D4095B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A5CC2CD4-F70E-4886-9003-5BB89F317358} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A5DDC1C7-DD3B-469E-89E4-BB4F8DDAD187} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A63B96AF-D11E-4DF1-926D-F69D97963EBC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A6C47A82-3B01-4C58-8F94-5559A1D4795E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A6C7ACD9-BCDD-4AE9-87C6-8847697A25F7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A78026EA-4FF5-40A5-9003-3CBCB470303B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A7AD3349-6292-42B1-A9E8-67754F09DE5B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A7B42E8B-6AB0-44A7-B5C9-73973175954A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A89C4E94-3BBB-40A3-AA30-B3817E09A9D1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A8A3B941-221E-419D-8215-4C7C12FEF536} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A8C685D1-5347-441C-B80D-E9F30A35393C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A94A2200-F1BE-46AD-BE08-EB0F2CB6CE33} folder moved successfully.
C:\Users\Melanie\AppData\Local\{A95937B4-C37E-47ED-A25A-8EDAAE8FA7C1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AA252061-5B07-4449-8010-DB0BBC41DEE7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AA320A0E-A38A-4F83-940B-7C02AF7F3ECF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AB56DC21-68DA-4F9C-89D6-60C09FAED0AA} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AC976C95-ECDC-42D7-B5C4-920515144732} folder moved successfully.
C:\Users\Melanie\AppData\Local\{ACA7FB69-F5B6-4D3E-AAD3-59D657947B81} folder moved successfully.
C:\Users\Melanie\AppData\Local\{ACC25FD1-8773-425E-B05B-213E34DC26DD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AD2038E3-1625-41F8-8013-65DF8FCB51F7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AD65091C-5999-4638-B8FE-77CF721B9ADA} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AEB23EB0-82C1-4069-81B6-B37EE2CD129D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AF4C8E8C-66C5-45AB-96DE-6233DB398DD7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{AF631B7F-5539-4774-9682-E96EB1518D4F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B01DE9B1-0606-411D-B861-D98DCFDF258B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B054FFD8-E721-4852-AB15-FF7657C6A8DD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B05E7EC8-FB03-4C61-A6F5-D5BD48206DD4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B05F5C08-F3B7-494E-8F07-F7CB51A61032} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B1477A95-2FF2-45D3-B1B5-4D810EE48202} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B1E78AB5-6813-4F5B-97F8-5B08364A1EB6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B24C192B-19AF-417A-BE47-9716FC645514} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B2671432-63BC-4D7E-A2A9-4B641139B56B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B320A95D-58FB-4A04-8181-E5983E072B90} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B3220BBE-9FCF-4EA4-B4AE-67ED182F3C8C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B37EEDFA-4A22-487F-8222-0210072C41F3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B38ECC94-9EC6-499B-85EA-A59C93AF3722} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B3B47615-C418-4A62-9362-BF41C1AC1844} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B3DCCC80-9D4E-4BA2-8368-E08711CCFC90} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B40FC766-194E-4F0B-86BA-1754D3096FFE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B4238720-04DC-461C-8352-30896996E23D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B44A42F2-5297-4525-BA41-D43A0FB5910A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B4703498-07BD-448B-8242-BA5ABD92CACF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B4C33E42-4313-4A29-9D1C-104BC4E8CFDD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B4FCF35C-BA01-4DEE-B373-273202F2D54F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B5B2A1CD-143C-41B8-897D-B77C2FC3E47B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B61B79AD-880D-4E5B-921B-6F7FE96BA01B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B6DC9535-3F9F-4A27-A77A-4C52EB0BBA35} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B6EDF22D-129B-4430-A140-2049C872FF2D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B713F11C-9F0D-4858-B097-C1D87709348B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B7549AF6-E97D-48FE-BE5F-6B43DAD17AC9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B7A1C928-EE8A-4CBA-AA7E-B231DEE48DF1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B7EBAF0B-B6A1-451C-8BE1-EF265F2200A3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B85CDF9A-659D-463C-8F29-45C4667A39A8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B88341D3-3D2D-45BD-8D6C-65778698107E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B9387816-A091-442D-8824-225A0E19E8D4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{B946A244-2E77-446B-B759-24128FBD2127} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BAE64038-B51C-4A62-A787-61B261DA04D1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BBACE06E-E981-4876-919A-1D99EA2357B8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BBF66656-613B-4755-9779-6BFEF6A9182A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BC01371A-D6D8-4A8F-8693-9A69FCC5D613} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BC157FBA-B049-424E-ADD5-A49055655E83} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BC5D4BF3-D96B-4F41-8704-F8085A7A56FC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BCAD7374-7A70-490F-AC1F-2F02D7A016BF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BCF24F0E-4EEC-4F59-BFF5-ED69478B3337} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BD0BBADB-FB9B-4A74-8A9B-FAC1979006A5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BDF220CE-077A-4C2B-9F20-2A8DB15160CB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BE656191-7778-45ED-AAD5-7BF3C2B0609C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BE84DDE0-A7BB-4379-B025-55A8D4BCE2C3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{BF10E603-38FB-498A-912C-4C4CCB9624F6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C0538663-10FF-4ABD-ACAC-822CC8E1A7AE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C075CCF8-6D7E-44FC-AD51-FB306F6173D3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C0F9352A-DFAD-4690-9E0F-1FF8765EBFD3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C152C458-0077-467F-B85C-281210F52BFB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C168C386-CA7F-4C44-A70D-F872629DF66D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C18CD15A-27BF-4B9B-9591-D505723E2CC1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C194AC90-95F3-4655-BA6B-B209251FCC89} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C28E3C51-76EE-4620-A355-7618B821CCDB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C2F6932A-5998-4DA1-8DE1-211266201BD7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C34E80E6-4185-41C0-AA79-CB12183A8130} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C48E6904-88D8-4E84-A684-730D1693EFE7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C5A17BAD-C9A5-4B41-97CD-861AA34BBDC6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C5D0AF16-DEB5-4721-8916-D424BA5DD868} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C6290B26-C57D-4653-8280-68CC0E5B797F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C64469AC-118C-42C6-B95A-131AFFDF79F6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C67300DA-504B-4336-A756-D7A7336A5C30} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C67C8F1C-49E6-4C9F-AA86-B70303431DD3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C6988953-AA18-41FE-9E6F-5F861D139B83} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C6A133B1-3A6D-4D15-BECD-FE3831F540AD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C8F8ED12-7CE5-4663-9F5A-64705CE23DB3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C92DFE8A-9724-4BA8-8F99-19D97DABF7D4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C9C4FD4F-6D21-445B-8B53-BE5991E017DD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C9CF8A1A-2912-46A1-A0AE-5CBA4CAB7D6D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C9D535E4-6EA4-4643-B260-1E92BDD0F140} folder moved successfully.
C:\Users\Melanie\AppData\Local\{C9F910F9-B689-4CB5-83CA-D4AA579D9953} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CABE789E-23F8-4741-821A-4C8369039445} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CACBC577-7E9C-44DD-912A-08D0833B589E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CAD25DA8-B405-44AD-9522-6ADAC0AEFDD1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CAF85E68-88FC-42D5-B09E-D8F549C62A43} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CCD0BD72-2D15-4B3D-8861-67F02B6CD44C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CDB72E9F-CA27-4000-B973-2721970239FC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CDE30105-8405-483F-ADA0-BBA11830D4F8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CEB83235-8E20-45BB-AB93-CF9E528C61B3} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CF3299CC-8DCB-46D7-80B0-4311EBEDD7F5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{CFA434DC-C548-4927-B902-9A80BA667A1B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D0268BFC-1B99-4B2B-8999-D1609A69FA36} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D06243DF-4F1F-4B42-AC04-4BDA89ECF486} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D1914420-0BDA-433B-84CF-74B7AE5E10F5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D1D60CDD-6E70-43B3-93B6-17FB1BF8AC00} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D255C16D-C36E-49C3-9A69-D56052F79F3E} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D25E24D4-9359-4F74-83C4-4B07A1B9B1DE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D2E583FF-43A8-4748-A7BE-A380A2142615} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D31425AD-E69C-4117-9CBE-EBF003DB2453} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D3549482-0DFA-4984-81E5-97EE0BE805A4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D37FEA78-4843-4037-B213-1357CEC195A1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D5755570-EC0E-41FE-AE15-5B840E40638B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D5888781-9D39-49BE-A4F1-23C0F2DF6D48} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D70A3B48-A4BF-42E5-BE73-06A71D387D11} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D71A6E0B-700F-42DB-BC1B-8D4396EECF0F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D85DE901-A412-4223-8E72-377D7429A895} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D8E25845-5189-4432-986A-1DD0AAD9F60C} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D9439164-D87D-4007-80D5-6ECE44E7FFB0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D9934ADB-E1DE-4AF4-BB23-1633E9A16B48} folder moved successfully.
C:\Users\Melanie\AppData\Local\{D9E23E97-5448-4458-A1E1-44521513C548} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DA31181C-CF6D-490D-B793-6875C2DEF861} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DA3854F5-D8F8-4BD2-899B-3896DE8CDED2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DA7CDF3A-5AC9-405C-9105-FA887AB1A17D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DAEF8D2F-0189-4C6E-BCE6-9FEAB10EF5DE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DB08DF1C-8FA8-4DA3-B0DA-3D6361A243FD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DB107288-9CFC-403E-BB5D-9F2C69F673D4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DBE630F3-B5AC-4E8C-8A8E-E275F48DF735} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DCA1FD29-DD82-479E-ABBD-3C0016F24DEF} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DDC6340C-6987-436C-87CE-FE3121E86C56} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DE0A9E46-6190-4C82-B3DA-C8958BD3452F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DE2D5787-29B5-453B-8424-9627EE5EBECA} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DE6228DA-2163-443D-9DFE-629FE6C5D33D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{DF8154CA-4027-4860-A035-894AF1769221} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E007852D-DEBE-4D97-8C1E-4CA93CCC6B05} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E1BEA1C5-8C23-4D1B-ADDC-49C6ABC9B1C4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E1DF6D72-4FAC-4D8E-AAC9-1067611A62B6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E1F55477-832A-4539-A531-04B5E5A0F1C8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E2A3370B-6143-4529-B556-DC794268E2EA} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E4671F7F-B6FF-4CB8-8C30-C1322E60D544} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E53FE858-6056-4A2C-938C-F0683DEB7CB0} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E5D378FA-1FEE-42A4-A0C9-EE29B8E44BCA} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E6327101-DA14-4D3D-9B23-0912E953AF49} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E663DCF8-F724-418F-84AE-FE072FFF049B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E72EB407-56AE-4335-9AA0-E846AA9E131F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E7D33AF7-57F0-41FA-834B-364B4655CF92} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E7ECEF7E-6BB4-45DB-8A38-CBD056AFDFFA} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E869FFB2-51B4-4027-B3C7-B3E0BF35CF00} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E9021A22-90C4-46A4-81E9-3406A9B0992F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E9039DE7-AF15-4371-836B-63B5FDD7BD31} folder moved successfully.
C:\Users\Melanie\AppData\Local\{E93D53CC-CF15-4C36-9920-D8FDCE473463} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EA5D44E1-F053-4519-B7D7-234C52F1F7E4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EA7CBFBB-F451-4DA8-BF59-D00E86BC0B7A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EA9EE3E3-9F77-44E8-BE0A-D8D05BF2324F} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EAD0EF97-3056-48EB-AD95-557D59015A08} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EBDDFD60-E610-4EE0-B6EE-033C1CE2C81A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{ECA468A9-690F-4BBB-BC4D-B2683D8C771B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{ECCBB953-B911-4250-9A13-742E0EE7161A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EE0934C8-EB7E-4505-AAF7-BAD649D1465D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EE164AA5-A855-4336-AFA4-A6BAFC522ABD} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EE4C3635-B807-449C-A5F7-20CA48BCD075} folder moved successfully.
C:\Users\Melanie\AppData\Local\{EEF385A3-5753-4BDC-916D-DD8F1E774809} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F00A4AFD-5809-47B7-89B5-F826037215E9} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F020CCFD-4468-405B-9593-D672D9578CAC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F0D89668-1E70-4D74-A72C-E9DF5A86AED4} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F1F7E008-7EBD-4B29-B436-8E17D34339AB} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F24CA7A2-C3D7-4ADE-91FF-A825C9BDA3A1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F2A5D7E7-ECBE-4AB2-893F-E07EE19CD87B} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F2FCC17F-FE97-43EC-A353-BE4C104A8AD6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F3421B43-092A-4ECE-86A3-391B0E994A4D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F3D7FF81-2B14-4FBD-A89A-CE09AF3B7023} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F63D8AF7-B648-45BF-824A-89D4CB2C00DC} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F670279F-3979-46BE-9EAB-3384EF1B96D2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F73D528F-F03A-4CAA-9BB4-CC787B1995F6} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F78C1AFE-C2E1-48D8-A79A-ADBC3926D784} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F8023AD7-D477-4011-9DAB-BB9727A739A5} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F8817253-DC49-4895-94AF-9CA1CA5814E2} folder moved successfully.
C:\Users\Melanie\AppData\Local\{F8B16430-963F-425F-9FB5-32845C5E7F1A} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FAAA8AA5-6158-47A1-AAB0-0FC72F76A4F7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FB7C4D11-98BA-4B56-82EE-2727DEC7B62D} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FCF20820-2CAA-43AC-A8DD-8AF542715139} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FD4D06BD-951E-44E6-994C-57EC798ED434} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FDC30D96-26DC-48B4-B248-60870801F825} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FDD204C4-E600-490D-9481-08415B2C2AB1} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FDFAF468-A930-4DFD-BAA3-F3612CED79B7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FEB2F372-4168-4C84-85DC-CD75D5038ED7} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FF5B091B-4F00-47FD-978B-602412DE10CE} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FF66D07F-09C8-43FD-958B-ADC25C5096C8} folder moved successfully.
C:\Users\Melanie\AppData\Local\{FFE39496-A78D-4840-911B-29D33ECB1C3A} folder moved successfully.
C:\ProgramData\FullRemove.exe moved successfully.
C:\Users\Melanie\AppData\Roaming\ICQ Search folder moved successfully.
< ipconfig /flushdns /c >
No captured output from command...
C:\Users\Melanie\Desktop\Ausführungsdateien\cmd.bat deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Melanie
->Temp folder emptied: 20541129 bytes
->Temporary Internet Files folder emptied: 92462005 bytes
->FireFox cache emptied: 247005688 bytes
->Flash cache emptied: 62750 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1377289 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36049050 bytes
RecycleBin emptied: 54020 bytes
 
Total Files Cleaned = 379,00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.61.4 log created on 09142012_211632

Files\Folders moved on Reboot...
File move failed. D:\AutoRun.exe scheduled to be moved on reboot.
File move failed. D:\autorun.inf scheduled to be moved on reboot.
File move failed. D:\AutoRunGUI.dll scheduled to be moved on reboot.
C:\Users\Melanie\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

cosinus 15.09.2012 12:06
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtg4nzy0ywy5/settings_2012-09-04.png

Pannonia 15.09.2012 14:29
So das hat er mir jetzt angezeigt


Code:
15:19:06.0923 4736  TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
15:19:07.0105 4736  ============================================================
15:19:07.0105 4736  Current date / time: 2012/09/15 15:19:07.0105
15:19:07.0105 4736  SystemInfo:
15:19:07.0105 4736 
15:19:07.0105 4736  OS Version: 6.1.7601 ServicePack: 1.0
15:19:07.0105 4736  Product type: Workstation
15:19:07.0105 4736  ComputerName: MELANIE-PC
15:19:07.0105 4736  UserName: Melanie
15:19:07.0105 4736  Windows directory: C:\Windows
15:19:07.0105 4736  System windows directory: C:\Windows
15:19:07.0105 4736  Running under WOW64
15:19:07.0105 4736  Processor architecture: Intel x64
15:19:07.0105 4736  Number of processors: 2
15:19:07.0105 4736  Page size: 0x1000
15:19:07.0105 4736  Boot type: Normal boot
15:19:07.0105 4736  ============================================================
15:19:08.0361 4736  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:19:08.0361 4736  ============================================================
15:19:08.0361 4736  \Device\Harddisk0\DR0:
15:19:08.0371 4736  MBR partitions:
15:19:08.0371 4736  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1A00800, BlocksNum 0x32000
15:19:08.0371 4736  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1A32800, BlocksNum 0x38953000
15:19:08.0371 4736  ============================================================
15:19:08.0391 4736  C: <-> \Device\Harddisk0\DR0\Partition2
15:19:08.0391 4736  ============================================================
15:19:08.0391 4736  Initialize success
15:19:08.0391 4736  ============================================================
15:21:31.0221 3748  ============================================================
15:21:31.0221 3748  Scan started
15:21:31.0221 3748  Mode: Manual; SigCheck; TDLFS;
15:21:31.0221 3748  ============================================================
15:21:32.0991 3748  ================ Scan system memory ========================
15:21:32.0991 3748  System memory - ok
15:21:33.0001 3748  ================ Scan services =============================
15:21:33.0071 3748  [ 7D9D615201A483D6FA99491C2E655A5A ] !SASCORE        C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
15:21:33.0121 3748  !SASCORE - ok
15:21:33.0261 3748  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
15:21:33.0361 3748  1394ohci - ok
15:21:33.0391 3748  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
15:21:33.0411 3748  ACPI - ok
15:21:33.0441 3748  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
15:21:33.0571 3748  AcpiPmi - ok
15:21:33.0651 3748  [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:21:33.0681 3748  AdobeARMservice - ok
15:21:33.0801 3748  [ B2B64AF436FACCFA854DD397027C5360 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:21:33.0831 3748  AdobeFlashPlayerUpdateSvc - ok
15:21:33.0871 3748  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
15:21:33.0891 3748  adp94xx - ok
15:21:33.0911 3748  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
15:21:33.0941 3748  adpahci - ok
15:21:33.0961 3748  [ E109549C90F62FB570B9540C4B148E54 ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
15:21:33.0981 3748  adpu320 - ok
15:21:34.0051 3748  [ B11C71B29FA69E4586F9B65560E6604D ] AdvancedSystemCareService5 C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
15:21:34.0091 3748  AdvancedSystemCareService5 - ok
15:21:34.0111 3748  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
15:21:34.0311 3748  AeLookupSvc - ok
15:21:34.0351 3748  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD            C:\Windows\system32\drivers\afd.sys
15:21:34.0451 3748  AFD - ok
15:21:34.0491 3748  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
15:21:34.0521 3748  agp440 - ok
15:21:34.0551 3748  [ 3290D6946B5E30E70414990574883DDB ] ALG            C:\Windows\System32\alg.exe
15:21:34.0621 3748  ALG - ok
15:21:34.0651 3748  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
15:21:34.0671 3748  aliide - ok
15:21:34.0711 3748  [ 671D9DCA48DA807780D8409C18ED0AE0 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:21:34.0811 3748  AMD External Events Utility - ok
15:21:34.0831 3748  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
15:21:34.0851 3748  amdide - ok
15:21:34.0881 3748  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
15:21:34.0961 3748  AmdK8 - ok
15:21:35.0101 3748  [ D3E6B2E1394D93FE9DB0BA24814B0D8F ] amdkmdag        C:\Windows\system32\DRIVERS\atipmdag.sys
15:21:35.0433 3748  amdkmdag - ok
15:21:35.0473 3748  [ CC4D915D786D3DA973B2EA9B95D59A29 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
15:21:35.0523 3748  amdkmdap - ok
15:21:35.0563 3748  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
15:21:35.0623 3748  AmdPPM - ok
15:21:35.0663 3748  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
15:21:35.0693 3748  amdsata - ok
15:21:35.0723 3748  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
15:21:35.0753 3748  amdsbs - ok
15:21:35.0783 3748  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
15:21:35.0793 3748  amdxata - ok
15:21:35.0863 3748  [ C27D46B06D340293670450FCE9DFB166 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
15:21:35.0883 3748  AntiVirSchedulerService - ok
15:21:35.0913 3748  [ 72D90E56563165984224493069C69ED4 ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
15:21:35.0943 3748  AntiVirService - ok
15:21:35.0993 3748  [ 89A69C3F2F319B43379399547526D952 ] AppID          C:\Windows\system32\drivers\appid.sys
15:21:36.0143 3748  AppID - ok
15:21:36.0173 3748  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
15:21:36.0223 3748  AppIDSvc - ok
15:21:36.0273 3748  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo        C:\Windows\System32\appinfo.dll
15:21:36.0343 3748  Appinfo - ok
15:21:36.0383 3748  [ C484F8CEB1717C540242531DB7845C4E ] arc            C:\Windows\system32\DRIVERS\arc.sys
15:21:36.0403 3748  arc - ok
15:21:36.0413 3748  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
15:21:36.0423 3748  arcsas - ok
15:21:36.0443 3748  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
15:21:36.0493 3748  AsyncMac - ok
15:21:36.0523 3748  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi          C:\Windows\system32\drivers\atapi.sys
15:21:36.0533 3748  atapi - ok
15:21:36.0613 3748  [ E642491F64E58CD5BC8FB8B347DCF65F ] athr            C:\Windows\system32\DRIVERS\athrx.sys
15:21:36.0673 3748  athr - ok
15:21:36.0693 3748  [ C07A040D6B5A42DD41EE386CF90974C8 ] AtiPcie        C:\Windows\system32\DRIVERS\AtiPcie.sys
15:21:36.0733 3748  AtiPcie - ok
15:21:36.0783 3748  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:21:36.0873 3748  AudioEndpointBuilder - ok
15:21:36.0893 3748  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
15:21:36.0933 3748  AudioSrv - ok
15:21:36.0973 3748  [ B1224E6B086CD6548315B04AB575A23E ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
15:21:36.0983 3748  avgntflt - ok
15:21:36.0993 3748  [ ED45F12CFA62B83765C9C1496758CC87 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
15:21:37.0013 3748  avipbb - ok
15:21:37.0053 3748  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
15:21:37.0173 3748  AxInstSV - ok
15:21:37.0213 3748  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbda.sys
15:21:37.0313 3748  b06bdrv - ok
15:21:37.0363 3748  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
15:21:37.0433 3748  b57nd60a - ok
15:21:37.0483 3748  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
15:21:37.0563 3748  BDESVC - ok
15:21:37.0603 3748  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
15:21:37.0723 3748  Beep - ok
15:21:37.0783 3748  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE            C:\Windows\System32\bfe.dll
15:21:37.0863 3748  BFE - ok
15:21:37.0923 3748  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
15:21:38.0043 3748  BITS - ok
15:21:38.0073 3748  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
15:21:38.0093 3748  blbdrive - ok
15:21:38.0113 3748  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
15:21:38.0173 3748  bowser - ok
15:21:38.0193 3748  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
15:21:38.0303 3748  BrFiltLo - ok
15:21:38.0323 3748  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
15:21:38.0363 3748  BrFiltUp - ok
15:21:38.0403 3748  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser        C:\Windows\System32\browser.dll
15:21:38.0463 3748  Browser - ok
15:21:38.0493 3748  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
15:21:38.0533 3748  Brserid - ok
15:21:38.0543 3748  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
15:21:38.0573 3748  BrSerWdm - ok
15:21:38.0583 3748  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
15:21:38.0653 3748  BrUsbMdm - ok
15:21:38.0663 3748  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
15:21:38.0703 3748  BrUsbSer - ok
15:21:38.0703 3748  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
15:21:38.0733 3748  BTHMODEM - ok
15:21:38.0763 3748  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv        C:\Windows\system32\bthserv.dll
15:21:38.0843 3748  bthserv - ok
15:21:38.0853 3748  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
15:21:38.0893 3748  cdfs - ok
15:21:38.0923 3748  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom          C:\Windows\system32\drivers\cdrom.sys
15:21:38.0953 3748  cdrom - ok
15:21:39.0013 3748  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc    C:\Windows\System32\certprop.dll
15:21:39.0143 3748  CertPropSvc - ok
15:21:39.0173 3748  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
15:21:39.0243 3748  circlass - ok
15:21:39.0303 3748  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
15:21:39.0333 3748  CLFS - ok
15:21:39.0403 3748  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:21:39.0423 3748  clr_optimization_v2.0.50727_32 - ok
15:21:39.0453 3748  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:21:39.0473 3748  clr_optimization_v2.0.50727_64 - ok
15:21:39.0523 3748  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:21:39.0603 3748  clr_optimization_v4.0.30319_32 - ok
15:21:39.0633 3748  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:21:39.0653 3748  clr_optimization_v4.0.30319_64 - ok
15:21:39.0683 3748  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
15:21:39.0733 3748  CmBatt - ok
15:21:39.0773 3748  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
15:21:39.0793 3748  cmdide - ok
15:21:39.0843 3748  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG            C:\Windows\system32\Drivers\cng.sys
15:21:39.0923 3748  CNG - ok
15:21:39.0963 3748  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
15:21:39.0993 3748  Compbatt - ok
15:21:40.0034 3748  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
15:21:40.0075 3748  CompositeBus - ok
15:21:40.0085 3748  COMSysApp - ok
15:21:40.0095 3748  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
15:21:40.0115 3748  crcdisk - ok
15:21:40.0165 3748  [ 4F5414602E2544A4554D95517948B705 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
15:21:40.0235 3748  CryptSvc - ok
15:21:40.0325 3748  [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc          C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
15:21:40.0375 3748  cvhsvc - ok
15:21:40.0425 3748  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
15:21:40.0495 3748  DcomLaunch - ok
15:21:40.0535 3748  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc      C:\Windows\System32\defragsvc.dll
15:21:40.0595 3748  defragsvc - ok
15:21:40.0635 3748  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
15:21:40.0705 3748  DfsC - ok
15:21:40.0755 3748  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
15:21:40.0805 3748  Dhcp - ok
15:21:40.0845 3748  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
15:21:40.0925 3748  discache - ok
15:21:40.0945 3748  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
15:21:40.0965 3748  Disk - ok
15:21:40.0995 3748  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
15:21:41.0085 3748  Dnscache - ok
15:21:41.0125 3748  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc        C:\Windows\System32\dot3svc.dll
15:21:41.0215 3748  dot3svc - ok
15:21:41.0245 3748  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS            C:\Windows\system32\dps.dll
15:21:41.0305 3748  DPS - ok
15:21:41.0345 3748  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
15:21:41.0365 3748  drmkaud - ok
15:21:41.0425 3748  [ 9CF46FDF163E06B83D03FF929EF2296C ] DsiWMIService  C:\Program Files (x86)\Launch Manager\dsiwmis.exe
15:21:41.0445 3748  DsiWMIService - ok
15:21:41.0505 3748  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
15:21:41.0545 3748  DXGKrnl - ok
15:21:41.0575 3748  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost        C:\Windows\System32\eapsvc.dll
15:21:41.0625 3748  EapHost - ok
15:21:41.0745 3748  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv          C:\Windows\system32\DRIVERS\evbda.sys
15:21:41.0885 3748  ebdrv - ok
15:21:41.0925 3748  [ C118A82CD78818C29AB228366EBF81C3 ] EFS            C:\Windows\System32\lsass.exe
15:21:42.0065 3748  EFS - ok
15:21:42.0135 3748  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
15:21:42.0195 3748  ehRecvr - ok
15:21:42.0225 3748  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched        C:\Windows\ehome\ehsched.exe
15:21:42.0265 3748  ehSched - ok
15:21:42.0305 3748  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
15:21:42.0345 3748  elxstor - ok
15:21:42.0425 3748  [ 3EA2C4F68A782839D97B3C83595575B6 ] ePowerSvc      C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
15:21:42.0475 3748  ePowerSvc - ok
15:21:42.0506 3748  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
15:21:42.0527 3748  ErrDev - ok
15:21:42.0567 3748  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem    C:\Windows\system32\es.dll
15:21:42.0627 3748  EventSystem - ok
15:21:42.0647 3748  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat          C:\Windows\system32\drivers\exfat.sys
15:21:42.0697 3748  exfat - ok
15:21:42.0717 3748  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
15:21:42.0787 3748  fastfat - ok
15:21:42.0867 3748  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax            C:\Windows\system32\fxssvc.exe
15:21:42.0977 3748  Fax - ok
15:21:42.0997 3748  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
15:21:43.0027 3748  fdc - ok
15:21:43.0047 3748  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost        C:\Windows\system32\fdPHost.dll
15:21:43.0147 3748  fdPHost - ok
15:21:43.0157 3748  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
15:21:43.0207 3748  FDResPub - ok
15:21:43.0237 3748  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
15:21:43.0257 3748  FileInfo - ok
15:21:43.0277 3748  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
15:21:43.0327 3748  Filetrace - ok
15:21:43.0367 3748  [ BB0667B0171B632B97EA759515476F07 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
15:21:43.0407 3748  FLEXnet Licensing Service - ok
15:21:43.0417 3748  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
15:21:43.0437 3748  flpydisk - ok
15:21:43.0477 3748  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
15:21:43.0497 3748  FltMgr - ok
15:21:43.0567 3748  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache      C:\Windows\system32\FntCache.dll
15:21:43.0667 3748  FontCache - ok
15:21:43.0727 3748  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:21:43.0747 3748  FontCache3.0.0.0 - ok
15:21:43.0787 3748  [ D43703496149971890703B4B1B723EAC ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
15:21:43.0797 3748  FsDepends - ok
15:21:43.0827 3748  [ 07DA62C960DDCCC2D35836AEAB4FC578 ] fssfltr        C:\Windows\system32\DRIVERS\fssfltr.sys
15:21:43.0837 3748  fssfltr - ok
15:21:43.0957 3748  [ 28DDEEEC44E988657B732CF404D504CB ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
15:21:43.0997 3748  fsssvc - ok
15:21:44.0037 3748  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
15:21:44.0057 3748  Fs_Rec - ok
15:21:44.0097 3748  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
15:21:44.0117 3748  fvevol - ok
15:21:44.0137 3748  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
15:21:44.0157 3748  gagp30kx - ok
15:21:44.0207 3748  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc          C:\Windows\System32\gpsvc.dll
15:21:44.0287 3748  gpsvc - ok
15:21:44.0327 3748  [ 0191DEE9B9EB7902AF2CF4F67301095D ] GREGService    C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
15:21:44.0347 3748  GREGService - ok
15:21:44.0467 3748  [ F02A533F517EB38333CB12A9E8963773 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:21:44.0497 3748  gupdate - ok
15:21:44.0507 3748  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:21:44.0517 3748  gupdatem - ok
15:21:44.0547 3748  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc          C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
15:21:44.0557 3748  gusvc - ok
15:21:44.0587 3748  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
15:21:44.0677 3748  hcw85cir - ok
15:21:44.0707 3748  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:21:44.0737 3748  HdAudAddService - ok
15:21:44.0777 3748  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
15:21:44.0807 3748  HDAudBus - ok
15:21:44.0837 3748  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
15:21:44.0887 3748  HidBatt - ok
15:21:44.0917 3748  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
15:21:44.0947 3748  HidBth - ok
15:21:44.0967 3748  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
15:21:44.0987 3748  HidIr - ok
15:21:45.0017 3748  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv        C:\Windows\system32\hidserv.dll
15:21:45.0067 3748  hidserv - ok
15:21:45.0097 3748  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
15:21:45.0107 3748  HidUsb - ok
15:21:45.0147 3748  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
15:21:45.0217 3748  hkmsvc - ok
15:21:45.0257 3748  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:21:45.0337 3748  HomeGroupListener - ok
15:21:45.0377 3748  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:21:45.0407 3748  HomeGroupProvider - ok
15:21:45.0437 3748  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
15:21:45.0457 3748  HpSAMD - ok
15:21:45.0517 3748  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
15:21:45.0597 3748  HTTP - ok
15:21:45.0627 3748  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
15:21:45.0637 3748  hwpolicy - ok
15:21:45.0667 3748  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
15:21:45.0677 3748  i8042prt - ok
15:21:45.0717 3748  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
15:21:45.0737 3748  iaStorV - ok
15:21:45.0807 3748  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:21:45.0837 3748  idsvc - ok
15:21:45.0867 3748  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
15:21:45.0877 3748  iirsp - ok
15:21:45.0937 3748  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
15:21:46.0027 3748  IKEEXT - ok
15:21:46.0127 3748  [ 235362D403D9D677514649D88DB31914 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
15:21:46.0187 3748  IntcAzAudAddService - ok
15:21:46.0217 3748  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
15:21:46.0227 3748  intelide - ok
15:21:46.0267 3748  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
15:21:46.0287 3748  intelppm - ok
15:21:46.0327 3748  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
15:21:46.0377 3748  IPBusEnum - ok
15:21:46.0417 3748  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:21:46.0517 3748  IpFilterDriver - ok
15:21:46.0547 3748  [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
15:21:46.0607 3748  iphlpsvc - ok
15:21:46.0647 3748  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
15:21:46.0687 3748  IPMIDRV - ok
15:21:46.0727 3748  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
15:21:46.0807 3748  IPNAT - ok
15:21:46.0827 3748  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
15:21:46.0917 3748  IRENUM - ok
15:21:46.0947 3748  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
15:21:46.0967 3748  isapnp - ok
15:21:47.0007 3748  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
15:21:47.0027 3748  iScsiPrt - ok
15:21:47.0067 3748  [ 37E053A2CF8F0082B689ED74106E0CEC ] k57nd60a        C:\Windows\system32\DRIVERS\k57nd60a.sys
15:21:47.0107 3748  k57nd60a - ok
15:21:47.0137 3748  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
15:21:47.0157 3748  kbdclass - ok
15:21:47.0177 3748  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
15:21:47.0217 3748  kbdhid - ok
15:21:47.0247 3748  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
15:21:47.0267 3748  KeyIso - ok
15:21:47.0317 3748  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
15:21:47.0347 3748  KSecDD - ok
15:21:47.0397 3748  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
15:21:47.0417 3748  KSecPkg - ok
15:21:47.0437 3748  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
15:21:47.0487 3748  ksthunk - ok
15:21:47.0521 3748  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm          C:\Windows\system32\msdtckrm.dll
15:21:47.0569 3748  KtmRm - ok
15:21:47.0609 3748  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
15:21:47.0719 3748  LanmanServer - ok
15:21:47.0749 3748  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:21:47.0809 3748  LanmanWorkstation - ok
15:21:47.0849 3748  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
15:21:47.0899 3748  lltdio - ok
15:21:47.0939 3748  [ C1185803384AB3FEED115F79F109427F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
15:21:47.0999 3748  lltdsvc - ok
15:21:48.0019 3748  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts        C:\Windows\System32\lmhsvc.dll
15:21:48.0089 3748  lmhosts - ok
15:21:48.0109 3748  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
15:21:48.0129 3748  LSI_FC - ok
15:21:48.0139 3748  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
15:21:48.0149 3748  LSI_SAS - ok
15:21:48.0169 3748  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
15:21:48.0179 3748  LSI_SAS2 - ok
15:21:48.0209 3748  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
15:21:48.0219 3748  LSI_SCSI - ok
15:21:48.0229 3748  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv          C:\Windows\system32\drivers\luafv.sys
15:21:48.0289 3748  luafv - ok
15:21:48.0329 3748  [ B9FC4CCE5758B816F27DD4D1EED11841 ] MBAMProtector  C:\Windows\system32\drivers\mbam.sys
15:21:48.0339 3748  MBAMProtector - ok
15:21:48.0379 3748  [ 0DCF16B1449811EFA47AB52CAC84093C ] MBAMScheduler  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
15:21:48.0409 3748  MBAMScheduler - ok
15:21:48.0429 3748  [ 9EAABA4D601004BEA4DAA6E146E19A96 ] MBAMService    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
15:21:48.0459 3748  MBAMService - ok
15:21:48.0489 3748  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
15:21:48.0529 3748  Mcx2Svc - ok
15:21:48.0569 3748  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
15:21:48.0599 3748  megasas - ok
15:21:48.0619 3748  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
15:21:48.0649 3748  MegaSR - ok
15:21:48.0679 3748  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS          C:\Windows\system32\mmcss.dll
15:21:48.0759 3748  MMCSS - ok
15:21:48.0779 3748  [ 800BA92F7010378B09F9ED9270F07137 ] Modem          C:\Windows\system32\drivers\modem.sys
15:21:48.0819 3748  Modem - ok
15:21:48.0829 3748  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
15:21:48.0849 3748  monitor - ok
15:21:48.0869 3748  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
15:21:48.0889 3748  mouclass - ok
15:21:48.0919 3748  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
15:21:48.0959 3748  mouhid - ok
15:21:48.0999 3748  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
15:21:49.0029 3748  mountmgr - ok
15:21:49.0089 3748  [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
15:21:49.0119 3748  MozillaMaintenance - ok
15:21:49.0149 3748  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
15:21:49.0159 3748  mpio - ok
15:21:49.0199 3748  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
15:21:49.0259 3748  mpsdrv - ok
15:21:49.0321 3748  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
15:21:49.0411 3748  MpsSvc - ok
15:21:49.0451 3748  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
15:21:49.0481 3748  MRxDAV - ok
15:21:49.0511 3748  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
15:21:49.0581 3748  mrxsmb - ok
15:21:49.0611 3748  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:21:49.0641 3748  mrxsmb10 - ok
15:21:49.0661 3748  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:21:49.0701 3748  mrxsmb20 - ok
15:21:49.0731 3748  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
15:21:49.0741 3748  msahci - ok
15:21:49.0771 3748  [ DB801A638D011B9633829EB6F663C900 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
15:21:49.0781 3748  msdsm - ok
15:21:49.0811 3748  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC          C:\Windows\System32\msdtc.exe
15:21:49.0851 3748  MSDTC - ok
15:21:49.0901 3748  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
15:21:49.0941 3748  Msfs - ok
15:21:49.0961 3748  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
15:21:50.0011 3748  mshidkmdf - ok
15:21:50.0031 3748  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
15:21:50.0041 3748  msisadrv - ok
15:21:50.0071 3748  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
15:21:50.0121 3748  MSiSCSI - ok
15:21:50.0131 3748  msiserver - ok
15:21:50.0141 3748  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
15:21:50.0181 3748  MSKSSRV - ok
15:21:50.0201 3748  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
15:21:50.0261 3748  MSPCLOCK - ok
15:21:50.0291 3748  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
15:21:50.0341 3748  MSPQM - ok
15:21:50.0381 3748  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
15:21:50.0411 3748  MsRPC - ok
15:21:50.0441 3748  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
15:21:50.0461 3748  mssmbios - ok
15:21:50.0481 3748  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
15:21:50.0541 3748  MSTEE - ok
15:21:50.0551 3748  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
15:21:50.0571 3748  MTConfig - ok
15:21:50.0601 3748  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup            C:\Windows\system32\Drivers\mup.sys
15:21:50.0611 3748  Mup - ok
15:21:50.0631 3748  [ 6FFECC25B39DC7652A0CEC0ADA9DB589 ] mwlPSDFilter    C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
15:21:50.0641 3748  mwlPSDFilter - ok
15:21:50.0651 3748  [ 0BEFE32CA56D6EE89D58175725596A85 ] mwlPSDNServ    C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
15:21:50.0661 3748  mwlPSDNServ - ok
15:21:50.0671 3748  [ D43BC633B8660463E446E28E14A51262 ] mwlPSDVDisk    C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
15:21:50.0681 3748  mwlPSDVDisk - ok
15:21:50.0731 3748  [ 3E5E20817259F7328C8F3BE5421F35B9 ] MWLService      C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
15:21:50.0741 3748  MWLService - ok
15:21:50.0781 3748  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
15:21:50.0841 3748  napagent - ok
15:21:50.0881 3748  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
15:21:50.0921 3748  NativeWifiP - ok
15:21:50.0981 3748  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
15:21:51.0031 3748  NDIS - ok
15:21:51.0061 3748  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
15:21:51.0111 3748  NdisCap - ok
15:21:51.0131 3748  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
15:21:51.0191 3748  NdisTapi - ok
15:21:51.0231 3748  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
15:21:51.0321 3748  Ndisuio - ok
15:21:51.0353 3748  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
15:21:51.0413 3748  NdisWan - ok
15:21:51.0453 3748  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
15:21:51.0533 3748  NDProxy - ok
15:21:51.0573 3748  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
15:21:51.0653 3748  NetBIOS - ok
15:21:51.0693 3748  [ 09594D1089C523423B32A4229263F068 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
15:21:51.0733 3748  NetBT - ok
15:21:51.0753 3748  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
15:21:51.0763 3748  Netlogon - ok
15:21:51.0803 3748  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
15:21:51.0893 3748  Netman - ok
15:21:51.0913 3748  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
15:21:51.0973 3748  netprofm - ok
15:21:52.0013 3748  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:21:52.0043 3748  NetTcpPortSharing - ok
15:21:52.0063 3748  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
15:21:52.0083 3748  nfrd960 - ok
15:21:52.0123 3748  [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc          C:\Windows\System32\nlasvc.dll
15:21:52.0223 3748  NlaSvc - ok
15:21:52.0253 3748  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
15:21:52.0305 3748  Npfs - ok
15:21:52.0325 3748  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi            C:\Windows\system32\nsisvc.dll
15:21:52.0365 3748  nsi - ok
15:21:52.0375 3748  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
15:21:52.0417 3748  nsiproxy - ok
15:21:52.0497 3748  [ A2F74975097F52A00745F9637451FDD8 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
15:21:52.0557 3748  Ntfs - ok
15:21:52.0607 3748  [ 9A308FCDCCA98A15B6F62D36A272160E ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
15:21:52.0637 3748  NTI IScheduleSvc - ok
15:21:52.0677 3748  [ EE3BA1024594D5D09E314F206B94069E ] NTIDrvr        C:\Windows\system32\drivers\NTIDrvr.sys
15:21:52.0687 3748  NTIDrvr - ok
15:21:52.0697 3748  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
15:21:52.0797 3748  Null - ok
15:21:52.0857 3748  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
15:21:52.0887 3748  nvraid - ok
15:21:52.0927 3748  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
15:21:52.0947 3748  nvstor - ok
15:21:52.0977 3748  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
15:21:52.0997 3748  nv_agp - ok
15:21:53.0037 3748  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
15:21:53.0067 3748  ohci1394 - ok
15:21:53.0087 3748  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:21:53.0107 3748  ose - ok
15:21:53.0307 3748  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
15:21:53.0472 3748  osppsvc - ok
15:21:53.0509 3748  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
15:21:53.0549 3748  p2pimsvc - ok
15:21:53.0569 3748  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
15:21:53.0589 3748  p2psvc - ok
15:21:53.0619 3748  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
15:21:53.0639 3748  Parport - ok
15:21:53.0679 3748  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
15:21:53.0689 3748  partmgr - ok
15:21:53.0709 3748  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
15:21:53.0739 3748  PcaSvc - ok
15:21:53.0759 3748  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci            C:\Windows\system32\drivers\pci.sys
15:21:53.0769 3748  pci - ok
15:21:53.0789 3748  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
15:21:53.0799 3748  pciide - ok
15:21:53.0839 3748  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
15:21:53.0869 3748  pcmcia - ok
15:21:53.0889 3748  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw            C:\Windows\system32\drivers\pcw.sys
15:21:53.0899 3748  pcw - ok
15:21:53.0939 3748  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
15:21:54.0029 3748  PEAUTH - ok
15:21:54.0099 3748  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
15:21:54.0119 3748  PerfHost - ok
15:21:54.0189 3748  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla            C:\Windows\system32\pla.dll
15:21:54.0289 3748  pla - ok
15:21:54.0329 3748  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
15:21:54.0369 3748  PlugPlay - ok
15:21:54.0389 3748  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
15:21:54.0429 3748  PNRPAutoReg - ok
15:21:54.0469 3748  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
15:21:54.0489 3748  PNRPsvc - ok
15:21:54.0549 3748  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
15:21:54.0639 3748  PolicyAgent - ok
15:21:54.0659 3748  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power          C:\Windows\system32\umpo.dll
15:21:54.0719 3748  Power - ok
15:21:54.0759 3748  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
15:21:54.0819 3748  PptpMiniport - ok
15:21:54.0849 3748  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor      C:\Windows\system32\DRIVERS\processr.sys
15:21:54.0869 3748  Processor - ok
15:21:54.0909 3748  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc        C:\Windows\system32\profsvc.dll
15:21:54.0989 3748  ProfSvc - ok
15:21:55.0019 3748  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
15:21:55.0029 3748  ProtectedStorage - ok
15:21:55.0059 3748  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
15:21:55.0119 3748  Psched - ok
15:21:55.0159 3748  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
15:21:55.0199 3748  ql2300 - ok
15:21:55.0229 3748  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
15:21:55.0249 3748  ql40xx - ok
15:21:55.0279 3748  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE          C:\Windows\system32\qwave.dll
15:21:55.0319 3748  QWAVE - ok
15:21:55.0329 3748  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
15:21:55.0369 3748  QWAVEdrv - ok
15:21:55.0379 3748  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
15:21:55.0419 3748  RasAcd - ok
15:21:55.0449 3748  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
15:21:55.0509 3748  RasAgileVpn - ok
15:21:55.0549 3748  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto        C:\Windows\System32\rasauto.dll
15:21:55.0619 3748  RasAuto - ok
15:21:55.0659 3748  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
15:21:55.0749 3748  Rasl2tp - ok
15:21:55.0799 3748  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
15:21:55.0839 3748  RasMan - ok
15:21:55.0869 3748  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
15:21:55.0909 3748  RasPppoe - ok
15:21:55.0919 3748  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
15:21:55.0979 3748  RasSstp - ok
15:21:56.0009 3748  [ 77F665941019A1594D887A74F301FA2F ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
15:21:56.0089 3748  rdbss - ok
15:21:56.0099 3748  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
15:21:56.0129 3748  rdpbus - ok
15:21:56.0149 3748  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
15:21:56.0189 3748  RDPCDD - ok
15:21:56.0219 3748  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
15:21:56.0279 3748  RDPENCDD - ok
15:21:56.0299 3748  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
15:21:56.0339 3748  RDPREFMP - ok
15:21:56.0389 3748  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
15:21:56.0459 3748  RDPWD - ok
15:21:56.0519 3748  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
15:21:56.0549 3748  rdyboost - ok
15:21:56.0589 3748  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
15:21:56.0659 3748  RemoteAccess - ok
15:21:56.0679 3748  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
15:21:56.0729 3748  RemoteRegistry - ok
15:21:56.0749 3748  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
15:21:56.0809 3748  RpcEptMapper - ok
15:21:56.0839 3748  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
15:21:56.0899 3748  RpcLocator - ok
15:21:56.0959 3748  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs          C:\Windows\system32\rpcss.dll
15:21:57.0009 3748  RpcSs - ok
15:21:57.0039 3748  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
15:21:57.0119 3748  rspndr - ok
15:21:57.0159 3748  [ 763AE0C6D9DF4C24B7E2C26036A8188A ] RSUSBSTOR      C:\Windows\system32\Drivers\RtsUStor.sys
15:21:57.0169 3748  RSUSBSTOR - ok
15:21:57.0209 3748  [ D6D381B76056C668679723938F06F16C ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys
15:21:57.0219 3748  RTHDMIAzAudService - ok
15:21:57.0239 3748  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs          C:\Windows\system32\lsass.exe
15:21:57.0249 3748  SamSs - ok
15:21:57.0289 3748  [ 3289766038DB2CB14D07DC84392138D5 ] SASDIFSV        C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
15:21:57.0299 3748  SASDIFSV - ok
15:21:57.0319 3748  [ 58A38E75F3316A83C23DF6173D41F2B5 ] SASKUTIL        C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
15:21:57.0329 3748  SASKUTIL - ok
15:21:57.0359 3748  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
15:21:57.0369 3748  sbp2port - ok
15:21:57.0399 3748  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
15:21:57.0499 3748  SCardSvr - ok
15:21:57.0539 3748  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
15:21:57.0599 3748  scfilter - ok
15:21:57.0689 3748  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
15:21:57.0813 3748  Schedule - ok
15:21:57.0851 3748  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc    C:\Windows\System32\certprop.dll
15:21:57.0921 3748  SCPolicySvc - ok
15:21:57.0961 3748  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
15:21:57.0991 3748  SDRSVC - ok
15:21:58.0021 3748  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
15:21:58.0091 3748  secdrv - ok
15:21:58.0121 3748  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
15:21:58.0211 3748  seclogon - ok
15:21:58.0251 3748  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
15:21:58.0301 3748  SENS - ok
15:21:58.0311 3748  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
15:21:58.0351 3748  SensrSvc - ok
15:21:58.0371 3748  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
15:21:58.0411 3748  Serenum - ok
15:21:58.0441 3748  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
15:21:58.0451 3748  Serial - ok
15:21:58.0481 3748  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
15:21:58.0501 3748  sermouse - ok
15:21:58.0571 3748  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
15:21:58.0621 3748  SessionEnv - ok
15:21:58.0661 3748  [ A554811BCD09279536440C964AE35BBF ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
15:21:58.0711 3748  sffdisk - ok
15:21:58.0721 3748  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
15:21:58.0761 3748  sffp_mmc - ok
15:21:58.0771 3748  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
15:21:58.0801 3748  sffp_sd - ok
15:21:58.0831 3748  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
15:21:58.0861 3748  sfloppy - ok
15:21:58.0901 3748  [ C6CC9297BD53E5229653303E556AA539 ] Sftfs          C:\Windows\system32\DRIVERS\Sftfslh.sys
15:21:58.0931 3748  Sftfs - ok
15:21:59.0001 3748  [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist        C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
15:21:59.0051 3748  sftlist - ok
15:21:59.0071 3748  [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay        C:\Windows\system32\DRIVERS\Sftplaylh.sys
15:21:59.0091 3748  Sftplay - ok
15:21:59.0111 3748  [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirlh.sys
15:21:59.0121 3748  Sftredir - ok
15:21:59.0131 3748  [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol          C:\Windows\system32\DRIVERS\Sftvollh.sys
15:21:59.0151 3748  Sftvol - ok
15:21:59.0201 3748  [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa          C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
15:21:59.0231 3748  sftvsa - ok
15:21:59.0271 3748  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
15:21:59.0351 3748  SharedAccess - ok
15:21:59.0391 3748  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:21:59.0451 3748  ShellHWDetection - ok
15:21:59.0481 3748  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
15:21:59.0491 3748  SiSRaid2 - ok
15:21:59.0501 3748  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
15:21:59.0511 3748  SiSRaid4 - ok
15:21:59.0561 3748  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
15:21:59.0591 3748  SkypeUpdate - ok
15:21:59.0601 3748  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
15:21:59.0631 3748  Smb - ok
15:21:59.0671 3748  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
15:21:59.0711 3748  SNMPTRAP - ok
15:21:59.0721 3748  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr          C:\Windows\system32\drivers\spldr.sys
15:21:59.0741 3748  spldr - ok
15:21:59.0781 3748  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler        C:\Windows\System32\spoolsv.exe
15:21:59.0871 3748  Spooler - ok
15:22:00.0003 3748  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
15:22:00.0223 3748  sppsvc - ok
15:22:00.0253 3748  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
15:22:00.0323 3748  sppuinotify - ok
15:22:00.0383 3748  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv            C:\Windows\system32\DRIVERS\srv.sys
15:22:00.0473 3748  srv - ok
15:22:00.0493 3748  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
15:22:00.0533 3748  srv2 - ok
15:22:00.0573 3748  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
15:22:00.0613 3748  srvnet - ok
15:22:00.0643 3748  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
15:22:00.0713 3748  SSDPSRV - ok
15:22:00.0733 3748  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc        C:\Windows\system32\sstpsvc.dll
15:22:00.0773 3748  SstpSvc - ok
15:22:00.0803 3748  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
15:22:00.0813 3748  stexstor - ok
15:22:00.0863 3748  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
15:22:00.0913 3748  stisvc - ok
15:22:00.0943 3748  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
15:22:00.0953 3748  swenum - ok
15:22:01.0003 3748  [ E08E46FDD841B7184194011CA1955A0B ] swprv          C:\Windows\System32\swprv.dll
15:22:01.0073 3748  swprv - ok
15:22:01.0113 3748  [ 064A2530A4A7C7CEC1BE6A1945645BE4 ] SynTP          C:\Windows\system32\DRIVERS\SynTP.sys
15:22:01.0133 3748  SynTP - ok
15:22:01.0223 3748  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain        C:\Windows\system32\sysmain.dll
15:22:01.0313 3748  SysMain - ok
15:22:01.0343 3748  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:22:01.0373 3748  TabletInputService - ok
15:22:01.0393 3748  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv        C:\Windows\System32\tapisrv.dll
15:22:01.0443 3748  TapiSrv - ok
15:22:01.0473 3748  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS            C:\Windows\System32\tbssvc.dll
15:22:01.0513 3748  TBS - ok
15:22:01.0593 3748  [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
15:22:01.0663 3748  Tcpip - ok
15:22:01.0693 3748  [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
15:22:01.0733 3748  TCPIP6 - ok
15:22:01.0783 3748  [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
15:22:01.0873 3748  tcpipreg - ok
15:22:01.0913 3748  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
15:22:01.0963 3748  TDPIPE - ok
15:22:01.0993 3748  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
15:22:02.0025 3748  TDTCP - ok
15:22:02.0055 3748  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
15:22:02.0115 3748  tdx - ok
15:22:02.0145 3748  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
15:22:02.0155 3748  TermDD - ok
15:22:02.0225 3748  [ 2E648163254233755035B46DD7B89123 ] TermService    C:\Windows\System32\termsrv.dll
15:22:02.0325 3748  TermService - ok
15:22:02.0365 3748  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
15:22:02.0395 3748  Themes - ok
15:22:02.0425 3748  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER    C:\Windows\system32\mmcss.dll
15:22:02.0465 3748  THREADORDER - ok
15:22:02.0475 3748  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
15:22:02.0545 3748  TrkWks - ok
15:22:02.0615 3748  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:22:02.0685 3748  TrustedInstaller - ok
15:22:02.0725 3748  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
15:22:02.0775 3748  tssecsrv - ok
15:22:02.0815 3748  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
15:22:02.0865 3748  TsUsbFlt - ok
15:22:02.0905 3748  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
15:22:02.0945 3748  tunnel - ok
15:22:02.0985 3748  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
15:22:03.0015 3748  uagp35 - ok
15:22:03.0035 3748  [ A17D5E1A6DF4EAB0A480F2C490DE4C9D ] UBHelper        C:\Windows\system32\drivers\UBHelper.sys
15:22:03.0045 3748  UBHelper - ok
15:22:03.0095 3748  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
15:22:03.0195 3748  udfs - ok
15:22:03.0235 3748  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
15:22:03.0245 3748  UI0Detect - ok
15:22:03.0275 3748  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
15:22:03.0295 3748  uliagpkx - ok
15:22:03.0325 3748  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
15:22:03.0365 3748  umbus - ok
15:22:03.0405 3748  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
15:22:03.0445 3748  UmPass - ok
15:22:03.0515 3748  [ F9EC9ACD504D823D9B9CA98A4F8D3CA2 ] Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
15:22:03.0545 3748  Updater Service - ok
15:22:03.0585 3748  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
15:22:03.0625 3748  upnphost - ok
15:22:03.0655 3748  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
15:22:03.0725 3748  usbccgp - ok
15:22:03.0755 3748  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
15:22:03.0775 3748  usbcir - ok
15:22:03.0805 3748  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci        C:\Windows\system32\DRIVERS\usbehci.sys
15:22:03.0845 3748  usbehci - ok
15:22:03.0895 3748  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
15:22:03.0935 3748  usbhub - ok
15:22:03.0965 3748  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci        C:\Windows\system32\DRIVERS\usbohci.sys
15:22:03.0995 3748  usbohci - ok
15:22:04.0035 3748  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
15:22:04.0085 3748  usbprint - ok
15:22:04.0115 3748  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:22:04.0185 3748  USBSTOR - ok
15:22:04.0215 3748  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
15:22:04.0245 3748  usbuhci - ok
15:22:04.0275 3748  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
15:22:04.0315 3748  usbvideo - ok
15:22:04.0365 3748  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms          C:\Windows\System32\uxsms.dll
15:22:04.0425 3748  UxSms - ok
15:22:04.0445 3748  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
15:22:04.0465 3748  VaultSvc - ok
15:22:04.0485 3748  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
15:22:04.0505 3748  vdrvroot - ok
15:22:04.0555 3748  [ 8D6B481601D01A456E75C3210F1830BE ] vds            C:\Windows\System32\vds.exe
15:22:04.0645 3748  vds - ok
15:22:04.0695 3748  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
15:22:04.0705 3748  vga - ok
15:22:04.0725 3748  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave        C:\Windows\System32\drivers\vga.sys
15:22:04.0785 3748  VgaSave - ok
15:22:04.0815 3748  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
15:22:04.0835 3748  vhdmp - ok
15:22:04.0855 3748  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
15:22:04.0865 3748  viaide - ok
15:22:04.0895 3748  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
15:22:04.0905 3748  volmgr - ok
15:22:04.0945 3748  [ A255814907C89BE58B79EF2F189B843B ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
15:22:04.0965 3748  volmgrx - ok
15:22:04.0995 3748  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
15:22:05.0015 3748  volsnap - ok
15:22:05.0045 3748  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
15:22:05.0065 3748  vsmraid - ok
15:22:05.0135 3748  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS            C:\Windows\system32\vssvc.exe
15:22:05.0245 3748  VSS - ok
15:22:05.0275 3748  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
15:22:05.0325 3748  vwifibus - ok
15:22:05.0345 3748  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
15:22:05.0385 3748  vwififlt - ok
15:22:05.0415 3748  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time        C:\Windows\system32\w32time.dll
15:22:05.0475 3748  W32Time - ok
15:22:05.0505 3748  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
15:22:05.0515 3748  WacomPen - ok
15:22:05.0545 3748  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
15:22:05.0595 3748  WANARP - ok
15:22:05.0595 3748  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
15:22:05.0645 3748  Wanarpv6 - ok
15:22:05.0705 3748  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
15:22:05.0765 3748  wbengine - ok
15:22:05.0795 3748  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
15:22:05.0825 3748  WbioSrvc - ok
15:22:05.0865 3748  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc        C:\Windows\System32\wcncsvc.dll
15:22:05.0925 3748  wcncsvc - ok
15:22:05.0965 3748  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:22:06.0055 3748  WcsPlugInService - ok
15:22:06.0075 3748  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
15:22:06.0085 3748  Wd - ok
15:22:06.0115 3748  [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
15:22:06.0145 3748  Wdf01000 - ok
15:22:06.0175 3748  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
15:22:06.0265 3748  WdiServiceHost - ok
15:22:06.0275 3748  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost  C:\Windows\system32\wdi.dll
15:22:06.0295 3748  WdiSystemHost - ok
15:22:06.0335 3748  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient      C:\Windows\System32\webclnt.dll
15:22:06.0395 3748  WebClient - ok
15:22:06.0435 3748  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
15:22:06.0505 3748  Wecsvc - ok
15:22:06.0525 3748  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
15:22:06.0575 3748  wercplsupport - ok
15:22:06.0595 3748  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
15:22:06.0635 3748  WerSvc - ok
15:22:06.0645 3748  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
15:22:06.0685 3748  WfpLwf - ok
15:22:06.0705 3748  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
15:22:06.0715 3748  WIMMount - ok
15:22:06.0735 3748  WinDefend - ok
15:22:06.0735 3748  WinHttpAutoProxySvc - ok
15:22:06.0785 3748  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
15:22:06.0835 3748  Winmgmt - ok
15:22:06.0925 3748  [ BCB1310604AA415C4508708975B3931E ] WinRM          C:\Windows\system32\WsmSvc.dll
15:22:07.0025 3748  WinRM - ok
15:22:07.0075 3748  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
15:22:07.0115 3748  WinUsb - ok
15:22:07.0165 3748  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc        C:\Windows\System32\wlansvc.dll
15:22:07.0235 3748  Wlansvc - ok
15:22:07.0275 3748  [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
15:22:07.0295 3748  wlcrasvc - ok
15:22:07.0405 3748  [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:22:07.0475 3748  wlidsvc - ok
15:22:07.0495 3748  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
15:22:07.0525 3748  WmiAcpi - ok
15:22:07.0555 3748  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
15:22:07.0595 3748  wmiApSrv - ok
15:22:07.0615 3748  WMPNetworkSvc - ok
15:22:07.0645 3748  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
15:22:07.0685 3748  WPCSvc - ok
15:22:07.0725 3748  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
15:22:07.0785 3748  WPDBusEnum - ok
15:22:07.0805 3748  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
15:22:07.0865 3748  ws2ifsl - ok
15:22:07.0895 3748  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
15:22:07.0945 3748  wscsvc - ok
15:22:07.0955 3748  WSearch - ok
15:22:08.0065 3748  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
15:22:08.0145 3748  wuauserv - ok
15:22:08.0165 3748  [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
15:22:08.0205 3748  WudfPf - ok
15:22:08.0235 3748  [ CF8D590BE3373029D57AF80914190682 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
15:22:08.0325 3748  WUDFRd - ok
15:22:08.0355 3748  [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
15:22:08.0385 3748  wudfsvc - ok
15:22:08.0415 3748  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc        C:\Windows\System32\wwansvc.dll
15:22:08.0465 3748  WwanSvc - ok
15:22:08.0475 3748  ================ Scan global ===============================
15:22:08.0535 3748  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
15:22:08.0555 3748  [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
15:22:08.0575 3748  [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
15:22:08.0605 3748  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
15:22:08.0645 3748  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
15:22:08.0655 3748  [Global] - ok
15:22:08.0655 3748  ================ Scan MBR ==================================
15:22:08.0665 3748  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:22:09.0025 3748  \Device\Harddisk0\DR0 - ok
15:22:09.0025 3748  ================ Scan VBR ==================================
15:22:09.0035 3748  [ E0FC1BC644E4F6B4A25DBD0CFF0D44B3 ] \Device\Harddisk0\DR0\Partition1
15:22:09.0035 3748  \Device\Harddisk0\DR0\Partition1 - ok
15:22:09.0075 3748  [ EB56A4EFC9AC13F299AAD57A970255D9 ] \Device\Harddisk0\DR0\Partition2
15:22:09.0075 3748  \Device\Harddisk0\DR0\Partition2 - ok
15:22:09.0075 3748  ============================================================
15:22:09.0075 3748  Scan finished
15:22:09.0075 3748  ============================================================
15:22:09.0105 5036  Detected object count: 0
15:22:09.0105 5036  Actual detected object count: 0

cosinus 16.09.2012 15:33
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Pannonia 16.09.2012 17:55
Combofix Logfile:
Code:
ComboFix 12-09-15.02 - Melanie 16.09.2012  17:34:26.1.2 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.4091.2860 [GMT 2:00]
ausgeführt von:: c:\users\Melanie\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\security\Database\tmp.edb
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-08-16 bis 2012-09-16  ))))))))))))))))))))))))))))))
.
.
2012-09-16 15:46 . 2012-09-16 15:46        --------        d-----w-        c:\users\Default\AppData\Local\temp
2012-09-14 19:16 . 2012-09-14 19:16        --------        d-----w-        C:\_OTL
2012-09-14 13:31 . 2012-08-23 08:26        9310152        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{57F3803F-5C86-463E-AE91-A1568379ED29}\mpengine.dll
2012-09-13 18:53 . 2012-09-13 18:53        --------        d-----w-        c:\program files (x86)\Common Files\Skype
2012-09-12 09:04 . 2012-09-12 09:04        --------        d-----w-        c:\program files (x86)\ESET
2012-09-12 09:02 . 2012-09-12 09:02        --------        d-----w-        c:\program files (x86)\Mozilla Maintenance Service
2012-09-12 08:55 . 2012-08-22 18:12        950128        ----a-w-        c:\windows\system32\drivers\ndis.sys
2012-09-12 08:55 . 2012-07-04 20:26        41472        ----a-w-        c:\windows\system32\drivers\RNDISMP.sys
2012-09-12 08:55 . 2012-08-02 17:58        574464        ----a-w-        c:\windows\system32\d3d10level9.dll
2012-09-12 08:55 . 2012-08-02 16:57        490496        ----a-w-        c:\windows\SysWow64\d3d10level9.dll
2012-09-12 08:55 . 2012-08-22 18:12        1913200        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2012-09-12 08:55 . 2012-08-22 18:12        376688        ----a-w-        c:\windows\system32\drivers\netio.sys
2012-09-12 08:55 . 2012-08-22 18:12        288624        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-11 15:09 . 2012-09-11 15:14        --------        d-----w-        C:\blöd
2012-09-11 13:39 . 2012-09-11 13:39        --------        d-----w-        c:\users\Melanie\AppData\Roaming\Malwarebytes
2012-09-11 13:39 . 2012-09-11 13:39        --------        d-----w-        c:\programdata\Malwarebytes
2012-09-11 13:39 . 2012-09-11 13:39        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2012-09-11 13:39 . 2012-09-07 15:04        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-09-09 14:05 . 2012-09-09 14:05        --------        d-----w-        c:\users\Melanie\AppData\Local\Mozilla
2012-09-08 13:15 . 2012-09-08 13:16        --------        d-----w-        c:\users\Melanie\AppData\Roaming\Origin
2012-09-08 13:13 . 2012-09-08 15:54        --------        d-----w-        c:\programdata\Origin
2012-08-20 16:17 . 2012-08-20 16:17        --------        d-----w-        c:\users\Melanie\AppData\Roaming\PhotoFiltre 7
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-12 18:00 . 2011-10-06 13:25        64462936        ----a-w-        c:\windows\system32\MRT.exe
2012-09-09 14:19 . 2012-04-09 17:31        73416        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-09 14:19 . 2012-04-09 17:31        696520        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2012-07-18 18:15 . 2012-08-16 11:47        3148800        ----a-w-        c:\windows\system32\win32k.sys
2012-07-04 22:16 . 2012-08-16 11:47        73216        ----a-w-        c:\windows\system32\netapi32.dll
2012-07-04 22:13 . 2012-08-16 11:47        59392        ----a-w-        c:\windows\system32\browcli.dll
2012-07-04 22:13 . 2012-08-16 11:47        136704        ----a-w-        c:\windows\system32\browser.dll
2012-07-04 21:14 . 2012-08-16 11:47        41984        ----a-w-        c:\windows\SysWow64\browcli.dll
2012-06-29 04:55 . 2012-08-16 19:43        17809920        ----a-w-        c:\windows\system32\mshtml.dll
2012-06-29 04:09 . 2012-08-16 19:43        10925568        ----a-w-        c:\windows\system32\ieframe.dll
2012-06-29 03:56 . 2012-08-16 19:43        2312704        ----a-w-        c:\windows\system32\jscript9.dll
2012-06-29 03:49 . 2012-08-16 19:43        1346048        ----a-w-        c:\windows\system32\urlmon.dll
2012-06-29 03:49 . 2012-08-16 19:43        1392128        ----a-w-        c:\windows\system32\wininet.dll
2012-06-29 03:48 . 2012-08-16 19:43        1494528        ----a-w-        c:\windows\system32\inetcpl.cpl
2012-06-29 03:47 . 2012-08-16 19:43        237056        ----a-w-        c:\windows\system32\url.dll
2012-06-29 03:45 . 2012-08-16 19:43        85504        ----a-w-        c:\windows\system32\jsproxy.dll
2012-06-29 03:44 . 2012-08-16 19:43        816640        ----a-w-        c:\windows\system32\jscript.dll
2012-06-29 03:43 . 2012-08-16 19:43        173056        ----a-w-        c:\windows\system32\ieUnatt.exe
2012-06-29 03:42 . 2012-08-16 19:43        2144768        ----a-w-        c:\windows\system32\iertutil.dll
2012-06-29 03:40 . 2012-08-16 19:43        96768        ----a-w-        c:\windows\system32\mshtmled.dll
2012-06-29 03:39 . 2012-08-16 19:43        2382848        ----a-w-        c:\windows\system32\mshtml.tlb
2012-06-29 03:35 . 2012-08-16 19:43        248320        ----a-w-        c:\windows\system32\ieui.dll
2012-06-29 00:16 . 2012-08-16 19:43        1800704        ----a-w-        c:\windows\SysWow64\jscript9.dll
2012-06-29 00:09 . 2012-08-16 19:43        1129472        ----a-w-        c:\windows\SysWow64\wininet.dll
2012-06-29 00:08 . 2012-08-16 19:43        1427968        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2012-06-29 00:04 . 2012-08-16 19:43        142848        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2012-06-29 00:00 . 2012-08-16 19:43        2382848        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2012-06-28 16:39 . 2012-06-28 16:39        514560        ----a-w-        c:\windows\SysWow64\qdvd.dll
2012-06-28 16:39 . 2012-06-28 16:39        366592        ----a-w-        c:\windows\system32\qdvd.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40        120176        ----a-w-        c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-08-12 5471104]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-04-09 39408]
"Advanced SystemCare 5"="c:\program files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" [2012-03-06 574296]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-21 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          \0
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages        REG_MULTI_SZ          kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-09 136176]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-09 250568]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-09 136176]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2012-03-14 913752]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-04-20 202752]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-21 136360]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-07 399432]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-07 676936]
S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-07 25928]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-09-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-09 14:19]
.
2012-09-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-09 17:03]
.
2012-09-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-09 17:03]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42        137584        ----a-w-        c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"PLFSetI"="c:\windows\PLFSetI.exe" [2011-09-16 206208]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.mechalle04.de/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Free YouTube Download - c:\users\Melanie\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Melanie\AppData\Roaming\Mozilla\Firefox\Profiles\jet5q2o7.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1432040542-156192184-1118736734-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (S-1-5-21-1432040542-156192184-1118736734-1000)
@Denied: (2) (LocalSystem)
"Progid"="Applications\\iexplore.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-09-16  18:09:11 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-09-16 16:09
.
Vor Suchlauf: 9 Verzeichnis(se), 418.807.967.744 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 419.507.998.720 Bytes frei
.
- - End Of File - - D2BD7E40472F0197A990D1E54E6099FC
--- --- ---

cosinus 17.09.2012 09:24
Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

Pannonia 17.09.2012 17:18
Ich hoffe, das ist alles so richtig.

GMER (Hier sei angemerkt, das in der rechten Auswahlleiste nur nur die unteren 3 Häckchen gesetzt waren. Bei den anderen war das nicht möglich).

GMER Logfile:
Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-09-17 18:12:53
Windows 6.1.7601 Service Pack 1
Running: zpv64dyv.exe


---- Files - GMER 1.0.15 ----

File  C:\Windows\Temp\TMP000000DEF8C590EF47647F22  524288 bytes

---- EOF - GMER 1.0.15 ----
--- --- ---

OSAM

Code:
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 17:15:39 on 17.09.2012

OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 64-bit
Default Browser: Microsoft Corporation Internet Explorer 9.00.8112.16421

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
"Adobe Flash Player Updater.job" - "Adobe Systems Incorporated" - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys
"catchme" (catchme) - ? - C:\ComboFix\catchme.sys  (File not found)
"FssFltr" (fssfltr) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\fssfltr.sys
"MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbam.sys
"NTIDrvr" (NTIDrvr) - "NTI Corporation" - C:\Windows\system32\drivers\NTIDrvr.sys
"SASDIFSV" (SASDIFSV) - "SUPERAdBlocker.com and SUPERAntiSpyware.com" - C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
"SASKUTIL" (SASKUTIL) - "SUPERAdBlocker.com and SUPERAntiSpyware.com" - C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
"Sftfs" (Sftfs) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftfslh.sys
"Sftplay" (Sftplay) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftplaylh.sys
"Sftredir" (Sftredir) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftredirlh.sys
"Sftvol" (Sftvol) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftvollh.sys
"UBHelper" (UBHelper) - "NTI Corporation" - C:\Windows\system32\drivers\UBHelper.sys

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} "Album Download IE Asynchronous Pluggable Protocol Interface" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
{91774881-D725-4E58-B298-07617B9B86A8} "Skype IE add-on Pluggable Protocol" - "Skype Technologies S.A." - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{5E2121EE-0300-11D4-8D3B-444553540000} "Catalyst Context Menu extension" - ? -  (File not found | COM-object registry key not found)
{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} "DragDropProtect Class" - "Egis Technology Inc." - C:\Program Files (x86)\EgisTec MyWinLocker\x86\psdprotect.dll
{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\rarext.dll
{B41DB860-64E4-11D2-9906-E49FADC173CA} "WinRAR shell extension" - ? -  (File not found | COM-object registry key not found)
{0563DB41-F538-4B37-A92D-4659049B7766} "WLMD Message Handler" - ? -  (File not found | COM-object registry key not found)
{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "Google Toolbar" - "Google Inc." - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
ITBar7Height "ITBar7Height" - ? -  (File not found | COM-object registry key not found)
ITBar7Height64 "ITBar7Height64" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{166B1BCA-3F9C-11CF-8075-444553540000} "Shockwave ActiveX Control" - "Adobe Systems, Inc." - C:\Windows\SysWow64\Adobe\Director\SwDir_1165635.dll / hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_4_402_265.ocx / hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} "@C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "@C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
{898EA8C8-E7FF-479B-8935-AEC46303B9E5} "Skype Click to Call" - "Skype Technologies S.A." - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
<binary data> "Google Toolbar" - "Google Inc." - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{AA58ED58-01DD-4d91-8333-CF10577473F7} "Google Toolbar Helper" - "Google Inc." - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} "Skype Browser Helper" - "Skype Technologies S.A." - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID-Anmelde-Hilfsprogramm" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
{9FDDE16B-836F-4806-AB1F-1455CBEFF289} "Windows Live Messenger Companion Helper" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

[LSA Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Lsa )-----
"Security Packages" - "Microsoft Corp." - C:\Windows\system32\livessp.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"Advanced SystemCare 5" - "IObit" - "C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
"msnmsgr" - "Microsoft Corporation" - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
"SUPERAntiSpyware" - "SUPERAntiSpyware.com" - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
"swg" - "Google Inc." - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"avgnt" - "Avira GmbH" - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"BackupManagerTray" - "NewTech Infosystems, Inc." - "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"EgisTecPMMUpdate" - "Egis Technology Inc." - "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
"EgisUpdate" - "Egis Technology Inc." - "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
"LManager" - "Dritek System Inc." - C:\Program Files (x86)\Launch Manager\LManager.exe
"StartCCC" - "Advanced Micro Devices, Inc." - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"SuiteTray" - "Egis Technology Inc." - "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103" (WinDefend) - ? - C:\Program Files (x86)\Windows Defender\mpsvc.dll  (File not found)
"@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101" (WMPNetworkSvc) - ? - "C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe"  (File not found)
"Acer ePower Service" (ePowerSvc) - "Acer Incorporated" - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
"Adobe Flash Player Update Service" (AdobeFlashPlayerUpdateSvc) - "Adobe Systems Incorporated" - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
"Advanced SystemCare Service 5" (AdvancedSystemCareService5) - "IObit" - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
"Application Virtualization Client" (sftlist) - "Microsoft Corporation" - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
"Application Virtualization Service Agent" (sftvsa) - "Microsoft Corporation" - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
"Client Virtualization Handler" (cvhsvc) - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
"Dritek WMI Service" (DsiWMIService) - "Dritek System Inc." - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
"FLEXnet Licensing Service" (FLEXnet Licensing Service) - "Acresso Software Inc." - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
"Google Software Updater" (gusvc) - "Google" - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
"Google Update-Dienst (gupdatem)" (gupdatem) - "Google Inc." - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
"GREGService" (GREGService) - "Acer Incorporated" - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
"MBAMScheduler" (MBAMScheduler) - "Malwarebytes Corporation" - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
"MBAMService" (MBAMService) - "Malwarebytes Corporation" - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
"Microsoft .NET Framework NGEN v4.0.30319_X64" (clr_optimization_v4.0.30319_64) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
"MyWinLocker Service" (MWLService) - "Egis Technology Inc." - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
"NTI IScheduleSvc" (NTI IScheduleSvc) - "NewTech Infosystems, Inc." - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
"Office  Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"Office Software Protection Platform" (osppsvc) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
"SAS Core Service" (!SASCORE) - "SUPERAntiSpyware.com" - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
"Skype Updater" (SkypeUpdate) - "Skype Technologies" - C:\Program Files (x86)\Skype\Updater\Updater.exe
"Updater Service" (Updater Service) - "Acer Group" - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
"Windows Live Family Safety Service" (fsssvc) - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
"Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"WindowsLive Local NSP" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
"WindowsLive NSP" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
aswMBR

Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-09-17 17:17:11
-----------------------------
17:17:11.515    OS Version: Windows x64 6.1.7601 Service Pack 1
17:17:11.515    Number of processors: 2 586 0x603
17:17:11.515    ComputerName: MELANIE-PC  UserName: Melanie
17:17:14.807    Initialize success
17:18:52.340    AVAST engine defs: 12091400
17:20:09.498    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
17:20:09.498    Disk 0 Vendor: Hitachi_HTS545050B9A300 PB4OC60F Size: 476940MB BusType: 11
17:20:09.529    Disk 0 MBR read successfully
17:20:09.529    Disk 0 MBR scan
17:20:09.544    Disk 0 Windows 7 default MBR code
17:20:09.560    Disk 0 Partition 1 00    27 Hidden NTFS WinRE NTFS        13312 MB offset 2048
17:20:09.607    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 27265024
17:20:09.654    Disk 0 Partition 3 00    07    HPFS/NTFS NTFS      463526 MB offset 27469824
17:20:09.700    Disk 0 scanning C:\Windows\system32\drivers
17:20:28.140    Service scanning
17:21:27.420    Modules scanning
17:21:27.435    Disk 0 trace - called modules:
17:21:27.467    ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
17:21:27.981    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80045d7060]
17:21:27.981    3 CLASSPNP.SYS[fffff88000e7b43f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004563680]
17:21:32.677    AVAST engine scan C:\Windows
17:21:41.803    AVAST engine scan C:\Windows\system32
17:27:46.188    AVAST engine scan C:\Windows\system32\drivers
17:28:16.749    AVAST engine scan C:\Users\Melanie
17:44:09.911    AVAST engine scan C:\ProgramData
17:45:12.779    Scan finished successfully
18:09:44.501    Disk 0 MBR has been saved successfully to "C:\Users\Melanie\Desktop\MBR.dat"
18:09:44.516    The log file has been saved successfully to "C:\Users\Melanie\Desktop\aswMBR.txt"

cosinus 17.09.2012 20:43
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Pannonia 18.09.2012 17:04
Hoffe das ist richtig


Malware

Code:
Malwarebytes Anti-Malware (Test) 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.09.18.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Melanie :: MELANIE-PC [Administrator]

Schutz: Aktiviert

18.09.2012 16:13:55
mbam-log-2012-09-18 (16-13-55).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|Q:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 319904
Laufzeit: 57 Minute(n), 36 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)





SuperAntiSpyware

Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 09/18/2012 at 05:56 PM

Application Version : 5.0.1118

Core Rules Database Version : 9246
Trace Rules Database Version: 7058

Scan type      : Complete Scan
Total Scan Time : 00:39:16

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 697
Memory threats detected  : 0
Registry items scanned    : 41267
Registry threats detected : 0
File items scanned        : 47691
File threats detected    : 12

Adware.Tracking Cookie
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\MUEHWAY0.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\D0NO57YX.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\4IYO4MTG.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\A1FEIH4T.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\KZMFWS87.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\C3WK7551.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\X4QJVILX.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\RI6B566E.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\3E9D6V66.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\80K3377M.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\S40YML5P.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\RM5XWCVW.txt

cosinus 19.09.2012 13:25
Code:
UAC On - Limited User
Wie hast du sasw gestartet? Einfach per Doppelklick?

Pannonia 19.09.2012 15:29
Ja ich habe SuperAntiSpyware per doppelklick geöffnet.Wieso war es falsch???? :)

cosinus 19.09.2012 16:25
Wie wär's mal wenn du das machst was in der Anleitung steht? :confused:

Pannonia 19.09.2012 17:30
Ich habe das jetzt nochmal gemacht.Ich habe als erstes das Programm als Administrator geöffnet habe dann alle Laufwerke angeklickt.Vorher noch ein Update gemacht und das hat er nach Beendigung des Scans mir angezeigt:



Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 09/19/2012 at 06:15 PM

Application Version : 5.0.1118

Core Rules Database Version : 9252
Trace Rules Database Version: 7064

Scan type      : Complete Scan
Total Scan Time : 00:41:22

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 692
Memory threats detected  : 0
Registry items scanned    : 41267
Registry threats detected : 0
File items scanned        : 49531
File threats detected    : 11

Adware.Tracking Cookie
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\VPCOR2WP.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\M9TOAH1K.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\TFLR8V24.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\EVIH3GAK.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\QAB3H3SK.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\KA8VWRH0.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\VJSKZW9S.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\9DK19IXF.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\D7PPEY47.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\VZOG2BHR.txt
        C:\Users\Melanie\AppData\Roaming\Microsoft\Windows\Cookies\4029TPJJ.txt

Da steht aber jetzt das auch wieder da was du mir vorher gepostet hast ( UAC On - Limited User )

Keine Ahnung wie ich das umändern kann oder was ich noch machen soll.

cosinus 20.09.2012 10:00
Wenn du wirklich als Admin das ausgeführt hast per Rechtskick, scheint das ein Bug von sasw zu sein

Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Pannonia 20.09.2012 15:48
Also es funktioniert alles ganz normal nur halt mein Flash Player funktioniert immer noch nicht.Jedes mal zeigt er mir an das ich meinen Flash Player erneuern soll obwohl immer noch die neueste Version gespeichert ist

cosinus 20.09.2012 20:07
Erstell dir mal ein neues Profil und teste => Firefox-Profile erstellen und löschen | Hilfe zu Firefox

Pannonia 23.09.2012 11:46
Super er funktioniert wieder.Der Flash Player geht zwar nur bei Firefox aber er geht.Danke für deine Hilfe :)

:dankeschoen:

cosinus 23.09.2012 17:39
Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.


Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.


Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:27 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131