Trojaner-Board - Malware - USB Stick wandelt Ordner in Verknüpfungen

Hallo Schrauber,

nachfolgend das Combofix Log. Habe noch einige Male den Start mit F8 versucht, leider tut sich dort nichts.

Liebe Grüße

Code:

ComboFix 14-06-24.01 - Jan 27.06.2014   1:43.4.2 - x86

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.1014.278 [GMT 5,5:30]

ausgeführt von:: c:\users\Jan\Desktop\ComboFix.exe

AV: AVG AntiVirus 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}

AV: Avira Desktop *Disabled/Outdated* {4D041356-F94D-285F-8768-AAE50FA36859}

SP: AVG AntiVirus 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}

SP: Avira Desktop *Disabled/Outdated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((   Dateien erstellt von 2014-05-26 bis 2014-06-26  ))))))))))))))))))))))))))))))

.

.

2014-06-26 20:36 . 2014-06-26 20:36        --------        d-----w-        c:\users\Karina Derl\AppData\Local\temp

2014-06-26 20:36 . 2014-06-26 20:36        --------        d-----w-        c:\users\Default\AppData\Local\temp

2014-06-17 16:00 . 2014-06-17 16:00        --------        d-----w-        c:\users\Jan\AppData\Roaming\AVG2014

2014-06-17 15:57 . 2014-06-17 15:57        --------        d-----w-        c:\users\Jan\AppData\Roaming\TuneUp Software

2014-06-17 15:56 . 2014-06-17 15:56        --------        d-----w-        C:\$AVG

2014-06-17 15:56 . 2014-06-17 17:12        --------        d-----w-        c:\programdata\AVG2014

2014-06-17 15:54 . 2014-06-17 15:54        --------        d-----w-        c:\program files\AVG

2014-06-17 15:35 . 2014-06-26 19:12        --------        d-----w-        c:\programdata\MFAData

2014-06-17 15:35 . 2014-06-17 16:19        --------        d-----w-        c:\users\Jan\AppData\Local\Avg2014

2014-06-17 15:35 . 2014-06-17 15:35        --------        d--h--w-        c:\programdata\Common Files

2014-06-17 15:35 . 2014-06-17 15:35        --------        d-----w-        c:\users\Jan\AppData\Local\MFAData

2014-06-07 10:29 . 2014-06-07 10:29        --------        d-----w-        c:\programdata\Malwarebytes

2014-06-05 19:25 . 2014-06-05 19:25        --------        d-----w-        c:\users\Jan\AppData\Local\Adobe

2014-06-05 17:44 . 2014-06-05 17:44        23456        ----a-w-        c:\windows\system32\drivers\DrvAgent32.sys

2014-06-05 17:44 . 2014-06-05 17:44        --------        d-----w-        c:\users\Jan\AppData\Local\eSupport.com

2014-06-05 17:15 . 2014-06-05 17:15        --------        d-----w-        c:\program files\Common Files\Java

2014-06-05 17:15 . 2014-05-07 09:32        96680        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll

2014-06-04 13:12 . 2014-06-04 13:12        --------        d-----w-        c:\windows\ERUNT

2014-06-04 12:57 . 2014-06-04 13:06        --------        d-----w-        C:\AdwCleaner

2014-06-03 16:22 . 2014-06-03 16:22        --------        d-s---w-        c:\windows\system32\CompatTel

2014-06-03 15:33 . 2014-06-26 20:36        --------        d-----w-        c:\users\Jan\AppData\Local\temp

2014-06-01 17:26 . 2014-06-22 14:59        --------        d-----w-        C:\FRST

2014-06-01 14:39 . 2014-06-01 14:39        --------        d-----w-        c:\programdata\Panda Security

2014-06-01 14:39 . 2014-06-01 14:39        --------        d-----w-        c:\program files\Panda USB Vaccine

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-06-06 13:41 . 2013-09-19 22:50        70832        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2014-06-06 13:41 . 2013-09-19 22:50        692400        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2014-06-04 18:27 . 2013-12-11 04:33        136216        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2014-06-04 18:27 . 2013-12-11 04:33        93528        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2014-05-13 08:49 . 2014-05-13 08:49        192280        ----a-w-        c:\windows\system32\drivers\avgldx86.sys

2014-05-13 08:47 . 2014-05-13 08:47        237848        ----a-w-        c:\windows\system32\drivers\avglogx.sys

2014-05-13 08:47 . 2014-05-13 08:47        210200        ----a-w-        c:\windows\system32\drivers\avgtdix.sys

2014-05-13 08:47 . 2014-05-13 08:47        122136        ----a-w-        c:\windows\system32\drivers\avgdiskx.sys

2014-05-13 08:47 . 2014-05-13 08:47        149784        ----a-w-        c:\windows\system32\drivers\avgidshx.sys

2014-05-13 08:47 . 2014-05-13 08:47        107288        ----a-w-        c:\windows\system32\drivers\avgmfx86.sys

2014-05-13 08:39 . 2014-05-13 08:39        198936        ----a-w-        c:\windows\system32\drivers\avgidsdriverx.sys

2014-05-13 08:34 . 2014-05-13 08:34        27416        ----a-w-        c:\windows\system32\drivers\avgrkx86.sys

2014-05-13 08:34 . 2014-05-13 08:34        21272        ----a-w-        c:\windows\system32\drivers\avgidsshimx.sys

2014-04-16 23:02 . 2014-04-26 10:25        8050496        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{8AAF40D9-9DF3-475C-8D3E-D137A6407843}\mpengine.dll

2014-04-14 21:04 . 2014-04-14 21:04        1070232        ----a-w-        c:\windows\system32\MSCOMCTL.OCX

2014-03-31 03:05 . 2013-09-19 11:30        231584        ------w-        c:\windows\system32\MpSigStub.exe

2014-03-31 00:13 . 2014-04-10 20:53        2724864        ----a-w-        c:\windows\system32\mshtml.tlb

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

2013-09-21 14:44        220632        ----a-w-        c:\users\Jan\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

2013-09-21 14:44        220632        ----a-w-        c:\users\Jan\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

2013-09-21 14:44        220632        ----a-w-        c:\users\Jan\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2014-03-12 13:37        1728216        ----a-w-        c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2014-03-12 13:37        1728216        ----a-w-        c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2014-03-12 13:37        1728216        ----a-w-        c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"uktormgszh"="wscript.exe" [2013-10-12 141824]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NpwrMngr"="c:\program files\Power Management\NpwrMngr.exe" [2009-09-29 472432]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-09-28 137752]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-09-28 350744]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-06-04 737872]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-05-08 959904]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2014-05-07 256896]

"uktormgszh"="wscript.exe" [2013-10-12 141824]

"AVG_UI"="c:\program files\AVG\AVG2014\avgui.exe" [2014-05-13 5181456]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

"SynchronousMachineGroupPolicy"= 1 (0x1)

"SynchronousUserGroupPolicy"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2014-05-08 13:48        959904        ----a-w-        c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

.

R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2014\avgidsagent.exe [2014-05-13 3644432]

R3 AIDA64Driver;FinalWire AIDA64 Kernel Driver;c:\program files\FinalWire\AIDA64 Extreme Edition\kerneld.x32 [x]

R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [x]

R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]

R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [2014-06-05 23456]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]

R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2013-01-23 137600]

R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2013-01-23 8576]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]

R3 rsvcdwdr;rsvcdwdr;c:\windows\system32\DRIVERS\rsvcdwdr.sys [2013-12-04 35976]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-20 77184]

R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2012-08-23 24064]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-20 112640]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2013-09-28 1343400]

R4 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2014-06-04 1039952]

R4 HDPSrv;HDPSrv;c:\windows\system32\HDPSrv.exe [2009-08-25 172032]

R4 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]

R4 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [2013-09-12 5071712]

S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2014-05-13 149784]

S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2014-05-13 237848]

S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2014-05-13 27416]

S0 EMSC;HDD Protection - Shock Event Driver;c:\windows\system32\DRIVERS\EvMngr.SYS [2009-06-24 19824]

S0 HDFilter;COMPAL HDD Protection - HDD Filter Driver;c:\windows\system32\DRIVERS\HDFilter.sys [2009-07-03 20848]

S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys [2013-07-17 16880]

S1 Avgdiskx;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiskx.sys [2014-05-13 122136]

S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2014-05-13 198936]

S1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2014-05-13 21272]

S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2014-05-13 192280]

S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2014-05-13 210200]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-11-22 37352]

S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-06-04 430160]

S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2014\avgwdsvc.exe [2014-05-13 292424]

S2 PrLdrSrv;PrLdrSrv;c:\windows\system32\PrLdrSrv.exe [2013-09-21 11776]

S3 GTNDIS62;GT62 Zero Config Driver;c:\windows\system32\DRIVERS\Gtuhs62.sys [2010-04-13 159744]

S3 GTUHSBUS;GT UHS BUS;c:\windows\system32\DRIVERS\gtuhsbus.sys [2010-03-12 151552]

S3 GTUHSSER;GT UHS SER;c:\windows\system32\DRIVERS\gtuhsser.sys [2010-02-25 8064]

S3 igd;igd;c:\windows\system32\DRIVERS\igdkmd32.sys [2010-09-15 648832]

S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2010-03-15 127488]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation        REG_MULTI_SZ           SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc SensrSvc Mcx2Svc

.

Inhalt des "geplante Tasks" Ordners

.

2014-06-26 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-19 13:41]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://google.de/

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: An OneNote s&enden - c:\progra~1\MICROS~1\Office15\ONBttnIE.dll/105

IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.0.1

DPF: {FFA7A955-5A33-42F7-A77B-8E46AE2FAA64} - hxxps://www.playmemoriescameraapps.com/portal/PMCA/PMCADownloader.cab

FF - ProfilePath - c:\users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\cxq9gu0g.default\

FF - prefs.js: browser.startup.homepage - www.google.de

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AIDA64Driver]

"ImagePath"="\??\c:\program files\FinalWire\AIDA64 Extreme Edition\kerneld.x32"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.032"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.abr"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.apd"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.arw"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.bay"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="PhotoViewer.FileAssoc.Bitmap"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.bw"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda]

@DACL=(02 0000)

@SACL=

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.cr2"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.crw"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.cs1"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.dcr"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.dcx"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]

@Denied: (2) (LocalSystem)

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

"Progid"="ACDSee Pro 6.dib"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.djv"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.djvu"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.dng"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.emf"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.eps"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.erf"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.fff"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="PhotoViewer.FileAssoc.Gif"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.hdr"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.icn"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.iff"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.ilbm"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.int"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.inta"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.iw4"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.j2c"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.j2k"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.jbr"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.jfif"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.jif"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.jp2"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.jpc"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="PhotoViewer.FileAssoc.Jpeg"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="PhotoViewer.FileAssoc.Jpeg"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="PhotoViewer.FileAssoc.Jpeg"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.jpk"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.jpx"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.kdc"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.lbm"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.mef"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.mos"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.mrw"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.nef"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.nrw"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.orf"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pbm"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pbr"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pcd"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pct"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pcx"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pef"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pgm"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pic"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pict"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="PhotoViewer.FileAssoc.Png"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.ppm"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.psd"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.psp"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pspbrush"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.pspimage"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.raf"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.ras"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.raw"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.rgb"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.rgba"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.rle"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.rsb"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.rw2"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.rwl"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.sgi"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.sr2"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.srf"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.srw"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.tga"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.thm"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="PhotoViewer.FileAssoc.Tiff"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]

@Denied: (2) (S-1-5-21-2975140-3301007226-1780354805-1000)

@Denied: (2) (LocalSystem)

"Progid"="PhotoViewer.FileAssoc.Tiff"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.ttc"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.ttf"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.wbm"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.wbmp"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmd]

@DACL=(02 0000)

@SACL=

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.wmf"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms]

@DACL=(02 0000)

@SACL=

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmz]

@DACL=(02 0000)

@SACL=

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.xbm"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.xif"

.

[HKEY_USERS\S-1-5-21-2975140-3301007226-1780354805-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 6.xpm"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2014-06-27  02:14:38

ComboFix-quarantined-files.txt  2014-06-26 20:44

ComboFix2.txt  2014-06-03 15:33

ComboFix3.txt  2014-06-03 14:59

.

Vor Suchlauf: 16 Verzeichnis(se), 24.085.118.976 Bytes frei

Nach Suchlauf: 17 Verzeichnis(se), 23.945.256.960 Bytes frei

.

- - End Of File - - 99E5307871B31C888A6A09384D97805E

A36C5E4F47E84449FF07ED3517B43A31

Auch hier kann ich nichts finden... :)

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:28-06-2014 02

Ran by Jan (administrator) on NOKIA-3G on 29-06-2014 03:05:19

Running from C:\Users\Jan\Desktop

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

() C:\Windows\System32\prldrsrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Nokia) C:\Program Files\Power Management\NpwrMngr.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Panda Security) C:\Program Files\Panda USB Vaccine\USBVaccine.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [NpwrMngr] => C:\Program Files\Power Management\NpwrMngr.exe [472432 2009-09-29] (Nokia)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-04] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: SmartFTP Drop -> {EA5A76F7-8138-4B53-B0F5-ADCC730CAFBD} => C:\Program Files\SmartFTP Client\sfShellTools.dll (SmartSoft Ltd.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4D82A1295CB5CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

SearchScopes: HKLM - DefaultScope value is missing.

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab

DPF: {FFA7A955-5A33-42F7-A77B-8E46AE2FAA64} https://www.playmemoriescameraapps.com/portal/PMCA/PMCADownloader.cab

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\cxq9gu0g.default

FF Homepage: www.google.de

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin: @java.com/DTPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin: Sony Corporation/PMCADownloader - C:\ProgramData\Sony Corporation\PMCADownloader\1.1.1975.475\npPMCADownloader.dll (Sony Network Entertainment International LLC)

FF Plugin: Sony Corporation/PMCADownloaderHelper - C:\ProgramData\Sony Corporation\PMCADownloader\1.1.1975.475\PMCADownloaderHelper.exe (Sony Network Entertainment International LLC)

FF Plugin: Sony Corporation/PMCADownloaderLib - C:\ProgramData\Sony Corporation\PMCADownloader\1.1.1975.475\PMCADownloaderLib.dll (Sony Network Entertainment International LLC)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Firebug - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\cxq9gu0g.default\Extensions\firebug@software.joehewitt.com.xpi [2013-11-24]

FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\cxq9gu0g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-21]
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-04] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-04] (Avira Operations GmbH & Co. KG)

S4 HDPSrv; C:\WINDOWS\system32\HDPSrv.exe [172032 2009-08-25] () [File not signed]

S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]

R2 PrLdrSrv; C:\Windows\system32\PrLdrSrv.exe [11776 2013-09-21] () [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-06-04] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-04] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-22] (Avira Operations GmbH & Co. KG)

S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2014-06-05] (Phoenix Technologies) [File not signed]

R0 EMSC; C:\Windows\System32\DRIVERS\EvMngr.SYS [19824 2009-06-24] ()

R3 GTNDIS62; C:\Windows\System32\DRIVERS\Gtuhs62.sys [159744 2010-04-13] (Option N.V.)

R3 GTUHSBUS; C:\Windows\System32\DRIVERS\gtuhsbus.sys [151552 2010-03-12] (Option N.V.)

R3 GTUHSSER; C:\Windows\System32\DRIVERS\gtuhsser.sys [8064 2010-02-25] (Option N.V.)

R0 HDFilter; C:\Windows\System32\DRIVERS\HDFilter.sys [20848 2009-07-03] (COMPAL ELECTRONIC INC.)

R3 igd; C:\Windows\System32\DRIVERS\igdkmd32.sys [648832 2010-09-16] (Intel Corporation)

R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [16880 2013-07-18] (Intel Corporation)

R0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [36208 2009-07-02] (COMPAL ELECTRONIC INC.)

S3 rsvcdwdr; C:\Windows\System32\DRIVERS\rsvcdwdr.sys [35976 2013-12-04] (RapidSolution Software AG)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1760384 2009-08-20] ()

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-11-22] (Avira GmbH)

S3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2013-12-04] (RapidSolution Software AG)

S3 AIDA64Driver; \??\C:\Program Files\FinalWire\AIDA64 Extreme Edition\kerneld.x32 [X]

S3 catchme; \??\C:\Users\Jan\AppData\Local\Temp\catchme.sys [X]

S3 cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-06-29 03:05 - 2014-06-29 03:06 - 00011890 _____ () C:\Users\Jan\Desktop\FRST.txt

2014-06-29 03:04 - 2014-06-29 03:04 - 00000000 ____D () C:\Users\Jan\Desktop\FRST-OlderVersion

2014-06-28 16:56 - 2014-06-28 16:56 - 00000000 ____D () C:\Users\Karina Derl\AppData\Roaming\TuneUp Software

2014-06-28 16:50 - 2014-06-28 16:50 - 00000000 ____D () C:\Users\Karina Derl\AppData\Local\MFAData

2014-06-27 21:11 - 2014-06-27 21:58 - 00000000 ____D () C:\ComboFix

2014-06-27 20:48 - 2014-06-27 20:51 - 05212118 ____R (Swearware) C:\Users\Jan\Desktop\ComboFix.exe

2014-06-27 12:46 - 2014-06-28 17:32 - 00017412 _____ () C:\Windows\PFRO.log

2014-06-27 00:02 - 2014-06-27 00:05 - 00000000 ____D () C:\Users\Jan\Desktop\Ausflug Cherrapunji

2014-06-18 13:51 - 2014-06-18 13:51 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-06-17 21:27 - 2014-06-17 21:27 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\TuneUp Software

2014-06-17 21:05 - 2014-06-28 17:32 - 00000000 ____D () C:\ProgramData\MFAData

2014-06-17 21:05 - 2014-06-17 21:05 - 04424240 _____ (AVG Technologies) C:\Users\Jan\Downloads\avg_avct_stb_all_2014_4116_cm10.exe

2014-06-17 21:05 - 2014-06-17 21:05 - 00000000 ____D () C:\Users\Jan\AppData\Local\MFAData

2014-06-11 10:15 - 2014-06-28 17:32 - 00004944 _____ () C:\Windows\setupact.log

2014-06-11 10:15 - 2014-06-11 10:15 - 00000000 _____ () C:\Windows\setuperr.log

2014-06-10 16:55 - 2014-06-10 16:55 - 00000000 ____D () C:\Users\Jan\Desktop\20 Myanmar

2014-06-10 14:56 - 2014-06-10 14:56 - 00000000 ____D () C:\Users\Karina Derl\AppData\Roaming\WinRAR

2014-06-07 15:59 - 2014-06-07 15:59 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-06-06 19:11 - 2014-06-29 02:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-06-06 00:55 - 2014-06-06 00:55 - 00000000 ____D () C:\Users\Jan\AppData\Local\Adobe

2014-06-06 00:53 - 2014-06-06 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-06-05 23:14 - 2014-06-05 23:14 - 00023456 _____ (Phoenix Technologies) C:\Windows\system32\Drivers\DrvAgent32.sys

2014-06-05 23:14 - 2014-06-05 23:14 - 00000000 ____D () C:\Users\Jan\AppData\Local\eSupport.com

2014-06-05 22:45 - 2014-06-05 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-06-05 22:45 - 2014-06-05 22:45 - 00000000 ____D () C:\Program Files\Common Files\Java

2014-06-05 22:45 - 2014-05-07 15:02 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2014-06-05 22:45 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-06-05 22:45 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-06-05 22:45 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-06-05 22:44 - 2014-06-05 22:45 - 00004591 _____ () C:\Windows\system32\jupdate-1.7.0_60-b19.log

2014-06-05 16:49 - 2014-06-05 16:49 - 00854367 _____ () C:\Users\Jan\Desktop\SecurityCheck.exe

2014-06-04 18:42 - 2014-06-04 18:42 - 00000000 ____D () C:\Windows\ERUNT

2014-06-04 18:27 - 2014-06-04 18:36 - 00000000 ____D () C:\AdwCleaner

2014-06-04 18:25 - 2014-06-04 18:25 - 01016261 _____ (Thisisu) C:\Users\Jan\Desktop\JRT.exe

2014-06-04 18:07 - 2014-06-04 18:07 - 01327971 _____ () C:\Users\Jan\Desktop\adwcleaner_3.211.exe

2014-06-03 21:52 - 2014-06-03 21:52 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-06-03 21:33 - 2014-05-09 12:36 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-03 21:33 - 2014-05-09 12:34 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-03 21:33 - 2014-04-12 07:40 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-06-03 21:33 - 2014-04-12 07:40 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-06-03 21:33 - 2014-04-12 07:36 - 01060352 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-06-03 21:33 - 2014-04-12 07:36 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-06-03 21:33 - 2014-04-12 07:36 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-06-03 21:33 - 2014-04-12 07:36 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2014-06-03 21:33 - 2014-04-12 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2014-06-03 21:33 - 2014-04-12 07:36 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2014-06-03 21:33 - 2014-04-12 07:36 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2014-06-03 21:33 - 2014-04-12 07:36 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2014-06-03 21:33 - 2014-04-12 07:36 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2014-06-03 21:33 - 2014-04-12 07:36 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-06-03 21:33 - 2014-04-12 07:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-06-03 21:33 - 2014-04-12 07:36 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2014-06-03 21:33 - 2014-04-12 07:36 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-06-03 21:33 - 2014-04-12 07:34 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-06-03 21:33 - 2014-04-12 07:34 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2014-06-03 21:33 - 2014-04-12 07:33 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-06-03 21:33 - 2014-04-12 07:33 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2014-06-03 21:33 - 2014-04-12 06:47 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2014-06-03 21:33 - 2014-03-04 16:12 - 03974080 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2014-06-03 21:33 - 2014-03-04 16:12 - 03918784 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-06-03 21:33 - 2014-03-04 16:09 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-06-03 21:33 - 2014-03-04 16:09 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-06-03 21:33 - 2014-03-04 16:09 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-06-03 21:33 - 2014-03-04 16:09 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-06-03 21:33 - 2014-03-04 16:09 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-06-03 21:33 - 2014-03-04 16:09 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-06-03 21:33 - 2014-03-04 14:47 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-06-03 21:33 - 2014-03-04 14:47 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-06-03 21:33 - 2014-03-04 14:47 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-06-03 21:33 - 2014-03-04 14:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-06-03 21:33 - 2014-03-04 14:47 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-06-03 21:33 - 2014-03-04 14:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-06-03 21:33 - 2014-03-04 14:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-06-03 21:33 - 2014-03-04 14:47 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-06-03 21:33 - 2014-03-04 14:47 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-06-03 21:32 - 2014-03-25 07:39 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-06-03 19:50 - 2011-06-26 12:15 - 00256000 _____ () C:\Windows\PEV.exe

2014-06-03 19:50 - 2010-11-07 22:50 - 00208896 _____ () C:\Windows\MBR.exe

2014-06-03 19:50 - 2009-04-20 10:26 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-06-03 19:50 - 2000-08-31 05:30 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-06-03 19:50 - 2000-08-31 05:30 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-06-03 19:50 - 2000-08-31 05:30 - 00098816 _____ () C:\Windows\sed.exe

2014-06-03 19:50 - 2000-08-31 05:30 - 00080412 _____ () C:\Windows\grep.exe

2014-06-03 19:50 - 2000-08-31 05:30 - 00068096 _____ () C:\Windows\zip.exe

2014-06-03 19:49 - 2014-06-27 21:15 - 00000000 ____D () C:\Qoobox

2014-06-03 19:48 - 2014-06-27 21:47 - 00000000 ____D () C:\Windows\erdnt

2014-06-02 20:28 - 2014-06-02 20:28 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-06-02 14:17 - 2014-06-02 14:17 - 00380416 _____ () C:\Users\Jan\Desktop\Gmer-19357.exe

2014-06-02 00:37 - 2014-06-02 00:37 - 00000000 __RSH () C:\MSDOS.SYS

2014-06-02 00:37 - 2014-06-02 00:37 - 00000000 __RSH () C:\IO.SYS

2014-06-01 22:56 - 2014-06-29 03:05 - 00000000 ____D () C:\FRST

2014-06-01 22:47 - 2014-06-29 03:04 - 01073664 _____ (Farbar) C:\Users\Jan\Desktop\FRST.exe

2014-06-01 20:09 - 2014-06-01 20:09 - 00000000 ____D () C:\ProgramData\Panda Security

2014-06-01 20:09 - 2014-06-01 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security

2014-06-01 20:09 - 2014-06-01 20:09 - 00000000 ____D () C:\Program Files\Panda USB Vaccine

2014-06-01 19:58 - 2014-06-01 20:05 - 00848856 _____ (Panda Security ) C:\Users\Jan\Desktop\USBVaccineSetup.exe

2014-06-01 18:41 - 2014-06-01 18:43 - 02347384 _____ (ESET) C:\Users\Jan\Desktop\esetsmartinstaller_deu.exe
 

==================== One Month Modified Files and Folders =======
 

2014-06-29 03:06 - 2014-06-29 03:05 - 00011890 _____ () C:\Users\Jan\Desktop\FRST.txt

2014-06-29 03:05 - 2014-06-01 22:56 - 00000000 ____D () C:\FRST

2014-06-29 03:04 - 2014-06-29 03:04 - 00000000 ____D () C:\Users\Jan\Desktop\FRST-OlderVersion

2014-06-29 03:04 - 2014-06-01 22:47 - 01073664 _____ (Farbar) C:\Users\Jan\Desktop\FRST.exe

2014-06-29 02:30 - 2014-06-06 19:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-06-29 02:13 - 2014-05-20 11:29 - 00608192 _____ () C:\Windows\WindowsUpdate.log

2014-06-28 17:40 - 2013-09-18 23:21 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-06-28 17:40 - 2013-09-18 23:21 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-06-28 17:37 - 2013-09-18 23:23 - 01658526 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-06-28 17:32 - 2014-06-27 12:46 - 00017412 _____ () C:\Windows\PFRO.log

2014-06-28 17:32 - 2014-06-17 21:05 - 00000000 ____D () C:\ProgramData\MFAData

2014-06-28 17:32 - 2014-06-11 10:15 - 00004944 _____ () C:\Windows\setupact.log

2014-06-28 17:32 - 2013-09-18 23:36 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-06-28 16:56 - 2014-06-28 16:56 - 00000000 ____D () C:\Users\Karina Derl\AppData\Roaming\TuneUp Software

2014-06-28 16:50 - 2014-06-28 16:50 - 00000000 ____D () C:\Users\Karina Derl\AppData\Local\MFAData

2014-06-28 14:15 - 2013-09-23 08:06 - 00000000 ____D () C:\Users\Karina Derl\Documents\ALLES Nie Mehr Radlos

2014-06-28 11:00 - 2013-09-22 21:17 - 00000000 ____D () C:\Users\Karina Derl\Documents\K a r i n a s  Docs

2014-06-27 21:58 - 2014-06-27 21:11 - 00000000 ____D () C:\ComboFix

2014-06-27 21:51 - 2013-09-18 23:10 - 00000215 _____ () C:\Windows\system.ini

2014-06-27 21:47 - 2014-06-03 19:48 - 00000000 ____D () C:\Windows\erdnt

2014-06-27 21:15 - 2014-06-03 19:49 - 00000000 ____D () C:\Qoobox

2014-06-27 20:51 - 2014-06-27 20:48 - 05212118 ____R (Swearware) C:\Users\Jan\Desktop\ComboFix.exe

2014-06-27 13:49 - 2014-04-25 16:49 - 00000000 ____D () C:\Users\Jan\Desktop\Galerie Myanmar

2014-06-27 00:05 - 2014-06-27 00:02 - 00000000 ____D () C:\Users\Jan\Desktop\Ausflug Cherrapunji

2014-06-20 13:19 - 2013-11-09 05:09 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2014-06-19 21:02 - 2013-09-21 17:27 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Skype

2014-06-18 13:51 - 2014-06-18 13:51 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-06-17 21:27 - 2014-06-17 21:27 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\TuneUp Software

2014-06-17 21:05 - 2014-06-17 21:05 - 04424240 _____ (AVG Technologies) C:\Users\Jan\Downloads\avg_avct_stb_all_2014_4116_cm10.exe

2014-06-17 21:05 - 2014-06-17 21:05 - 00000000 ____D () C:\Users\Jan\AppData\Local\MFAData

2014-06-11 21:56 - 2014-03-26 23:21 - 00000000 ____D () C:\Users\Jan\Documents\Wichtige Dokus 27.03.14

2014-06-11 10:15 - 2014-06-11 10:15 - 00000000 _____ () C:\Windows\setuperr.log

2014-06-11 00:11 - 2013-09-21 07:52 - 00000000 ____D () C:\Windows\Minidump

2014-06-10 23:51 - 2013-09-22 21:13 - 00000000 ____D () C:\Users\Jan\Documents\Homepage

2014-06-10 16:55 - 2014-06-10 16:55 - 00000000 ____D () C:\Users\Jan\Desktop\20 Myanmar

2014-06-10 14:56 - 2014-06-10 14:56 - 00000000 ____D () C:\Users\Karina Derl\AppData\Roaming\WinRAR

2014-06-09 13:12 - 2013-09-22 21:13 - 00000000 ____D () C:\Users\Jan\Desktop\Ausrüstung

2014-06-07 15:59 - 2014-06-07 15:59 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-06-07 15:02 - 2014-01-20 21:51 - 00000000 ____D () C:\Users\Jan\Desktop\LonelyPlanetKL

2014-06-06 19:11 - 2013-09-20 04:20 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-06-06 19:11 - 2013-09-20 04:20 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-06-06 00:55 - 2014-06-06 00:55 - 00000000 ____D () C:\Users\Jan\AppData\Local\Adobe

2014-06-06 00:53 - 2014-06-06 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-06-05 23:14 - 2014-06-05 23:14 - 00023456 _____ (Phoenix Technologies) C:\Windows\system32\Drivers\DrvAgent32.sys

2014-06-05 23:14 - 2014-06-05 23:14 - 00000000 ____D () C:\Users\Jan\AppData\Local\eSupport.com

2014-06-05 22:46 - 2013-09-20 04:19 - 00000000 ____D () C:\ProgramData\Oracle

2014-06-05 22:45 - 2014-06-05 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-06-05 22:45 - 2014-06-05 22:45 - 00000000 ____D () C:\Program Files\Common Files\Java

2014-06-05 22:45 - 2014-06-05 22:44 - 00004591 _____ () C:\Windows\system32\jupdate-1.7.0_60-b19.log

2014-06-05 22:45 - 2013-09-20 04:18 - 00000000 ____D () C:\Program Files\Java

2014-06-05 16:49 - 2014-06-05 16:49 - 00854367 _____ () C:\Users\Jan\Desktop\SecurityCheck.exe

2014-06-04 23:57 - 2013-12-11 10:03 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-06-04 23:57 - 2013-12-11 10:03 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-06-04 18:42 - 2014-06-04 18:42 - 00000000 ____D () C:\Windows\ERUNT

2014-06-04 18:36 - 2014-06-04 18:27 - 00000000 ____D () C:\AdwCleaner

2014-06-04 18:25 - 2014-06-04 18:25 - 01016261 _____ (Thisisu) C:\Users\Jan\Desktop\JRT.exe

2014-06-04 18:07 - 2014-06-04 18:07 - 01327971 _____ () C:\Users\Jan\Desktop\adwcleaner_3.211.exe

2014-06-04 12:16 - 2013-09-18 23:15 - 00000000 ____D () C:\Windows\rescache

2014-06-04 11:59 - 2013-09-18 23:14 - 00000000 ____D () C:\Windows\Microsoft.NET

2014-06-04 11:45 - 2013-09-22 21:13 - 00000000 ____D () C:\Users\Jan\Documents\Anleitungen&Technik

2014-06-03 21:52 - 2014-06-03 21:52 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-06-03 21:52 - 2013-09-20 00:07 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-06-03 21:52 - 2013-09-18 23:27 - 00000000 ____D () C:\Windows\system32\de-DE

2014-06-03 21:47 - 2013-09-20 00:12 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER

2014-06-03 20:29 - 2013-09-18 23:10 - 00000000 ___RD () C:\Users\Public

2014-06-03 20:29 - 2013-09-18 23:05 - 00000000 ____D () C:\Users\Administrator

2014-06-03 10:14 - 2013-09-20 22:02 - 00000000 ____D () C:\Windows\Downloaded Installations

2014-06-02 20:28 - 2014-06-02 20:28 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-06-02 20:27 - 2013-09-20 00:47 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2014-06-02 20:26 - 2013-09-20 00:47 - 00000000 ____D () C:\ProgramData\Adobe

2014-06-02 20:26 - 2013-09-20 00:47 - 00000000 ____D () C:\Program Files\Adobe

2014-06-02 19:11 - 2013-09-23 01:42 - 00000000 ____D () C:\Program Files\CSR

2014-06-02 19:08 - 2013-09-20 23:40 - 00000000 ____D () C:\Users\Jan\Documents\Bluetooth FTP Share

2014-06-02 18:19 - 2013-09-19 22:32 - 00111520 _____ () C:\Users\Jan\AppData\Local\GDIPFONTCACHEV1.DAT

2014-06-02 18:19 - 2013-09-18 23:21 - 00445632 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-06-02 17:02 - 2013-09-20 01:10 - 00000000 ____D () C:\Program Files\Common Files\ACD Systems

2014-06-02 16:58 - 2013-09-20 00:57 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe

2014-06-02 14:17 - 2014-06-02 14:17 - 00380416 _____ () C:\Users\Jan\Desktop\Gmer-19357.exe

2014-06-02 00:37 - 2014-06-02 00:37 - 00000000 __RSH () C:\MSDOS.SYS

2014-06-02 00:37 - 2014-06-02 00:37 - 00000000 __RSH () C:\IO.SYS

2014-06-01 20:09 - 2014-06-01 20:09 - 00000000 ____D () C:\ProgramData\Panda Security

2014-06-01 20:09 - 2014-06-01 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security

2014-06-01 20:09 - 2014-06-01 20:09 - 00000000 ____D () C:\Program Files\Panda USB Vaccine

2014-06-01 20:05 - 2014-06-01 19:58 - 00848856 _____ (Panda Security ) C:\Users\Jan\Desktop\USBVaccineSetup.exe

2014-06-01 18:43 - 2014-06-01 18:41 - 02347384 _____ (ESET) C:\Users\Jan\Desktop\esetsmartinstaller_deu.exe

2014-05-30 22:23 - 2013-09-20 00:02 - 00000000 ____D () C:\Program Files\Nokia
 

Some content of TEMP:

====================

C:\Users\Jan\AppData\Local\temp\avgnt.exe

C:\Users\Jan\AppData\Local\temp\catchme.dll

C:\Users\Karina Derl\AppData\Local\temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-06-28 00:53
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:28-06-2014 02

Ran by Jan at 2014-06-29 03:07:27

Running from C:\Users\Jan\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Digital Editions 2.0 (HKLM\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated)

Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM\...\{BCFB58FF-181E-472F-A9DB-827B75C1EDF7}) (Version: 12.0.4.144 - Adobe Systems, Inc)

Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.6 - Sereby Corporation)

Ampps 2.0 (HKLM\...\Ampps_is1) (Version:  - Softaculous Ltd.)

Atheros 802.11 bgn Network Adapter (Version: 1.0.0.0 - Broadcom) Hidden

Atheros 802.11g Network Adapter (HKLM\...\InstallShield_{06A6143C-0703-4946-9E20-355F306ADF11}) (Version: 1.0.0.0 - Broadcom)

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)

CCleaner (HKLM\...\CCleaner) (Version: 4.08 - Piriform)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)

Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9D8D67FD-8FAB-4B98-A121-4CFA10380058}) (Version:  - Microsoft)

DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)

DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation)

Intel(R) Graphics Media Accelerator 500 (HKLM\...\LPCO) (Version:  -  Intel Corporation)

Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.600 - Oracle)

Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden

Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Kels' Win7 CPL Bonus Pack! (HKLM\...\CPLBonus) (Version: 1.3 - Kelsenellenelvian EverDawn)

Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version:  - )

Microsoft .NET Framework 1.1 Security Update (KB2742597) (HKLM\...\M2742597) (Version:  - )

Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version:  - )

Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 1.1 SP1 (Version: 1.1.4322 - Microsoft) Hidden

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.51078 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51078 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51078 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.51078 - Microsoft Corporation) Hidden

Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)

Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60810 (HKLM\...\{70B7F782-CA10-3CAC-98F7-3C748845BD88}) (Version: 11.0.60810 - Microsoft Corporation)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60810 (HKLM\...\{FE695D59-555C-3641-925D-BF65EC37B5D1}) (Version: 11.0.60810 - Microsoft Corporation)

Microsoft Visual F# 2.0 Runtime (HKLM\...\{85467CBC-7A39-33C9-8940-D72D9269B84F}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual J# 2.0 Redistributable Package - SE (HKLM\...\{DFAA3D2B-7087-464E-823B-738A23C29C27}) (Version: 2.0.50728 - Microsoft Corporation)

Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1 - Nokia) Hidden

Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden

MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden

MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Nokia Connectivity Cable Driver (HKLM\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)

Notepad++ (HKLM\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)

Option WWAN Driver 5.1.37.0 Installer  (HKLM\...\{884BB5CC-108E-41a9-936D-955C999C06A1}_x) (Version: 3.5.1.1140 - Option NV)

Option WWAN Driver 5.1.37.0 Installer (Version: 3.5.1.1140 - Option NV) Hidden

Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Panda USB Vaccine 1.0.1.4 (HKLM\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version:  - Panda Security)

PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)

Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)

PlayMemories Camera Apps Downloader (HKLM\...\{E4B95A36-0EF2-44C6-B939-5B3DBBC34502}) (Version: 1.1.1975.475 - Sony Network Entertainment International LLC)

Power Management (HKLM\...\InstallShield_{C36E5EC0-A87E-4994-844B-1DE75ED22BD8}) (Version: 1.0.0.16C - Nokia)

Power Management (Version: 1.0.0.16C - Nokia) Hidden

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7010 - Realtek Semiconductor Corp.)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden

Shape Collage (HKLM\...\ShapeCollage) (Version:  - Shape Collage Inc.)

Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

SmartFTP Client (HKLM\...\{60B56C13-56FA-47E9-A5E7-32540117E5FE}) (Version: 5.0.1350.0 - SmartSoft Ltd.)

SmartFTP Client 4.0 Setup Files (remove only) (HKLM\...\SmartFTP Client 4.0 Setup Files) (Version: 4.0 - SmartSoft Ltd)

SMPlayer 0.8.6 (HKLM\...\SMPlayer) (Version: 0.8.6 - Ricardo Villalba)

TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.20935 - TeamViewer)

Tinypic 3.18 (HKLM\...\{E3723A04-A894-4036-A78E-282E18F43C0A}_is1) (Version: Tinypic 3.18 - E. Fiedler)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)

Update for Microsoft Access 2013 (KB2768008) 32-Bit Edition (HKLM\...\{90150000-0015-0407-0000-0000000FF1CE}_Office15.PROPLUS_{02DD2FBD-76D9-4B8B-AAE6-657542F4F6E6}) (Version:  - Microsoft)

Update for Microsoft Access 2013 (KB2827233) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FB31ABE4-BB41-4E9A-A252-1A4BC9DC8C43}) (Version:  - Microsoft)

Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)

Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)

Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUS_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)

Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)

Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)

Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)

Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version:  - Microsoft)

Update for Microsoft InfoPath 2013 (KB2837648) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{F15AA550-A0B9-44AD-9067-2294CCA51F1C}) (Version:  - Microsoft)

Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{7FBE2D23-9F3C-4983-B927-2A4BF600B7A7}) (Version:  - Microsoft)

Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6764E50D-D076-41BC-B069-08DD488AE88B}) (Version:  - Microsoft)

Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{885A0D95-13A8-4A31-B01C-B02454F414AA}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F307363-49DA-4AE7-9D9D-DAA1FF59274F}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6E6B2968-B9D7-40C9-9FC2-8E729DDBB39C}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{49893259-C896-4972-9B6C-6B75790945F1}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2738038) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{AFDC9BDD-5608-4A21-8066-13E2ACE1EDB4}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F8AD68D-9F41-446E-AA81-C43BF88671BF}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760242) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BCD0EA38-A8FB-4F3D-B04E-DFFB38BC7849}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9E03AB38-EF60-4DE6-92FB-656E23403BFA}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{E58009CD-D950-4CAE-89B4-E97C3B78319B}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{03FC8649-9511-4FB1-BE34-67A442505DCF}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B299B17D-874D-43DD-84AA-414BD9C70021}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{65D789FD-9118-45AF-8DE4-F49F358A8525}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{B9DB28D9-15D0-4DDE-A123-C9B82AC9A579}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817314) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B9A3A7A7-8B5B-4D07-9816-80EE2EA5B9B7}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{670559E6-5725-4B84-A16C-0859771F25DE}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5EFADE14-CE0B-43BF-ADD2-850FCB79485F}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{8E942418-D7DE-48A4-8210-AD994006EFAA}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{188DFB16-BA3F-4AD3-9432-45C8FA64EC8B}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817626) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BC369230-B0E0-4BB0-82D6-E93196060BFA}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817636) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{2D355F71-076A-42AD-8747-6132105441F4}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817636) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{2D355F71-076A-42AD-8747-6132105441F4}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2825631) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{E458713D-E208-4098-A155-EA1152F9B301}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2825631) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{E458713D-E208-4098-A155-EA1152F9B301}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2826004) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FD782270-0456-4B87-AC5E-C6EE2D063C48}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827225) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{C5CF8938-646A-41A5-A4E6-6EEE4205CBA4}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.PROPLUS_{08F8B8BC-97B5-4110-8FC1-A840DEAD0DF9}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.PROPLUS_{F75F8521-118D-4DE2-927F-073BE7B6DC7F}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.PROPLUS_{E11A0DDD-9F6D-49C6-8F02-850D44DD7639}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.PROPLUS_{A1416C8A-2BA0-43D0-BCD5-C6C29D029327}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827230) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{954A0EA5-CCCB-4B4E-8664-40E2CC8BBCBB}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4B1A48FA-CAE2-49BB-A912-6F96AE7875D9}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0090-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2863825) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{96754DD8-5AF9-4CF8-A5A9-19770CD9AFBC}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2863844) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{8AEAF88E-A488-4C1E-B10D-F00143BA650F}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2863860) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4E47A3B9-D863-4CE7-9488-847F2981361B}) (Version:  - Microsoft)

Update for Microsoft OneDrive for Business (KB2863864) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{48D4C003-065C-460C-A864-BB18A159F3D6}) (Version:  - Microsoft)

Update for Microsoft OneDrive for Business (KB2863864) 32-Bit Edition (HKLM\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUS_{48D4C003-065C-460C-A864-BB18A159F3D6}) (Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)

Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version:  - Microsoft)

Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUS_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)

Update for Microsoft Outlook 2013 (KB2863911) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6022B459-32A4-4318-A9A4-815C0BCEF977}) (Version:  - Microsoft)

Update for Microsoft Outlook 2013 (KB2863911) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUS_{DA3F3D63-4C9F-407B-9CA1-39638F85BDDD}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2013 (KB2837627) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{CA8215E2-4E68-4BCA-BBEB-D4ED8140F037}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2013 (KB2837627) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUS_{CA8215E2-4E68-4BCA-BBEB-D4ED8140F037}) (Version:  - Microsoft)

Update for Microsoft Publisher 2013 (KB2837635) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{696ACAB0-DCE3-4050-849A-629CE94A9E3A}) (Version:  - Microsoft)

Update for Microsoft Publisher 2013 (KB2837635) 32-Bit Edition (HKLM\...\{90150000-0019-0407-0000-0000000FF1CE}_Office15.PROPLUS_{67F8928F-664E-47A9-B283-3121D5F904CC}) (Version:  - Microsoft)

Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)

Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version:  - Microsoft)

Update for Microsoft Visio 2013 (KB2817306) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{166909FC-6736-4EE5-9491-1BF9A4EE84E7}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)

Update for Microsoft Word 2013 (KB2863909) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FF3BD143-BA46-4948-A71F-5B07AA1706BB}) (Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)

Windows 7 Manager (HKLM\...\{92A8D72E-784B-4F09-AC0E-A9E0C1F64D2C}) (Version: 4.3.1 - Yamicsoft)

Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Mail (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Writer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Writer Resources (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)

WinHTTrack Website Copier 3.47-27 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.47.27 - HTTrack)

WinRAR 5.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
 

==================== Restore Points  =========================
 

12-06-2014 19:29:05 Geplanter Prüfpunkt

17-06-2014 15:53:52 Installed AVG 2014

17-06-2014 15:54:54 Installed AVG 2014

24-06-2014 17:59:44 Geplanter Prüfpunkt

26-06-2014 20:10:07 ComboFix created restore point

28-06-2014 11:46:42 Removed AVG 2014

28-06-2014 11:50:27 Removed AVG 2014
 

==================== Hosts content: ==========================
 

2013-09-18 23:28 - 2014-06-27 21:50 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {177023BE-6F80-4FCB-9D73-C0729BF6DEAD} - System32\Tasks\{889FB738-3AD4-4989-B0EF-13387171F078} => C:\Program Files\Hotkey\CeEKey.exe

Task: {48B66977-17F9-4E69-975A-D20921F93369} - System32\Tasks\PandaUSBVaccine => C:\Program Files\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()

Task: {73D5A2BF-8A59-486B-8A3A-4D12F0E40174} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-02] (Microsoft Corporation)

Task: {80E362B6-D839-4BCB-A7DF-9479A584EBC2} - System32\Tasks\{8A3E7ECB-AB02-4243-90D5-50C3BC3E0E64} => C:\Program Files\Hotkey\CeEKey.exe

Task: {9739CBE6-E497-4B01-9A54-AA153E9945AC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-06] (Adobe Systems Incorporated)

Task: {AD10B1F6-71C8-4F94-A94C-1E968005BB05} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)

Task: {B5D249AF-53C5-4932-9079-732735B82AF1} - System32\Tasks\{EA5066EC-FA1B-4041-A39B-A75F69F87CA3} => C:\Program Files\Hotkey\CeEKey.exe

Task: {BD18EDD1-39D7-4257-869D-0F9B94A20803} - System32\Tasks\{3DD4163B-93EC-4366-942A-FBCD436F5E7D} => C:\Program Files\Hotkey\CeEKey.exe

Task: {CB74E86E-A362-47DD-B336-0F46E51BC4D0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)

Task: {D220DB42-1B65-4DA4-BF3B-98886069DEC2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-09-21 18:21 - 2013-09-21 18:20 - 00011776 _____ () C:\Windows\system32\PrLdrSrv.exe

2013-09-04 16:44 - 2013-09-04 16:44 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2014-06-18 13:51 - 2014-06-18 13:51 - 03852912 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
 

==================== EXE Association (whitelisted) =============
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: gusvc => 3

MSCONFIG\Services: HDPSrv => 3

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: TeamViewer8 => 3

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/28/2014 05:34:26 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/28/2014 05:00:54 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/28/2014 10:44:36 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/27/2014 09:52:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d6727a7

Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.18429, Zeitstempel: 0x5330e506

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000aa857

ID des fehlerhaften Prozesses: 0xaec

Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0

Pfad der fehlerhaften Anwendung: Explorer.EXE1

Pfad des fehlerhaften Moduls: Explorer.EXE2

Berichtskennung: Explorer.EXE3
 

Error: (06/27/2014 09:50:22 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/27/2014 00:48:08 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/27/2014 01:02:43 AM) (Source: System Restore) (EventID: 8193) (User: )

Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\wbem\wmiprvse.exe; Beschreibung = ComboFix created restore point; Fehler = 0x800706be).
 

Error: (06/25/2014 09:05:04 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/24/2014 11:00:49 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/24/2014 08:50:46 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (06/28/2014 05:33:57 PM) (Source: Service Control Manager) (EventID: 7016) (User: )

Description: Der Dienst "PrLdrSrv" hat einen ungültigen aktuellen Status gemeldet: 14
 

Error: (06/28/2014 05:33:52 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 

Error: (06/28/2014 05:31:56 PM) (Source: Service Control Manager) (EventID: 7016) (User: )

Description: Der Dienst "PrLdrSrv" hat einen ungültigen aktuellen Status gemeldet: 14
 

Error: (06/28/2014 05:29:41 PM) (Source: Tcpip) (EventID: 4199) (User: )

Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.0.5 mit dem Computer mit der

Netzwerkhardwareadresse C4-88-E5-14-72-8D ermittelt. Netzwerkvorgänge könnten daher auf diesem

System unterbrochen werden.
 

Error: (06/28/2014 05:01:13 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 

Error: (06/28/2014 05:00:02 PM) (Source: Service Control Manager) (EventID: 7016) (User: )

Description: Der Dienst "PrLdrSrv" hat einen ungültigen aktuellen Status gemeldet: 14
 

Error: (06/28/2014 04:58:21 PM) (Source: Service Control Manager) (EventID: 7016) (User: )

Description: Der Dienst "PrLdrSrv" hat einen ungültigen aktuellen Status gemeldet: 14
 

Error: (06/28/2014 10:44:40 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 

Error: (06/28/2014 10:44:21 AM) (Source: Service Control Manager) (EventID: 7016) (User: )

Description: Der Dienst "PrLdrSrv" hat einen ungültigen aktuellen Status gemeldet: 14
 

Error: (06/28/2014 10:41:48 AM) (Source: Service Control Manager) (EventID: 7016) (User: )

Description: Der Dienst "PrLdrSrv" hat einen ungültigen aktuellen Status gemeldet: 14
 
 

Microsoft Office Sessions:

=========================

Error: (06/28/2014 05:34:26 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/28/2014 05:00:54 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/28/2014 10:44:36 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/27/2014 09:52:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Explorer.EXE6.1.7601.175674d6727a7SHELL32.dll6.1.7601.184295330e506c0000005000aa857aec01cf9223a3011efdC:\Windows\Explorer.EXEC:\Windows\system32\SHELL32.dll2993b985-fe17-11e3-a445-f06582551f9a
 

Error: (06/27/2014 09:50:22 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/27/2014 00:48:08 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/27/2014 01:02:43 AM) (Source: System Restore) (EventID: 8193) (User: )

Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x800706be
 

Error: (06/25/2014 09:05:04 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/24/2014 11:00:49 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/24/2014 08:50:46 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 92%

Total physical RAM: 1014.27 MB

Available physical RAM: 77.98 MB

Total Pagefile: 2506.55 MB

Available Pagefile: 1123.1 MB

Total Virtual: 2047.88 MB

Available Virtual: 1912.54 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:118.9 GB) (Free:22.65 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 000D7148)

Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================