Trojaner-Board
Seite 1 von 6 1 23 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen (https://www.trojaner-board.de/157489-ungewolltes-aktivieren-proxyserververbindung-interneteinstellungen.html)

weti 11.08.2014 19:05
Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen
 
Liste der Anhänge anzeigen (Anzahl: 1)
Hallo Leute,

ich habe hier zwar jede Menge gelesen über das Thema, aber nichts trifft eigentlich so richtigh mein Problem.

Es ist folgendes: bei jedem Neustart ist die Einstellung 'Proxyserver für LAN verwenden' aktiviert (s.screenshot). Deshalb bekomme ich mit Chrome und mit dem IE keine Verbindung zum Internet (Firefox und Opera funktionieren tadellos). Da ich aber für bestimmte Addons den Chrome benutze ist es ziemlich nervig jedes Mal manuell den Proxyserver zu deaktivieren.

Es passieren keine ungewollten Internetverbindungen o.ä - zumindest merke ich nichts davon.

Betriebssystem ist Win7/64. Alle updates wurden gemacht. Auch die Softwareupdates.

Hat einer eine Idee, wie ich das beheben könnte.

Vielen Dank und schönen abend noch.
Werner

cosinus 11.08.2014 19:11
Hallo und :hallo:

Eine Möglichkeit wäre: Malware. Die macht das schonmal ganz gerne, den Proxy aus den localhost zu setzen, damit dir im Browser schön manipulierte Seiten angezeigt werden oder brisante Daten mitgeschnitten werden können...


Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

felix1 11.08.2014 19:29
Zitat:
Zitat von weti (Beitrag 1343134)
Es ist folgendes: bei jedem Neustart ist die Einstellung 'Proxyserver für LAN verwenden' aktiviert (s.screenshot). Deshalb bekomme ich mit Chrome und mit dem IE keine Verbindung zum Internet (Firefox und Opera funktionieren tadellos). Da ich aber für bestimmte Addons den Chrome benutze ist es ziemlich nervig jedes Mal manuell den Proxyserver zu deaktivieren.
Abgesehen von den Hinweisen von Cosinus, die Du unbedingt befolgen solltest, stellt sich mir hier die Frage: Wer hat in seinem Heimnetzwerk überhaupt einen Proxy am Laufen. Maximal den Router als DHCP- und DNS-Server.

cosinus 11.08.2014 19:34
Er hat bestimmt keinen Proxy, Felix, er will ja auch, dass es dauerhaft deaktiviert bleibt ;)

felix1 11.08.2014 19:42
Zitat:
Zitat von cosinus (Beitrag 1343159)
Er hat bestimmt keinen Proxy, Felix, er will ja auch, dass es dauerhaft deaktiviert bleibt ;)
Hallo Cosinus, das mit dem Proxy ist Deineseits vollkommen richtig:Boogie:
Aus den Postings geht aber nicht hervor, um welches BS es sich handelt und in welchen Netzwerken der PC schon registriert war/ist:alc:

cosinus 11.08.2014 19:43
Mööööp :p er hats doch beschrieben welches OS

Zitat:
Zitat von weti (Beitrag 1343134)
Betriebssystem ist Win7/64. Alle updates wurden gemacht. Auch die Softwareupdates.

weti 12.08.2014 09:46
Hallo Cosinus und die anderen,
erstmal vielen Dank für die Antworten. Ich habe einige scans gemacht, die ich anfüge. Vielleicht ist es untergegangen, aber ich habe dadurch keine Beinträchtigungen durch falsche Weiterleitungen beim surfen oder ähnliches. Chrome und IE verweigern nur die Internetverbindung mit dem Hinweis auf den Proxyserver.

Der FRST lässt sich nicht starten (keine Rückmeldung und das Programm muss manuell beendet werden). Vielleicht ist folgendes noch von Bedeutung: Ich konfiguriere meine Agfeo-Anlage über folgenden Link: hxxp://127.0.0.1:5080/. Das ist zumindest die gleiche IP aber mit einem anderen Port. Oder?

Hier die scans (die leider älter als 7 Tage sind, aber ich war in der Zwischenzeit häufig unterwegs, aber alle kurz nach dem Auftreten des Problems). :

Code:
# AdwCleaner v3.216 - Bericht erstellt am 24/07/2014 um 20:26:35
# Aktualisiert 17/07/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Admin - ADMIN-PC
# Gestartet von : D:\Download\Aktuell\adwcleaner_3.216.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\prefs.js ]


-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [917 octets] - [24/07/2014 14:56:07]
AdwCleaner[R1].txt - [857 octets] - [24/07/2014 20:26:35]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [916 octets] ##########
Code:
C:\Download\aktuell\GCSMSetup_3_5_20.exe        Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
C:\Download\aktuell\Unlocker1.9.1-x64.exe        Variante von Win32/Toolbar.Babylon evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
C:\Download\aktuell\vlc-2.0.5-win64.exe        Win32/StartPage.OPH Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert
D:\Download\Grafik\DesignPro\SoftonicDownloader_fuer_avery-designpro.exe        Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
D:\Download\Musik\vlc-1.1.7-win32.exe        Win32/StartPage.OIE Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_internet_accelerator_3_3.20_sm.exe        Win32/Toolbar.Conduit evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_uninstaller_4_4.22_sm.exe        Win32/Toolbar.Conduit evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
D:\Download\Software\Ashampoo\ashampoo_winoptimizer_8_e8.13_sm.exe        Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
D:\GKT-Service\Medien\Gassner\Engel für Opa.exe        Variante von Win32/Adware.ToolPlugin.A Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_internet_accelerator_3_3.20_sm.exe        Win32/Toolbar.Conduit evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_uninstaller_4_4.22_sm.exe        Win32/Toolbar.Conduit evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\ashampoo_winoptimizer_8_e8.13_sm.exe        Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\DVD_Shrink_TSV31S5I.exe        Variante von Win32/Toolbar.Conduit.AE evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\GCSMSetup_3_5_20.exe        Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\SoftonicDownloader_fuer_avery-designpro.exe        Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\Unlocker1.9.1-x64.exe        Variante von Win32/Toolbar.Babylon evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.0.5-win64.exe        Win32/StartPage.OPH Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.0-win64.exe        NSIS/StartPage.CC Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.1-win64.exe        NSIS/StartPage.CC Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Aktuell\vlc-2.1.3-win64.exe        NSIS/StartPage.CC Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Grafik\DesignPro\SoftonicDownloader_fuer_avery-designpro.exe        Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Musik\vlc-1.1.7-win32.exe        Win32/StartPage.OIE Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_internet_accelerator_3_3.20_sm.exe        Win32/Toolbar.Conduit evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_uninstaller_4_4.22_sm.exe        Win32/Toolbar.Conduit evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\Download\Software\Ashampoo\ashampoo_winoptimizer_8_e8.13_sm.exe        Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert
E:\GKT-Service\Medien\Gassner\Engel für Opa.exe        Variante von Win32/Adware.ToolPlugin.A Anwendung        gelöscht - in Quarantäne kopiert
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Admin on 24.07.2014 at 20:42:13,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Successfully deleted the following from C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\tefcdjqq.default\prefs.js

user_pref("extensions.lastpass.searchforsiteswithinaddressbar", true);
Emptied folder: C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\tefcdjqq.default\minidumps [65 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.07.2014 at 20:48:55,68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus 12.08.2014 10:06
Zitat:
Der FRST lässt sich nicht starten (keine Rückmeldung und das Programm muss manuell beendet werden). Vielleicht ist folgendes noch von Bedeutung: Ich konfiguriere meine Agfeo-Anlage über folgenden Link: hxxp://127.0.0.1:5080/. Das ist zumindest die gleiche IP aber mit einem anderen Port. Oder?
FRST via Rechtsklick als Admin gestartet?

Mit deiner Agfeo hat dein Problem so nichts zu tun denke ich, deine Anlage ist "zufällig" auch über den localhost erreichbar, mach aber keinen Proxy. localhost ( = 127.0.0.1 ) ist immer der lokale Rechner, vor man gerade hockt

weti 12.08.2014 10:08
Ja, habe ich auch als Admin probiert - gleiches Ergenis. Das Programm steht still (keine Rückmeldung in der Kopfzeile).
Agfeo: Das ist aber die gleiche IP, die als >Adresse im Proxy angegeben wird (s. screenshot vom ersten Posting). Ich bin jetzt erstmal weg. Komme in ca 1 Stunde wieder. Und - danke nochmal. Ich bin richtig froh, dass es euch gibt. :-)

cosinus 12.08.2014 10:51
Ja schon klar :D
Es gibt aber noch zig andere Anwendungsbereiche für den localhost (127.0.0.1) siehe localhost ? Wikipedia

Das FRST nicht geht, würde ich mal CF vorschlagen:


Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

weti 12.08.2014 13:38
Hier der CombiFix-Log:

Code:
ComboFix 14-08-12.01 - Admin 12.08.2014  14:29:43.2.4 - x64
Microsoft Windows 7 Professional  6.1.7601.1.1252.49.1031.18.8169.6258 [GMT 2:00]
ausgeführt von:: c:\users\Admin\Desktop\ComboFix.exe
AV: BullGuard Antivirus *Disabled/Outdated* {C3CCAC61-52F7-A056-1860-6406566E2578}
FW: BullGuard Firewall *Disabled* {FBF72D44-1898-A10E-333F-CD33A8BD6203}
SP: BullGuard Antispyware *Disabled/Outdated* {78AD4D85-74CD-AFD8-22D0-5F742DE96FC5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
ADS - Windows: deleted 192 bytes in 1 streams.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Admin\AppData\Local\assembly\tmp
c:\users\Admin\AppData\Local\assembly\tmp\00176MEY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\00176MEY\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\02P0M1FY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\02P0M1FY\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0DJKRJBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0DJKRJBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0DPEQADT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0DPEQADT\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0EIBWHKF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0EIBWHKF\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0LOFJ1O8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0LOFJ1O8\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0LXRKBXS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0LXRKBXS\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\0WH7QEF0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\0WH7QEF0\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\15LTBU6S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\15LTBU6S\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1C1WIVCG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1C1WIVCG\HtmlAgilityPack.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1JGQGLZU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1JGQGLZU\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1N0WUGSC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1N0WUGSC\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1ODANJKJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1ODANJKJ\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1PQ5GDN2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1PQ5GDN2\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\1SQLZKDO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\1SQLZKDO\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\22RXY89H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\22RXY89H\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\24CF2QW8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\24CF2QW8\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\24ZE7LTG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\24ZE7LTG\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\25MEH41H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\25MEH41H\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\27FCWMQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\27FCWMQF\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\27MVULCT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\27MVULCT\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\29NZXJCV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\29NZXJCV\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2BUHA8QU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2BUHA8QU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2CWTVAYO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2CWTVAYO\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2D0GTWDI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2D0GTWDI\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2FDSP8D0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2FDSP8D0\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2IGK9WM4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2IGK9WM4\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2Q97RSBL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2Q97RSBL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2RBGVGR1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2RBGVGR1\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2RUXCAQE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2RUXCAQE\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\2ZFP77SH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\2ZFP77SH\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\30387T1R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\30387T1R\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\35PL3TAM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\35PL3TAM\DevExpress.XtraBars.v12.2.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3732Z2Z1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3732Z2Z1\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3A64AH9J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3A64AH9J\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\3Y6M888V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\3Y6M888V\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\42YZ4C0R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\42YZ4C0R\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\44RJOMKY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\44RJOMKY\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\44T7J65D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\44T7J65D\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\450DHXK6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\450DHXK6\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\461I5MWY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\461I5MWY\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4888VCY6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4888VCY6\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4EM2ZUHM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4EM2ZUHM\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4HFG5GL3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4HFG5GL3\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4IQ9GQTD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4IQ9GQTD\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4JDNS8WW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4JDNS8WW\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\4YWQ5P34\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\4YWQ5P34\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\569X1N6D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\569X1N6D\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\57EESQU6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\57EESQU6\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5A4DHLZ3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5A4DHLZ3\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5A7Q1MGK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5A7Q1MGK\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5E9JWOOQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5E9JWOOQ\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5GGYW3PS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5GGYW3PS\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5J0Q9GWA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5J0Q9GWA\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5K8UIUHJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5K8UIUHJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5KXFFIWA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5KXFFIWA\Microsoft.SharePoint.Client.Runtime.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5L38UN5F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5L38UN5F\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5LW26AFE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5LW26AFE\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5PNQG3LM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5PNQG3LM\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5Q0AFU2Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5Q0AFU2Y\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5T6MXJ1J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5T6MXJ1J\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5VB4D8VH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5VB4D8VH\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\5X3H4DKW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\5X3H4DKW\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\60COTC1J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\60COTC1J\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\60N6LHS4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\60N6LHS4\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\68MTXXXP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\68MTXXXP\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\69UVAD2H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\69UVAD2H\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6BHF1UER\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6BHF1UER\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6D01O46F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6D01O46F\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6DBVQ1MZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6DBVQ1MZ\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\6V0P5B4J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\6V0P5B4J\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\70XXPII2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\70XXPII2\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\77MHLYTQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\77MHLYTQ\yourMail.Client.UI.CustomControls.DLL
c:\users\Admin\AppData\Local\assembly\tmp\78KCU6BN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\78KCU6BN\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\78QDQ33V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\78QDQ33V\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\79XUCTWV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\79XUCTWV\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7CHZ2QG7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7CHZ2QG7\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7CPYE88B\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7CPYE88B\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7DVCCYGD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7DVCCYGD\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7GBTF7SF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7GBTF7SF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7LIP180C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7LIP180C\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7N2A06BU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7N2A06BU\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7NN9QIY0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7NN9QIY0\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7UT53HKN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7UT53HKN\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7VHTXXSM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7VHTXXSM\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7WR5960X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7WR5960X\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\7YWIR8C5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\7YWIR8C5\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\817OUN0Z\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\817OUN0Z\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\81JLTVFH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\81JLTVFH\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\83T1EZCZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\83T1EZCZ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\850YQX35\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8B7M90DH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8B7M90DH\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8F2KG91Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8F2KG91Q\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8NZ1EW9W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8NZ1EW9W\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8R930GNY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8R930GNY\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8TFP21VE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8TFP21VE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8U16ZJAX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8U16ZJAX\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\8XLR9U28\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\8XLR9U28\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\90QKRAEU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\90QKRAEU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\91HP1FC4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\91HP1FC4\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9CQFBUBU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9CQFBUBU\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9J2LVF2Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9J2LVF2Y\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9VDT7S5Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9VDT7S5Y\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9VQPXOMD\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9VQPXOMD\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9XGL7WLH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9XGL7WLH\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\9XHWUMK1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\9XHWUMK1\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\A07AYL66\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\A07AYL66\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AF9SHG1Z\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AF9SHG1Z\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AJVPY44W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AJVPY44W\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\AUGWQGV3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\AUGWQGV3\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B1VO73V5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B1VO73V5\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B2KYY3NK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B2KYY3NK\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B7PYGCF7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B7PYGCF7\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\B7TPGJ3K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\B7TPGJ3K\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BB6ZWGUA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BB6ZWGUA\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BGSGD8J0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BGSGD8J0\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BMDJG8GY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BMDJG8GY\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BRMQOLQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BRMQOLQF\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BSOB3HLA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BSOB3HLA\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BXJ7A9T3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BXJ7A9T3\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BZ2DUKU2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BZ2DUKU2\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\BZJU4MF5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\BZJU4MF5\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C1RRDH7R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C1RRDH7R\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C5LC7M4H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C5LC7M4H\Chili.Opf3.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C8827MYH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C8827MYH\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\C9YR03LC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\C9YR03LC\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CF37C9M5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CF37C9M5\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CIZTBNVC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CIZTBNVC\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CJBN9PU7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CJBN9PU7\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CNKNU3KF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CNKNU3KF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\CTWKMR58\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\CTWKMR58\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D02AWTQL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D02AWTQL\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D5BRBHQ8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D5BRBHQ8\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\D8RCOFFM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\D8RCOFFM\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DM35IUDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DM35IUDU\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DO11LIV4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DO11LIV4\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DRVN20YM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DRVN20YM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DU7LF8WA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DU7LF8WA\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DU7ZVBYX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DU7ZVBYX\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DVHXT2DU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DVHXT2DU\Microsoft.SharePoint.Client.Runtime.DLL
c:\users\Admin\AppData\Local\assembly\tmp\DY247WSZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\DY247WSZ\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E1BR60VV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E1BR60VV\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E1TUOJQF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E1TUOJQF\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E3P0V7X3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E3P0V7X3\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E4JZS6B5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E4JZS6B5\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E6OGGWVW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E6OGGWVW\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E8ZAUOT5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E8ZAUOT5\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\E9IMZCIN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\E9IMZCIN\ICSharpCode.SharpZipLib.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EBJAYLN8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EBJAYLN8\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ECB4QF5B\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ECB4QF5B\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EFWMK5WY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EFWMK5WY\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EKUYTGE9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EKUYTGE9\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EMUDB9E0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EMUDB9E0\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EN4WTXM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EN4WTXM1\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EQL8MPXS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EQL8MPXS\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EU6VVMBH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EU6VVMBH\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EW734FBR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EW734FBR\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\EYMNE77X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\EYMNE77X\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F0DMY1OF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F0DMY1OF\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F3311M7W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F3311M7W\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\F3KCXNMS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\F3KCXNMS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FBDGKUMJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FBDGKUMJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FBUGBZRI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FBUGBZRI\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FCS9I47X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FCS9I47X\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FENXY2EW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FENXY2EW\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FFHTCDUS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FFHTCDUS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FKBBSQAI\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FKBBSQAI\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FKIR5FLU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FKIR5FLU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FO0FW5IF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FO0FW5IF\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FV1YH2OL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FV1YH2OL\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FX4RWU13\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FX4RWU13\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FXPEBQ8R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FXPEBQ8R\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\FYTSDNFS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\FYTSDNFS\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G66L1KPZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G66L1KPZ\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G77UAO3R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G77UAO3R\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G9CC0GQT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G9CC0GQT\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\G9XQ6O2W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\G9XQ6O2W\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GLYH2P4D\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GLYH2P4D\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GMGB2WEK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GMGB2WEK\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GOWAN7RE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GOWAN7RE\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GRUBPH5I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GRUBPH5I\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GU1VDGVT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GU1VDGVT\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GUWVIMXN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GUWVIMXN\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GV4HU1R6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GV4HU1R6\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\GYIJXWF8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\GYIJXWF8\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H1W0ZLXG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H1W0ZLXG\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H44KERT8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H44KERT8\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H4LK4E0G\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H4LK4E0G\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\H9UORZ0I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\H9UORZ0I\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HAXIXM0N\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HAXIXM0N\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HI5PAYT3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HI5PAYT3\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HLKS089Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HLKS089Y\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HOXSTFIJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HOXSTFIJ\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HP0X8V2F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HP0X8V2F\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HUFXCWG1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HUFXCWG1\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HXGFPIVZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HXGFPIVZ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HZNQ4TMP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HZNQ4TMP\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\HZXNZXO4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\HZXNZXO4\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I43799JK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I43799JK\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I5GS9C1U\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I5GS9C1U\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I7DUJQNE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I7DUJQNE\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\I9RRAMZQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\I9RRAMZQ\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IDW2IAL3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IDW2IAL3\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IEJ927JP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IEJ927JP\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IL57ONAN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IL57ONAN\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IM8LJHED\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IM8LJHED\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IVDIYEF4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IVDIYEF4\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IW29T75T\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IW29T75T\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IWMPFSDX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IWMPFSDX\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\IXIXKMAJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\IXIXKMAJ\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\J0YRHZ97\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\J0YRHZ97\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\J8FRB0LO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\J8FRB0LO\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JDGNK879\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JDGNK879\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JMB22V1S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JMB22V1S\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JNIZO3JC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JNIZO3JC\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JU28PCLN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JU28PCLN\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JV3QS9GX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JV3QS9GX\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\JYQ48KKE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\JYQ48KKE\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\K3KGENYO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\K3KGENYO\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KGJYPEFP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KGJYPEFP\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KJT7RGWO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KJT7RGWO\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KKHQ6PG6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KKHQ6PG6\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KMGFS46J\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KMGFS46J\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KQ5R6GR9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KQ5R6GR9\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KRRBT66X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KRRBT66X\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KS1TWMM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KS1TWMM1\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KUXW273K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KUXW273K\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KV8HTA0Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KV8HTA0Y\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KXG3HS3P\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KXG3HS3P\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KXS6HLHJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KXS6HLHJ\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\KYKOBQ8K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\KYKOBQ8K\DevExpress.Printing.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L1800O0E\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L1800O0E\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L2PMJRDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L2PMJRDU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L4BZ4ERQ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L4BZ4ERQ\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L61BE4AL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L61BE4AL\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L6AJRSQ7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L6AJRSQ7\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\L6X7K5X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\L6X7K5X9\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LCGSGN68\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LCGSGN68\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LCWRRVI5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LCWRRVI5\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LJ9N4LPC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LJ9N4LPC\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LKA4Y66K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LKA4Y66K\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LOZXYQRC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LOZXYQRC\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LXWXV336\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LXWXV336\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LZNO1UBS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LZNO1UBS\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\LZYCV9LC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\LZYCV9LC\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M36UKHPO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M36UKHPO\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M5CI1KUM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M5CI1KUM\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M7HWGKYV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M7HWGKYV\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\M9Q2CG5Y\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\M9Q2CG5Y\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MB5ZFG90\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MB5ZFG90\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MCEJI3X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MCEJI3X9\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MEYS7LLL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MEYS7LLL\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MHQAMRBS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MHQAMRBS\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MKOTN4OK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MKOTN4OK\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MMSZGEG8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MMSZGEG8\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MN9C5L70\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MN9C5L70\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MXJYPMVL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MXJYPMVL\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\MZ8QHHN8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\MZ8QHHN8\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N335013C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N335013C\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N3XIRRNP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N3XIRRNP\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N46117BO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N46117BO\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N6POGPWZ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N6POGPWZ\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N799WWDC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N799WWDC\HtmlAgilityPack.DLL
c:\users\Admin\AppData\Local\assembly\tmp\N8DL9EHR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\N8DL9EHR\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NEHQOGLV\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NEHQOGLV\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NEJ89626\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NEJ89626\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NITH4G4O\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NITH4G4O\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NLIPBKO3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NLIPBKO3\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NN4US37H\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NN4US37H\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NNLSGP0M\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NNLSGP0M\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NRJZX8FY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NRJZX8FY\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\NSM1DZZS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\NSM1DZZS\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\O42FQKO6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\O42FQKO6\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\O650S1WB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\O650S1WB\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OAYE6J1V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OAYE6J1V\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ODGIIQJ2\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ODGIIQJ2\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OFUIKS7S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OHFF4AR0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OHFF4AR0\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OOVLMASJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OOVLMASJ\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OP0T6XNY\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OP0T6XNY\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OP44XWU4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OP44XWU4\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OX850J3R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OX850J3R\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\OZ6DCAV6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\OZ6DCAV6\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\P1LUS3X9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\P1LUS3X9\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\P7K1T36U\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\P7K1T36U\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PK1UJOJX\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PK1UJOJX\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PL97WPXE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PL97WPXE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PNR9K3RF\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PNR9K3RF\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\POCFFBM9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\POCFFBM9\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\POWDKR17\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\POWDKR17\yourMail.Client.TeamBusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PPK6CFMK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PPK6CFMK\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PPQKH495\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PPQKH495\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PTZG0D0C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PTZG0D0C\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PVICPKCA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PVICPKCA\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\PWGJOZ0A\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\PWGJOZ0A\yourMail.Client.BusinessLogic.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q3ZXPVO9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q3ZXPVO9\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q47NG3GB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q47NG3GB\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Q7Z993WE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Q7Z993WE\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QA1CM2Z7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QA1CM2Z7\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QB6GMQDA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QB6GMQDA\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBHWCLK1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBHWCLK1\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBSSLIZU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBSSLIZU\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QBTO24LU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QBTO24LU\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QD07SYWS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QD07SYWS\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QG1H3LOR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QG1H3LOR\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QIDHPK3C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QIDHPK3C\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QM3Y64Y4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QM3Y64Y4\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QTXLMVL0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QTXLMVL0\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\QZSQGD9F\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\QZSQGD9F\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\R1O7PNGC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\R1O7PNGC\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RDYIOEKT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RDYIOEKT\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RI81GHDU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RI81GHDU\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RKIFF7VN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RKIFF7VN\ICSharpCode.SharpZipLib.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RMRY77BH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RMRY77BH\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RMYTW89Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RMYTW89Q\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQ8SQRI3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQ8SQRI3\DevExpress.Office.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQO39BMH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQO39BMH\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RQQ9N2S6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RQQ9N2S6\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RS85W7MU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RS85W7MU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\RX712BE8\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\RX712BE8\LogicNP.CryptoLicensing.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S16STBFU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S16STBFU\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S1GHY36T\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S1GHY36T\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S3G0QMEL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S3G0QMEL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S4TD3ID4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S4TD3ID4\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\S7UAI9TT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\S7UAI9TT\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SD2ADHZ4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SD2ADHZ4\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SKI2NW6V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SKI2NW6V\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SNCQ2NC3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SNCQ2NC3\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SSIF93NA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SSIF93NA\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\SZ7AYZ0G\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\SZ7AYZ0G\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\T4A1QM0R\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\T4A1QM0R\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\T9AG0L4N\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\T9AG0L4N\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TA3YBOTW\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TA3YBOTW\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TIXIPYLC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TIXIPYLC\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TK14HDBJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TK14HDBJ\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TKSDHL0X\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TKSDHL0X\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TQVHE83C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TQVHE83C\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TQWXWVGR\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TQWXWVGR\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TRZN2E77\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TRZN2E77\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TV2J4M72\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TV2J4M72\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\TZJDEOZH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\TZJDEOZH\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\U0S2J4AE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\U0S2J4AE\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\U8QU2JPJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\U8QU2JPJ\DevExpress.Printing.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UDQ9J3GN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UDQ9J3GN\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UGTUC5UP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UGTUC5UP\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UHDURG79\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UHDURG79\yourMail.Client.UI.resources.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UHGEZTIL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UHGEZTIL\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UJNA38F9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UJNA38F9\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UODTD17L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UODTD17L\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UP86O7VT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UP86O7VT\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UWCCQT7Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UWCCQT7Q\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UWTHQMGS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UWTHQMGS\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\UZK7WEI1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\UZK7WEI1\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V01IOHRT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V01IOHRT\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V32FEWT0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V32FEWT0\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\V95FYU6V\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\V95FYU6V\yourMail.Client.TeamStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VFG8L427\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VFG8L427\Lucene.Net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VHEQYW1I\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VHEQYW1I\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VJ3CSPAM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VJ3CSPAM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VN899DI5\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VN899DI5\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\VUI212B6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\VUI212B6\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\W8BG7BDG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\W8BG7BDG\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WA2BSSM0\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WA2BSSM0\DevExpress.XtraTreeList.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WJCT1O5K\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WJCT1O5K\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WSBGNXER\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WSBGNXER\yourMail.Common.DLL
c:\users\Admin\AppData\Local\assembly\tmp\WZC015ED\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\WZC015ED\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X3GMCLIT\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X3GMCLIT\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X69OIH8Q\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X69OIH8Q\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X99QDUM1\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X99QDUM1\System.Data.SQLite.DLL
c:\users\Admin\AppData\Local\assembly\tmp\X9VQ356S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\X9VQ356S\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XAP8NSFS\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XAP8NSFS\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XCMM330L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XCMM330L\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XCRS2UII\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XCRS2UII\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XKD79N6W\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XKD79N6W\PdfSharp-WPF.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XKPIXYUO\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XKPIXYUO\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XLO3FYVJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XLO3FYVJ\yourMail.Client.LocalStore.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XTSIGP9E\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XTSIGP9E\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XUDVMF7C\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XUDVMF7C\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XXZTK8Z6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XXZTK8Z6\Interop.Redemption.DLL
c:\users\Admin\AppData\Local\assembly\tmp\XYBG0BKM\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\XYBG0BKM\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Y8D6Z7PE\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Y8D6Z7PE\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YA6WAOLG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YA6WAOLG\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YAI1STYP\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YAI1STYP\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YFEBZ84S\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YFEBZ84S\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YGT0VEFA\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YGT0VEFA\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YHBLGMFC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YHBLGMFC\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YITUTSBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YITUTSBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\YNE3Q3DH\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\YNE3Q3DH\Microsoft.SharePoint.Client.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z0CQCRZ7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z0CQCRZ7\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z14F7AIC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z14F7AIC\yourMail.Client.UI.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z2NHX6GK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z2NHX6GK\DevExpress.XtraRichEdit.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z7NLY5QN\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z7NLY5QN\DevExpress.XtraGrid.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z8QR5U97\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z8QR5U97\log4net.DLL
c:\users\Admin\AppData\Local\assembly\tmp\Z8QVFVWU\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\Z8QVFVWU\DevExpress.RichEdit.v12.2.Core.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZI8XAH68\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZI8XAH68\DevExpress.XtraLayout.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZJATRXQG\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZJATRXQG\DevExpress.XtraBars.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZJF76JA3\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZJF76JA3\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZL3XBGGL\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZL3XBGGL\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZMWJKPU9\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZMWJKPU9\DevExpress.Utils.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZP023IW4\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZP023IW4\AddinExpress.OL.2005.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZQ1OKU5L\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZQ1OKU5L\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZRCM5QDB\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZRCM5QDB\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZT73CFE6\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZT73CFE6\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZV6P0CVK\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZV6P0CVK\YourMailMetroSkin.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZXKPH2F7\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZXKPH2F7\DevExpress.Data.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZXR1LZNJ\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZXR1LZNJ\DevExpress.XtraEditors.v12.2.DLL
c:\users\Admin\AppData\Local\assembly\tmp\ZYCMUHBC\__AssemblyInfo__.ini
c:\users\Admin\AppData\Local\assembly\tmp\ZYCMUHBC\AddinExpress.MSO.2005.DLL
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\0545F7B45A7B4420A820F73747615E31@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\068D6D3A935D4E28989E038B86DF9F65@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\29AB98FE146F44F299E231AE5CF8F5B0@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\339B38CA77414F5199E2135697588B85@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\C3515C3602AB4A41A1A7353E5DE7F1E3@klemmePC
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9C2F.7B7BA350
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9D0E.9CB95B90
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CF9D19.D98DB600
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CFB23E.0226AFC0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.jpg@01CFB23E.439553D0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image001.png@01CFB320.D2D47CA0
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\image002.jpg@01CFAFE5.041D89D0
c:\users\Admin\AppData\Roaming\457
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-07-12 bis 2014-08-12  ))))))))))))))))))))))))))))))
.
.
2014-08-12 12:33 . 2014-08-12 12:33        --------        d-----w-        c:\users\Public\AppData\Local\temp
2014-08-12 12:33 . 2014-08-12 12:33        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-08-12 08:12 . 2014-07-14 02:12        10924376        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{CF394883-27E3-4444-8D50-C5551DFC75CF}\mpengine.dll
2014-08-07 06:34 . 2014-08-07 06:34        153712        ----a-w-        c:\windows\system32\BgGamingMonitor.dll
2014-08-07 06:34 . 2014-08-07 06:34        140280        ----a-w-        c:\windows\SysWow64\BgGamingMonitor.dll
2014-07-31 10:55 . 2014-07-31 10:55        64336        ----a-w-        c:\windows\SysWow64\BGLsp.dll
2014-07-31 10:55 . 2014-07-31 10:55        76624        ----a-w-        c:\windows\system32\BGLsp.dll
2014-07-28 18:54 . 2014-07-28 18:54        98216        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-28 18:54 . 2014-07-28 18:54        --------        d-----w-        c:\program files (x86)\Java
2014-07-25 15:40 . 2014-07-25 15:40        --------        d-----w-        c:\users\Admin\AppData\Roaming\23753
2014-07-25 15:34 . 2014-07-25 15:34        --------        d-----w-        c:\users\Admin\AppData\Roaming\22590
2014-07-25 14:00 . 2014-07-25 14:00        --------        d-----w-        c:\users\Admin\AppData\Local\PackageAware
2014-07-24 18:42 . 2014-07-24 18:42        --------        d-----w-        c:\windows\ERUNT
2014-07-24 18:37 . 2014-07-24 18:37        --------        d-----w-        c:\program files (x86)\VS Revo Group
2014-07-24 16:48 . 2014-01-09 02:22        5694464        ----a-w-        c:\windows\SysWow64\mstscax.dll
2014-07-24 16:48 . 2014-01-03 22:44        6574592        ----a-w-        c:\windows\system32\mstscax.dll
2014-07-24 14:27 . 2014-05-08 09:32        3178496        ----a-w-        c:\windows\system32\rdpcorets.dll
2014-07-24 14:27 . 2014-05-08 09:32        16384        ----a-w-        c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-24 14:17 . 2012-08-23 14:10        19456        ----a-w-        c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-24 14:17 . 2012-08-23 14:13        243200        ----a-w-        c:\windows\system32\rdpudd.dll
2014-07-24 14:17 . 2012-08-23 11:12        192000        ----a-w-        c:\windows\SysWow64\rdpendp_winip.dll
2014-07-24 14:17 . 2012-08-23 10:51        228864        ----a-w-        c:\windows\system32\rdpendp_winip.dll
2014-07-24 13:15 . 2013-09-25 02:23        1030144        ----a-w-        c:\windows\system32\TSWorkspace.dll
2014-07-24 13:15 . 2013-09-25 01:57        792576        ----a-w-        c:\windows\SysWow64\TSWorkspace.dll
2014-07-24 12:54 . 2013-07-14 15:32        4009167        ----a-w-        C:\ServicesRepair.exe
2014-07-24 12:54 . 2014-07-24 12:35        1354223        ----a-w-        C:\AdwCleaner(17).exe
2014-07-24 12:38 . 2014-07-24 12:38        --------        d-s---w-        c:\windows\SysWow64\Microsoft
2014-07-21 18:44 . 2014-07-21 18:44        --------        d-----w-        c:\users\Admin\AppData\Roaming\ASP
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-09 10:29 . 2012-08-08 07:58        71344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-09 10:29 . 2012-08-08 07:58        699056        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-09 09:08 . 2012-08-07 15:59        96441528        ----a-w-        c:\windows\system32\MRT.exe
2014-06-30 02:09 . 2014-07-09 06:02        519168        ----a-w-        c:\windows\system32\aepdu.dll
2014-06-30 02:04 . 2014-07-09 06:02        424448        ----a-w-        c:\windows\system32\aeinv.dll
2014-06-20 20:14 . 2014-07-09 06:02        266424        ----a-w-        c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 06:02        23464448        ----a-w-        c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 06:02        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 06:02        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 06:02        2768384        ----a-w-        c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 06:02        548352        ----a-w-        c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 06:02        66048        ----a-w-        c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 06:02        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 06:02        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 06:02        51200        ----a-w-        c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 06:02        33792        ----a-w-        c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 06:02        598016        ----a-w-        c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 06:02        139264        ----a-w-        c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 06:02        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 06:02        752640        ----a-w-        c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 06:02        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 06:02        452608        ----a-w-        c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 06:02        38400        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 06:02        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 06:02        195584        ----a-w-        c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 06:02        5721088        ----a-w-        c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 06:02        85504        ----a-w-        c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 06:02        292864        ----a-w-        c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 06:02        608768        ----a-w-        c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 06:02        455168        ----a-w-        c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 06:02        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 06:02        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 06:02        62464        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 06:02        631808        ----a-w-        c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 06:02        1249280        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 06:02        2040832        ----a-w-        c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 06:02        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 06:02        592896        ----a-w-        c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 06:02        32256        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 06:02        2266112        ----a-w-        c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 06:02        4254720        ----a-w-        c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 06:02        13527040        ----a-w-        c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 06:02        1068032        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 06:02        1964544        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 06:02        1393664        ----a-w-        c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 06:02        846336        ----a-w-        c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 06:02        1791488        ----a-w-        c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 06:02        692736        ----a-w-        c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 06:02        646144        ----a-w-        c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 06:02        3157504        ----a-w-        c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 06:02        624128        ----a-w-        c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 06:02        509440        ----a-w-        c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 06:01        1460736        ----a-w-        c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 06:01        22016        ----a-w-        c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 06:01        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 06:02        210944        ----a-w-        c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 06:02        86528        ----a-w-        c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 06:02        340992        ----a-w-        c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 06:02        314880        ----a-w-        c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 06:02        307200        ----a-w-        c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 06:02        728064        ----a-w-        c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 06:02        22016        ----a-w-        c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 06:02        172032        ----a-w-        c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 06:02        65536        ----a-w-        c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 06:02        247808        ----a-w-        c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 06:02        220160        ----a-w-        c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 06:02        259584        ----a-w-        c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 06:02        550912        ----a-w-        c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 06:02        17408        ----a-w-        c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 06:02        497152        ----a-w-        c:\windows\system32\drivers\afd.sys
2014-05-28 14:07 . 2014-05-19 12:16        117184        ----a-w-        c:\windows\system32\drivers\BdAgent.sys
2014-05-19 12:16 . 2013-03-18 13:25        67680        ----a-w-        c:\windows\system32\drivers\BdSpy.sys
2014-05-19 12:16 . 2012-11-20 13:11        42760        ----a-r-        c:\windows\system32\drivers\afw.sys
2014-05-19 12:16 . 2012-10-04 07:38        34896        ----a-w-        c:\windows\system32\drivers\BdNet.sys
2014-05-19 12:16 . 2012-06-26 09:48        27544        ----a-w-        c:\windows\system32\drivers\NSNetmon.sys
2014-05-19 12:16 . 2012-06-26 09:48        296368        ----a-w-        c:\windows\system32\drivers\NSKernel.sys
2014-05-19 12:16 . 2012-11-20 13:11        469256        ----a-r-        c:\windows\system32\drivers\afwcore.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"CAHeadless"="c:\program files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe" [2014-05-09 1401040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"sysTPL"="c:\program files (x86)\sysTPL\sysTPL.exe" [2014-02-07 1244440]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-02-21 152392]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
.
c:\users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Evoluent Mouse Manager.lnk - c:\windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe [2012-8-8 4286]
PhraseExpress.lnk - c:\program files (x86)\PhraseExpress\phraseexpress.exe [2012-8-9 22427944]
ProCall One.lnk - c:\program files (x86)\ESTOS\ProCall One\ECtiClientOne.exe [2013-12-16 19845120]
TK-Suite Client.lnk - c:\program files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe [2013-8-20 7351928]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Das Telefonbuch Browserlösung.lnk - c:\program files (x86)\TVG\DasTelefonbuch Deutschland\http_tfd.exe [2014-4-8 20992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]
R2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]
R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vidsflt67;Acronis Disk Storage Filter (67);c:\windows\system32\DRIVERS\vsflt67.sys;c:\windows\SYSNATIVE\DRIVERS\vsflt67.sys [x]
S1 AFW;Agnitum Firewall Driver;c:\windows\system32\DRIVERS\afw.sys;c:\windows\SYSNATIVE\DRIVERS\afw.sys [x]
S1 BdAgent;BullGuard Security Agent;c:\windows\system32\DRIVERS\BdAgent.sys;c:\windows\SYSNATIVE\DRIVERS\BdAgent.sys [x]
S1 BdSpy;BdSpy;c:\windows\system32\drivers\BdSpy.sys;c:\windows\SYSNATIVE\drivers\BdSpy.sys [x]
S1 NovaShieldFilterDriver;NovaShieldFilterDriver;c:\windows\system32\DRIVERS\NSKernel.sys;c:\windows\SYSNATIVE\DRIVERS\NSKernel.sys [x]
S1 NovaShieldTDIDriver;NovaShieldTDIDriver;c:\windows\system32\DRIVERS\NSNetmon.sys;c:\windows\SYSNATIVE\DRIVERS\NSNetmon.sys [x]
S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BsBackup;BullGuard backup service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsBhvScan;BullGuard Behavioural Detection;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe [x]
S2 BsCache;BullGuard CODS service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFileScan;BullGuard on-access service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFire;BullGuard firewall service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMailProxy;BullGuard e-mail monitoring service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMain;BullGuard main service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsScanner;BullGuard scanning service;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe [x]
S2 BsUpdate;BullGuard update service;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe [x]
S2 cjpcsc;cyberJack PC/SC COM Service ;c:\windows\SysWOW64\cjpcsc.exe;c:\windows\SysWOW64\cjpcsc.exe [x]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe;c:\windows\SysWOW64\nlssrv32.exe [x]
S2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 tksock;TK-Suite Server;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe [x]
S2 TVGOnlineUpdateSvc;TVG OnlineUpdate-Service;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe [x]
S3 afwcore;afwcore;c:\windows\system32\DRIVERS\afwcore.sys;c:\windows\SYSNATIVE\DRIVERS\afwcore.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Driver;c:\windows\system32\DRIVERS\AVMCOWAN.sys;c:\windows\SYSNATIVE\DRIVERS\AVMCOWAN.sys [x]
S3 BdNet;BdNet;c:\windows\system32\drivers\BdNet.sys;c:\windows\SYSNATIVE\drivers\BdNet.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 cjusb;REINER SCT cyberJack USB Driver;c:\windows\system32\DRIVERS\cjusb.sys;c:\windows\SYSNATIVE\DRIVERS\cjusb.sys [x]
S3 EvoMouseDriverFilterHidUsb;Evoluent Mouse Driver Filter;c:\windows\system32\DRIVERS\EvoMouseDriverFilterHidUsb.sys;c:\windows\SYSNATIVE\DRIVERS\EvoMouseDriverFilterHidUsb.sys [x]
S3 EvoMouseDriverMini;EvoMouseDriverMini;c:\windows\system32\drivers\EvoMouseDriverMini.sys;c:\windows\SYSNATIVE\drivers\EvoMouseDriverMini.sys [x]
S3 FPCIBASE;AVM FRITZ!Card PCI;c:\windows\system32\DRIVERS\fpcibase.sys;c:\windows\SYSNATIVE\DRIVERS\fpcibase.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt        REG_MULTI_SZ          hpqcxs08 hpqddsvc
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-07-18 07:47        1104200        ----a-w-        c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-08-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-08 10:29]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2014-05-05 08:19]
.
2014-08-08 c:\windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job
- c:\users\Admin\AppData\Local\yourTime\yourMail\components\schedule\yourMail Free Edition Updates.lnk [2013-05-20 18:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayErr]
@="{8749448C-D907-45BF-A842-4D3898894AC8}"
[HKEY_CLASSES_ROOT\CLSID\{8749448C-D907-45BF-A842-4D3898894AC8}]
2014-07-31 10:55        315728        ----a-w-        c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayInProgress]
@="{3FFBF330-7839-476B-BE14-2C8597CE11B6}"
[HKEY_CLASSES_ROOT\CLSID\{3FFBF330-7839-476B-BE14-2C8597CE11B6}]
2014-07-31 10:55        315728        ----a-w-        c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlaySynced]
@="{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}"
[HKEY_CLASSES_ROOT\CLSID\{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}]
2014-07-31 10:55        315728        ----a-w-        c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BullGuardUpdate2"="c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe" [2014-08-06 2933584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2014-08-07 1319248]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-10-27 613536]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-10-27 379040]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-06-03 472984]
"BgDelayStartup"="c:\program files\bullguard ltd\bullguard\BgDelayStartup.exe" [2014-07-31 86352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\BgAgent.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyServer = http=127.0.0.1:8877
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: An SchnapperPlus senden - c:\program files (x86)\SchnapperPlus\SchnapperPlusMenu.js
IE: LastPass - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-TWAIN - c:\windows\IsUn0407.exe
AddRemove-MyFreeCodec - c:\program files (x86)\MyFree Codec\1.0b beta\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-08-12  14:34:38
ComboFix-quarantined-files.txt  2014-08-12 12:34
ComboFix2.txt  2013-07-27 18:05
.
Vor Suchlauf: 16 Verzeichnis(se), 51.002.245.120 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 50.607.427.584 Bytes frei
.
- - End Of File - - 1BE2C461AD3E6F6C6BC7685784E2F5B1
4D3FFB2728D7BB129968845914D24193

cosinus 12.08.2014 15:14
Combofix-Skript
WARNUNG für die MITLESER:
Folgendes ComboFix Skript ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

  • Lösche die vorhandene Combofix.exe von deinem Desktop und lade das Programm von folgenden Download-Spiegel neu herunter: Link
  • Speichere es erneut auf dem Desktop (nicht woanders hin, das ist wichtig)!
  • Drücke die Windows + R Taste --> notepad (hinein schreiben) --> OK
  • Kopiere nun den Text aus der folgenden Codebox komplett in das leere Textdokument.
    Code:
    Folder::
    c:\users\Admin\AppData\Roaming\23753
    c:\users\Admin\AppData\Roaming\22590
  • Speichere dies als CFScript.txt auf deinem Desktop.
  • Wichtig: Stelle deine Anti Viren Software temporär ab. Dies kann ComboFix nämlich bei der Arbeit behindern.
    Danach wieder anstellen nicht vergessen!
  • Schließe alle laufenden Programme damit ComboFix ungehindert arbeiten kann.
  • Ziehe CFScript.txt in die ComboFix.exe wie in diesem Bild:
  • Mache nichts am Computer, bewege nicht die Maus über das ComboFix-Fenster oder klicke in dieses hinein. Dies kann dazu führen, dass ComboFix sich aufhängt.
  • Wenn ComboFix fertig ist wird es ein Log erstellen: C:\ComboFix.txt
    Bitte füge es hier als Antwort (in CODE-Tags mit dem #-Button des Editors) ein.

Hinweis:
Suspect:: und Collect::
Falls im Skript diese Anweisungen enthalten sind, sollen Dateien zur Analyse eingeschickt werden. Es erscheint eine Message-Box, nachdem Combofix fertig ist. Klicke OK und folge den Aufforderungen/Anweisungen, um die Dateien hochzuladen. Teile mir unbedingt mit, ob der Upload geklappt hat!

weti 12.08.2014 15:27
Sorry Cosinus - aber FRST funzt ja nicht. Soll ich das dann mit Combofix machen?

cosinus 12.08.2014 15:27
Ups sry, bin auf den falschen Button gekommen :stirn:

Ist korrigiert

weti 12.08.2014 17:01
Kein Ssupect oder Collect enhalten, keine Datei hochgeladen. Hier der Logtext:
Code:
ComboFix 14-08-12.01 - Admin 12.08.2014  16:35:42.3.4 - x64
Microsoft Windows 7 Professional  6.1.7601.1.1252.49.1031.18.8169.5400 [GMT 2:00]
ausgeführt von:: c:\users\Admin\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\Admin\Desktop\CFScript.txt
AV: BullGuard Antivirus *Disabled/Outdated* {C3CCAC61-52F7-A056-1860-6406566E2578}
FW: BullGuard Firewall *Disabled* {FBF72D44-1898-A10E-333F-CD33A8BD6203}
SP: BullGuard Antispyware *Disabled/Outdated* {78AD4D85-74CD-AFD8-22D0-5F742DE96FC5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Admin\AppData\Local\assembly\tmp
c:\users\Admin\AppData\Roaming\22590
c:\users\Admin\AppData\Roaming\23753
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-07-12 bis 2014-08-12  ))))))))))))))))))))))))))))))
.
.
2014-08-12 14:38 . 2014-08-12 14:38        --------        d-----w-        c:\users\Public\AppData\Local\temp
2014-08-12 14:38 . 2014-08-12 14:38        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-08-12 08:12 . 2014-07-14 02:12        10924376        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{CF394883-27E3-4444-8D50-C5551DFC75CF}\mpengine.dll
2014-08-07 06:34 . 2014-08-07 06:34        153712        ----a-w-        c:\windows\system32\BgGamingMonitor.dll
2014-08-07 06:34 . 2014-08-07 06:34        140280        ----a-w-        c:\windows\SysWow64\BgGamingMonitor.dll
2014-07-31 10:55 . 2014-07-31 10:55        64336        ----a-w-        c:\windows\SysWow64\BGLsp.dll
2014-07-31 10:55 . 2014-07-31 10:55        76624        ----a-w-        c:\windows\system32\BGLsp.dll
2014-07-28 18:54 . 2014-07-28 18:54        98216        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-28 18:54 . 2014-07-28 18:54        --------        d-----w-        c:\program files (x86)\Java
2014-07-25 14:00 . 2014-07-25 14:00        --------        d-----w-        c:\users\Admin\AppData\Local\PackageAware
2014-07-24 18:42 . 2014-07-24 18:42        --------        d-----w-        c:\windows\ERUNT
2014-07-24 18:37 . 2014-07-24 18:37        --------        d-----w-        c:\program files (x86)\VS Revo Group
2014-07-24 16:48 . 2014-01-09 02:22        5694464        ----a-w-        c:\windows\SysWow64\mstscax.dll
2014-07-24 16:48 . 2014-01-03 22:44        6574592        ----a-w-        c:\windows\system32\mstscax.dll
2014-07-24 14:27 . 2014-05-08 09:32        3178496        ----a-w-        c:\windows\system32\rdpcorets.dll
2014-07-24 14:27 . 2014-05-08 09:32        16384        ----a-w-        c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-24 14:17 . 2012-08-23 14:10        19456        ----a-w-        c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-24 14:17 . 2012-08-23 14:13        243200        ----a-w-        c:\windows\system32\rdpudd.dll
2014-07-24 14:17 . 2012-08-23 11:12        192000        ----a-w-        c:\windows\SysWow64\rdpendp_winip.dll
2014-07-24 14:17 . 2012-08-23 10:51        228864        ----a-w-        c:\windows\system32\rdpendp_winip.dll
2014-07-24 13:15 . 2013-09-25 02:23        1030144        ----a-w-        c:\windows\system32\TSWorkspace.dll
2014-07-24 13:15 . 2013-09-25 01:57        792576        ----a-w-        c:\windows\SysWow64\TSWorkspace.dll
2014-07-24 12:54 . 2013-07-14 15:32        4009167        ----a-w-        C:\ServicesRepair.exe
2014-07-24 12:54 . 2014-07-24 12:35        1354223        ----a-w-        C:\AdwCleaner(17).exe
2014-07-24 12:38 . 2014-07-24 12:38        --------        d-s---w-        c:\windows\SysWow64\Microsoft
2014-07-21 18:44 . 2014-07-21 18:44        --------        d-----w-        c:\users\Admin\AppData\Roaming\ASP
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-09 10:29 . 2012-08-08 07:58        71344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-09 10:29 . 2012-08-08 07:58        699056        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-09 09:08 . 2012-08-07 15:59        96441528        ----a-w-        c:\windows\system32\MRT.exe
2014-06-30 02:09 . 2014-07-09 06:02        519168        ----a-w-        c:\windows\system32\aepdu.dll
2014-06-30 02:04 . 2014-07-09 06:02        424448        ----a-w-        c:\windows\system32\aeinv.dll
2014-06-20 20:14 . 2014-07-09 06:02        266424        ----a-w-        c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 06:02        23464448        ----a-w-        c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 06:02        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 06:02        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 06:02        2768384        ----a-w-        c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 06:02        548352        ----a-w-        c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 06:02        66048        ----a-w-        c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 06:02        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 06:02        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 06:02        51200        ----a-w-        c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 06:02        33792        ----a-w-        c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 06:02        598016        ----a-w-        c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 06:02        139264        ----a-w-        c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 06:02        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 06:02        752640        ----a-w-        c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 06:02        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 06:02        452608        ----a-w-        c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 06:02        38400        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 06:02        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 06:02        195584        ----a-w-        c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 06:02        5721088        ----a-w-        c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 06:02        85504        ----a-w-        c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 06:02        292864        ----a-w-        c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 06:02        608768        ----a-w-        c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 06:02        455168        ----a-w-        c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 06:02        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 06:02        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 06:02        62464        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 06:02        631808        ----a-w-        c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 06:02        1249280        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 06:02        2040832        ----a-w-        c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 06:02        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 06:02        592896        ----a-w-        c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 06:02        32256        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 06:02        2266112        ----a-w-        c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 06:02        4254720        ----a-w-        c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 06:02        13527040        ----a-w-        c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 06:02        1068032        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 06:02        1964544        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 06:02        1393664        ----a-w-        c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 06:02        846336        ----a-w-        c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 06:02        1791488        ----a-w-        c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 06:02        692736        ----a-w-        c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 06:02        646144        ----a-w-        c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 06:02        3157504        ----a-w-        c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 06:02        624128        ----a-w-        c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 06:02        509440        ----a-w-        c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 06:01        1460736        ----a-w-        c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 06:01        22016        ----a-w-        c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 06:01        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 06:02        210944        ----a-w-        c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 06:02        86528        ----a-w-        c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 06:02        340992        ----a-w-        c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 06:02        314880        ----a-w-        c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 06:02        307200        ----a-w-        c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 06:02        728064        ----a-w-        c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 06:02        22016        ----a-w-        c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 06:02        172032        ----a-w-        c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 06:02        65536        ----a-w-        c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 06:02        247808        ----a-w-        c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 06:02        220160        ----a-w-        c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 06:02        259584        ----a-w-        c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 06:02        550912        ----a-w-        c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 06:02        17408        ----a-w-        c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 06:02        497152        ----a-w-        c:\windows\system32\drivers\afd.sys
2014-05-28 14:07 . 2014-05-19 12:16        117184        ----a-w-        c:\windows\system32\drivers\BdAgent.sys
2014-05-19 12:16 . 2013-03-18 13:25        67680        ----a-w-        c:\windows\system32\drivers\BdSpy.sys
2014-05-19 12:16 . 2012-11-20 13:11        42760        ----a-r-        c:\windows\system32\drivers\afw.sys
2014-05-19 12:16 . 2012-10-04 07:38        34896        ----a-w-        c:\windows\system32\drivers\BdNet.sys
2014-05-19 12:16 . 2012-06-26 09:48        27544        ----a-w-        c:\windows\system32\drivers\NSNetmon.sys
2014-05-19 12:16 . 2012-06-26 09:48        296368        ----a-w-        c:\windows\system32\drivers\NSKernel.sys
2014-05-19 12:16 . 2012-11-20 13:11        469256        ----a-r-        c:\windows\system32\drivers\afwcore.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"CAHeadless"="c:\program files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe" [2014-05-09 1401040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"sysTPL"="c:\program files (x86)\sysTPL\sysTPL.exe" [2014-02-07 1244440]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-02-21 152392]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
.
c:\users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Evoluent Mouse Manager.lnk - c:\windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe [2012-8-8 4286]
PhraseExpress.lnk - c:\program files (x86)\PhraseExpress\phraseexpress.exe [2012-8-9 22427944]
ProCall One.lnk - c:\program files (x86)\ESTOS\ProCall One\ECtiClientOne.exe [2013-12-16 19845120]
TK-Suite Client.lnk - c:\program files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe [2013-8-20 7351928]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Das Telefonbuch Browserlösung.lnk - c:\program files (x86)\TVG\DasTelefonbuch Deutschland\http_tfd.exe [2014-4-8 20992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]
R2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]
R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vidsflt67;Acronis Disk Storage Filter (67);c:\windows\system32\DRIVERS\vsflt67.sys;c:\windows\SYSNATIVE\DRIVERS\vsflt67.sys [x]
S1 AFW;Agnitum Firewall Driver;c:\windows\system32\DRIVERS\afw.sys;c:\windows\SYSNATIVE\DRIVERS\afw.sys [x]
S1 BdAgent;BullGuard Security Agent;c:\windows\system32\DRIVERS\BdAgent.sys;c:\windows\SYSNATIVE\DRIVERS\BdAgent.sys [x]
S1 BdSpy;BdSpy;c:\windows\system32\drivers\BdSpy.sys;c:\windows\SYSNATIVE\drivers\BdSpy.sys [x]
S1 NovaShieldFilterDriver;NovaShieldFilterDriver;c:\windows\system32\DRIVERS\NSKernel.sys;c:\windows\SYSNATIVE\DRIVERS\NSKernel.sys [x]
S1 NovaShieldTDIDriver;NovaShieldTDIDriver;c:\windows\system32\DRIVERS\NSNetmon.sys;c:\windows\SYSNATIVE\DRIVERS\NSNetmon.sys [x]
S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BsBackup;BullGuard backup service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsBhvScan;BullGuard Behavioural Detection;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe [x]
S2 BsCache;BullGuard CODS service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFileScan;BullGuard on-access service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsFire;BullGuard firewall service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMailProxy;BullGuard e-mail monitoring service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsMain;BullGuard main service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]
S2 BsScanner;BullGuard scanning service;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe;c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe [x]
S2 BsUpdate;BullGuard update service;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe;c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe [x]
S2 cjpcsc;cyberJack PC/SC COM Service ;c:\windows\SysWOW64\cjpcsc.exe;c:\windows\SysWOW64\cjpcsc.exe [x]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe;c:\windows\SysWOW64\nlssrv32.exe [x]
S2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 tksock;TK-Suite Server;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe;c:\program files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe [x]
S2 TVGOnlineUpdateSvc;TVG OnlineUpdate-Service;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe;c:\program files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe [x]
S3 afwcore;afwcore;c:\windows\system32\DRIVERS\afwcore.sys;c:\windows\SYSNATIVE\DRIVERS\afwcore.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Driver;c:\windows\system32\DRIVERS\AVMCOWAN.sys;c:\windows\SYSNATIVE\DRIVERS\AVMCOWAN.sys [x]
S3 BdNet;BdNet;c:\windows\system32\drivers\BdNet.sys;c:\windows\SYSNATIVE\drivers\BdNet.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 cjusb;REINER SCT cyberJack USB Driver;c:\windows\system32\DRIVERS\cjusb.sys;c:\windows\SYSNATIVE\DRIVERS\cjusb.sys [x]
S3 EvoMouseDriverFilterHidUsb;Evoluent Mouse Driver Filter;c:\windows\system32\DRIVERS\EvoMouseDriverFilterHidUsb.sys;c:\windows\SYSNATIVE\DRIVERS\EvoMouseDriverFilterHidUsb.sys [x]
S3 EvoMouseDriverMini;EvoMouseDriverMini;c:\windows\system32\drivers\EvoMouseDriverMini.sys;c:\windows\SYSNATIVE\drivers\EvoMouseDriverMini.sys [x]
S3 FPCIBASE;AVM FRITZ!Card PCI;c:\windows\system32\DRIVERS\fpcibase.sys;c:\windows\SYSNATIVE\DRIVERS\fpcibase.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt        REG_MULTI_SZ          hpqcxs08 hpqddsvc
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-07-18 07:47        1104200        ----a-w-        c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-08-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-08 10:29]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23 09:08]
.
2014-08-12 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2014-05-05 08:19]
.
2014-08-08 c:\windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job
- c:\users\Admin\AppData\Local\yourTime\yourMail\components\schedule\yourMail Free Edition Updates.lnk [2013-05-20 18:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayErr]
@="{8749448C-D907-45BF-A842-4D3898894AC8}"
[HKEY_CLASSES_ROOT\CLSID\{8749448C-D907-45BF-A842-4D3898894AC8}]
2014-07-31 10:55        315728        ----a-w-        c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlayInProgress]
@="{3FFBF330-7839-476B-BE14-2C8597CE11B6}"
[HKEY_CLASSES_ROOT\CLSID\{3FFBF330-7839-476B-BE14-2C8597CE11B6}]
2014-07-31 10:55        315728        ----a-w-        c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlaySynced]
@="{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}"
[HKEY_CLASSES_ROOT\CLSID\{C62CF4DB-48CB-4B03-BFD0-30A29125FA49}]
2014-07-31 10:55        315728        ----a-w-        c:\program files\BullGuard Ltd\BullGuard\BackupShellHook.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BullGuardUpdate2"="c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe" [2014-08-06 2933584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2014-08-07 1319248]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-10-27 613536]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-10-27 379040]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-06-03 472984]
"BgDelayStartup"="c:\program files\bullguard ltd\bullguard\BgDelayStartup.exe" [2014-07-31 86352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\BgGamingMonitor.dll c:\progra~1\BULLGU~1\BULLGU~1\BgAgent.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyServer = http=127.0.0.1:8877
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: An SchnapperPlus senden - c:\program files (x86)\SchnapperPlus\SchnapperPlusMenu.js
IE: LastPass - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\users\Admin\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-TWAIN - c:\windows\IsUn0407.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-08-12  16:39:50
ComboFix-quarantined-files.txt  2014-08-12 14:39
ComboFix2.txt  2014-08-12 12:34
ComboFix3.txt  2013-07-27 18:05
.
Vor Suchlauf: 17 Verzeichnis(se), 50.630.295.552 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 50.571.354.112 Bytes frei
.
- - End Of File - - 53DCB6EA6A2FE7AD67C09B188CCE7601
4D3FFB2728D7BB129968845914D24193
Hallo Cosinus,

ich habe FRST nochmal runtergeladen und jetzt funzte es. Soll ich dir diese Logdateien auch noch schicken?


Alle Zeitangaben in WEZ +1. Es ist jetzt 10:18 Uhr.
Seite 1 von 6 1 23 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129