Trojaner-Board - MS Essentials entdeckt Trojan:Win32/Patched.AO, entfernt jedoch nicht

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - MS Essentials entdeckt Trojan:Win32/Patched.AO, entfernt jedoch nicht (https://www.trojaner-board.de/173344-ms-essentials-entdeckt-trojan-win32-patched-ao-entfernt-jedoch.html)

Denise94

22.11.2015 13:32

MS Essentials entdeckt Trojan:Win32/Patched.AO, entfernt jedoch nicht

Hallo,

Ich habe seid ein paar Tagen das Problem, dass mir mein MS Essentials anzeigt es habe schwerwiegendes Problem entdeckt. Wenn ich mir die Details dazu einblenden lasse zeigt es mir folgendes:

Kategorie: Trojaner

Beschreibung: Diesea Programm ist gefährlich. Es führt Befehle eines Angreifers aus.

Empfohlene Aktion: Entfernen Sie diese Software unverzüglich.

Elemente: file:C:\Windows\System32\dnsapi.dll

Nun habe ich natürlich versucht es über MS Essentials zu entfernen, dies funktionierte allerdings nicht.
Der Status nach dem Versuch es zu entfernen zeigt einen Fehler.

Der folgende Fehler ist aufgetreten: Fehlercode: 0x800704ec. Dieses Programm wurde durch eine Gruppenrichtlinie geblockt. Wenden Sie sich an dem Systemadministrator, um weitere Informationen zu erhalten.

Ich hatte mich daraufhin an einen Bekannten gewendet, der mir dann empfahl die Kaspersky Rescue Disk auf einen Stick oder eine CD zu brennen und drüber laufen zu lassen. Im Anschluss darauf sollte ich dann den AdwCleaner drüber laufen lassen.
Leider ist das Problem weiterhin vorhanden und sorge mich nun um meine Daten auf dem Laptop.

Ich muss dazu sagen, dass ich auch nicht mehr über Firefox oder Internet Explorer Zugriff zum Internet habe und aktuell über mein Smartphone schreibe.

Ich hoffe das mir vielleicht jemande weitwr helfen kann.

M-K-D-B

22.11.2015 13:34

:hallo:

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!

Die Logdatei von AdwCleaner bitte posten!

Zur ersten Analyse bitte FRST und TDSS-Killer ausführen:

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Schritt 2
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von TDSS-Killer,
die beiden neuen Logdateien von FRST.

Denise94

22.11.2015 13:47

Danke für die schnelle Rückmeldung.
Gibt es eventuell eine Möglichkeit die Logfiles anders zukommen zu lassen? Wie ich sagte, ich schreibe über mein Handy, daher kann ich die Texte nicht so einfügen wie gebeten.

M-K-D-B

22.11.2015 14:04

Servus,

Lade dir die Programme von einem sauberen Rechner auf den USB-Stick.
Starte den infizierten Rechner.
Stecke den USB-Stick ein und kopiere die Tools vom Stick auf den Desktop des Rechners.
Führe die Programme vom Desktop aus.

Ist umständlich, ich weiß, aber ich kann dir ohne mehr Informationen kaum helfen. Wer weiß, was da alles "zerballert" wurde.

Denise94

23.11.2015 13:44

Einmal die Logdatei vom AdwCleaner

Code:

# AdwCleaner v5.013 - Bericht erstellt am 22/11/2015 um 13:49:19

# Aktualisiert am 09/10/2015 von Xplode

# Datenbank : 2015-10-04.3 [Lokal]

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x86)

# Benutzername : Denise - DENISE-PC

# Gestartet von : C:\Users\Denise\Desktop\adwcleaner_5.013.exe

# Option : Suchlauf

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 
 

***** [ Dateien ] *****
 
 

***** [ DLLs ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Geplante Tasks ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Internetbrowser ] *****
 
 

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [639 Bytes] ##########

Logdatein von FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:20-11-2015

durchgeführt von Denise (Administrator) auf DENISE-PC (22-11-2015 13:44:53)

Gestartet von C:\Users\Denise\Desktop

Geladene Profile: Denise (Verfügbare Profile: Denise & Gast)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

() C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

() C:\Program Files\CyberLink\Shared files\RichVideo.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe

(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

() C:\Program Files\Bamboo Dock\BambooCore.exe

() C:\Program Files\Winamp\winampa.exe

(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTLite.exe

(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2014-12-11] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated)

HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)

HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)

HKLM\...\Run: [RemoteControl8] => C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)

HKLM\...\Run: [PDVD8LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)

HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] => C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-07-21] (CyberLink Corp.)

HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-02-26] (Nero AG)

HKLM\...\Run: [BambooCore] => C:\Program Files\Bamboo Dock\BambooCore.exe [646744 2014-11-20] ()

HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\Winampa.exe [12288 2003-04-17] ()

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)

HKLM\...\Run: [MouseDriver] => C:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-29] (Microsoft Corporation)

HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2688920 2014-05-26] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)

HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-04] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKLM\...\RunOnce: [FreeHideIPunstall] => [X]

HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [3638256 2015-09-11] (Electronic Arts)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: G - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {0afaf239-5233-11e1-9281-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {5c1700f8-0a8e-11e0-89ea-00245467eac5} - F:\Autorun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {88771927-5bca-11e1-9d6d-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {8ed8c5b8-1d1f-11e3-a810-00245467eac5} - G:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {929343ec-dae9-11df-91fe-00245467eac5} - G:\LaunchU3.exe -a

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {98b26fee-6c31-11e1-b6ca-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {98b26ff2-6c31-11e1-b6ca-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {9d0d55be-049b-11e1-b91f-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {9d0d55c7-049b-11e1-b91f-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {a3b0880f-92f1-11e1-92ac-00245467eac5} - G:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {ac8e3a14-72f9-11e0-8ea1-00245467eac5} - F:\Autorun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {df1fb56f-8b3a-11e3-86dc-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {f2592001-7340-11e1-960d-00245467eac5} - H:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\WLXPGSS.SCR [302448 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\..\Interfaces\{6740F581-8B96-4B73-9C1B-74E80ABB4E31}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{89937394-FABE-4827-A000-3CA618D78EDF}: [DhcpNameServer] 139.7.30.126 139.7.30.125

Tcpip\..\Interfaces\{D15BEF43-E20E-4980-8981-90385BBA009A}: [NameServer] 8.8.8.8

Tcpip\..\Interfaces\{FAA164E7-8D0A-412C-BC98-DE239EC26F45}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn

SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://mysearch.sweetpacks.com?src=6&q={searchTerms}&barid=&&st=23&did=10963&UPN2=92263311661890289

BHO: meduke -> {11B16A3D-F03E-4565-A532-66AB219C9B03} -> C:\Users\Denise\AppData\Local\ext_meduke\ext_meduke.dll [2015-04-22] ()

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-31] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-31] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx

DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-09] (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Keine Datei
 

FireFox:

========

FF ProfilePath: C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018

FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-25] ()

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-31] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-31] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]

FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.5 -> C:\Program Files\TabletPlugins\npwacom.dll [2010-09-02] (Wacom, Inc.)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-05-26] (Adobe Systems)

FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin HKU\S-1-5-21-1072828290-3828818215-1948454868-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-09-27] ()

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-11-18] (Apple Inc.)

FF Extension: FavGenius - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\extensions\fg@favgenius.com.xpi [2015-09-07]

FF Extension: YouTube Unblocker - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\youtubeunblocker@unblocker.yt [2015-08-05]

FF Extension: search service - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{bae37ea1-7abb-47f2-8b34-44f0f489f8a2}.xpi [2015-10-05] [ist nicht signiert]

FF Extension: Adblock Plus - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-25]

FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2013-04-10] <==== ACHTUNG
 

Chrome: 

=======

CHR Profile: C:\Users\Denise\AppData\Local\Google\Chrome\User Data\Default

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <kein Path\update_url>
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ezGOSvc; C:\windows\system32\ezGOSvc.dll [73600 2011-06-12] ()

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921392 2015-10-04] (NVIDIA Corporation)

S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]

S3 MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation) [Datei ist nicht signiert]

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)

S3 npggsvc; C:\windows\system32\GameMon.des [3461904 2010-01-12] (INCA Internet Co., Ltd.) [Datei ist nicht signiert]

R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-10-04] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4325680 2015-10-04] (NVIDIA Corporation)

R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] ()

S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2057736 2015-09-11] (Electronic Arts)

S3 PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] () [Datei ist nicht signiert]

R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()

S3 SonicStage Back-End Service; C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe [112184 2007-02-05] (Sony Corporation)

S3 SPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation) [Datei ist nicht signiert]

S3 SSScsiSV; C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe [75320 2007-02-05] (Sony Corporation)

S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [567064 2014-08-19] (Wacom Technology, Corp.)

S4 Agsvepehe; kein ImagePath

S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [X]

S2 RoxLiveShare9; "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 athr; C:\windows\System32\DRIVERS\athr.sys [2228224 2011-12-13] (Atheros Communications, Inc.) [Datei ist nicht signiert]

R2 atksgt; C:\windows\System32\DRIVERS\atksgt.sys [83872 2011-10-01] ()

S3 hamachi; C:\windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

S3 hidkmdf; C:\windows\System32\DRIVERS\hidkmdf.sys [12088 2014-08-06] (Windows (R) Win 7 DDK provider)

R3 KMWDFILTERx86; C:\windows\System32\DRIVERS\KMWDFILTER.sys [25088 2009-04-29] (Windows (R) Codename Longhorn DDK provider)

R2 lirsgt; C:\windows\System32\DRIVERS\lirsgt.sys [25888 2011-10-01] ()

R3 LVUSBSta; C:\windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)

R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)

S3 Netaapl; C:\windows\System32\DRIVERS\netaapl.sys [18432 2010-04-19] (Apple Inc.) [Datei ist nicht signiert]

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18736 2015-10-04] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [44840 2015-08-11] (NVIDIA Corporation)

S3 pepifilter; C:\windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)

S3 PID_PEPI; C:\windows\System32\DRIVERS\LV302V32.SYS [2570520 2008-07-26] (Logitech Inc.)

R3 seehcri; C:\windows\System32\DRIVERS\seehcri.sys [27632 2010-10-29] (Sony Ericsson Mobile Communications) [Datei ist nicht signiert]

S3 SipIMNDI; C:\windows\System32\DRIVERS\SipIMNDI.sys [24352 2009-10-15] (T-Systems International GmbH)

R0 sptd; C:\windows\System32\Drivers\sptd.sys [691696 2010-12-18] () [Datei ist nicht signiert]

S3 ssm_bus; C:\windows\System32\DRIVERS\ssm_bus.sys [58320 2005-08-30] (MCCI)

S3 ssm_mdfl; C:\windows\System32\DRIVERS\ssm_mdfl.sys [8336 2005-08-30] (MCCI)

S3 ssm_mdm; C:\windows\System32\DRIVERS\ssm_mdm.sys [94000 2005-08-30] (MCCI)

S3 t_mouse.sys; C:\windows\System32\DRIVERS\t_mouse.sys [5120 2012-12-19] ()

S3 USBAAPL; C:\windows\System32\Drivers\usbaapl.sys [41984 2011-02-18] (Apple, Inc.) [Datei ist nicht signiert]

S3 WacHidRouter; C:\windows\System32\DRIVERS\wachidrouter.sys [85304 2014-08-06] (Wacom Technology)

S3 wacomrouterfilter; C:\windows\System32\DRIVERS\wacomrouterfilter.sys [13112 2014-08-06] (Wacom Technology)

R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

U3 a81o3iia; C:\windows\system32\Drivers\a81o3iia.sys [0 ] (Microsoft Corporation) <==== ACHTUNG (Null Byte Datei/Ordner)

S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [X]

S3 GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [X]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S1 mvgordih; \??\C:\windows\system32\drivers\mvgordih.sys [X]

S3 taphss6; system32\DRIVERS\taphss6.sys [X]

S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]

S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]

U2 wuaserv; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

NETSVC: ezGOSvc -> C:\windows\system32\ezGOSvc.dll ()
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-22 13:44 - 2015-11-22 13:45 - 00025228 _____ C:\Users\Denise\Desktop\FRST.txt

2015-11-22 13:11 - 2015-11-22 13:44 - 00000000 ____D C:\FRST

2015-11-22 13:09 - 2015-11-22 13:09 - 01716736 _____ (Farbar) C:\Users\Denise\Desktop\FRST.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-22 13:38 - 2009-12-05 00:54 - 01463998 _____ C:\windows\WindowsUpdate.log

2015-11-22 13:33 - 2009-07-14 05:34 - 00023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-11-22 13:33 - 2009-07-14 05:34 - 00023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-11-22 13:15 - 2009-07-26 21:06 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI

2015-11-22 13:08 - 2012-04-09 11:28 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2015-11-22 13:00 - 2015-10-18 13:33 - 00000000 ____D C:\AdwCleaner

2015-11-22 12:55 - 2010-03-13 13:45 - 00000000 ____D C:\Program Files\Adobe

2015-11-22 12:52 - 2013-04-08 08:30 - 00000000 ____D C:\Program Files\Common Files\Skype

2015-11-22 12:52 - 2012-11-22 14:34 - 00000000 ___RD C:\Program Files\Skype

2015-11-22 12:52 - 2010-08-05 14:06 - 00000000 ____D C:\ProgramData\Skype

2015-11-22 12:34 - 2010-03-13 13:44 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite

2015-11-22 12:32 - 2015-08-27 12:34 - 00005027 _____ C:\windows\setupact.log

2015-11-22 12:32 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2010-04-18 11:02 - 2009-09-24 08:55 - 1454213 _____ () C:\Program Files\wrar390d.exe

2011-11-01 17:10 - 2012-03-11 11:47 - 0005264 _____ () C:\Users\Denise\AppData\Roaming\mobile.trf

2011-06-21 09:52 - 2011-07-11 10:54 - 0000308 _____ () C:\Users\Denise\AppData\Roaming\Rim.Desktop.Exception.log

2011-05-27 14:12 - 2012-04-17 17:56 - 0003107 _____ () C:\Users\Denise\AppData\Roaming\Rim.Desktop.HttpServerSetup.log

2011-06-21 09:58 - 2012-01-26 12:21 - 0000308 _____ () C:\Users\Denise\AppData\Roaming\Rim.DesktopHelper.Exception.log

2012-01-02 16:38 - 2012-01-02 16:38 - 0000180 _____ () C:\Users\Denise\AppData\Roaming\SMSMMSConfig.txt

2010-04-27 18:36 - 2010-04-27 18:36 - 0000000 _____ () C:\Users\Denise\AppData\Roaming\wklnhst.dat

2011-11-01 17:00 - 2012-03-11 18:06 - 0009608 _____ () C:\Users\Denise\AppData\Roaming\WTGAddresses.dat

2011-11-15 20:47 - 2011-12-15 21:52 - 0000008 _____ () C:\Users\Denise\AppData\Roaming\WTGMMS.dat

2011-11-15 20:47 - 2011-12-15 21:52 - 0000008 _____ () C:\Users\Denise\AppData\Roaming\WTGMMSNotification.dat

2011-11-01 16:15 - 2011-11-01 17:00 - 0006552 _____ () C:\Users\Denise\AppData\Roaming\wtgoverride.wdb

2011-11-01 17:00 - 2012-03-11 18:06 - 0047950 _____ () C:\Users\Denise\AppData\Roaming\WTGSMS.dat

2011-06-21 09:54 - 2013-08-20 11:55 - 0017408 _____ () C:\Users\Denise\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-07-08 12:22 - 2015-07-08 12:22 - 0761791 _____ () C:\Users\Denise\AppData\Local\omesuperv2.exe

2014-11-20 18:28 - 2014-11-20 18:28 - 0000909 _____ () C:\Users\Denise\AppData\Local\recently-used.xbel

2010-08-05 14:32 - 2010-08-05 14:32 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

2010-03-13 13:46 - 2009-08-17 06:54 - 0131368 _____ () C:\ProgramData\FullRemove.exe

2010-07-23 17:23 - 2010-07-23 18:14 - 0006265 _____ () C:\ProgramData\hpzinstall.log

2009-12-05 01:03 - 2009-12-05 01:03 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log

2009-12-05 01:01 - 2009-12-05 01:02 - 0000106 _____ () C:\ProgramData\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}.log

2009-12-05 00:57 - 2009-12-05 00:58 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log

2009-12-05 01:02 - 2009-12-05 01:03 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log

2009-12-05 00:57 - 2009-12-05 00:57 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

2009-12-05 00:58 - 2009-12-05 01:01 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
 

Einige Dateien in TEMP:

====================

C:\Users\Denise\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Denise\AppData\Local\Temp\SpotifyUninstall.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\windows\explorer.exe => Datei ist digital signiert

C:\windows\system32\winlogon.exe => Datei ist digital signiert

C:\windows\system32\wininit.exe => Datei ist digital signiert

C:\windows\system32\svchost.exe => Datei ist digital signiert

C:\windows\system32\services.exe => Datei ist digital signiert

C:\windows\system32\User32.dll => Datei ist digital signiert

C:\windows\system32\userinit.exe => Datei ist digital signiert

C:\windows\system32\rpcss.dll => Datei ist digital signiert

C:\windows\system32\dnsapi.dll

[2011-04-15 13:56] - [2015-09-18 06:51] - 0270336 ____A () D41D8CD98F00B204E9800998ECF8427E
 

C:\windows\system32\dnsapi.dll => kein Firmenname <===== ACHTUNG
 

C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-10-18 08:51
 

==================== Ende vom FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:20-11-2015

durchgeführt von Denise (2015-11-22 13:45:45)

Gestartet von C:\Users\Denise\Desktop

Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2010-03-13 12:44:43)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1072828290-3828818215-1948454868-500 - Administrator - Disabled)

Denise (S-1-5-21-1072828290-3828818215-1948454868-1000 - Administrator - Enabled) => C:\Users\Denise

fbwuser01C8 (S-1-5-21-1072828290-3828818215-1948454868-1006 - Limited - Enabled)

fbwuserBCE0 (S-1-5-21-1072828290-3828818215-1948454868-1008 - Limited - Enabled)

fbwuserE33E (S-1-5-21-1072828290-3828818215-1948454868-1007 - Limited - Enabled)

Gast (S-1-5-21-1072828290-3828818215-1948454868-501 - Limited - Disabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-1072828290-3828818215-1948454868-1004 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)

Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 2.5.1.369 - Adobe Systems Incorporated)

Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)

Adobe Photoshop CS6 (HKLM\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)

Adobe® Content Viewer (HKLM\...\com.adobe.dmp.contentviewer) (Version: 3.4.2 - Adobe Systems, Incorporated)

Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.1.0805 - Atheros)

Bamboo Dock (Version: 4.1.0 - Wacom Europe GmbH) Hidden

Bamboo Dock 3.3 (HKLM\...\Bamboo Dock) (Version: 3.3 - Wacom Co., Ltd.)

BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung)

CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)

Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.)

CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)

CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.)

CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.)

CyberLink PowerDVD 8 (HKLM\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.)

CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.)

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3304 - CyberLink Corp.)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

Easy Network Manager (HKLM\...\{A5675A9E-F073-414A-9A04-F9BCD50459D7}) (Version: 4.2.6 - Samsung)

Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.)

EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung)

EasyBits GO (HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Game Organizer) (Version:  - EasyBits Media)

Free Audio Converter version 5.0.22.128 (HKLM\...\Free Audio Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)

Free YouTube Download version 3.2.0.128 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.0.128 - DVDVideoSoft Ltd.)

Free YouTube to MP3 Converter version 3.12.0.128 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)

Game Pack (HKLM\...\{63eafc52-b963-4297-a7eb-d412944e7065}_is1) (Version: 5.3.0.10 - Oberon Media, Inc.)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)

Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)

LAME v3.98.2 for Audacity (HKLM\...\LAME for Audacity_is1) (Version:  - )

LPS 2009v 3.0 USB (HKLM\...\{BDBA9828-200B-43A0-AB4F-82DABEE64F94}_is1) (Version: LPS 2009v 3.0 USB - VVR)

Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.22.3.3 - Marvell)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Access 2003 Runtime (HKLM\...\{901C0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 39.0 (x86 de) (HKLM\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 39.0 - Mozilla)

MPEG2 Codec(libmpeg2/mad) (HKLM\...\MPEG2 Codec(libmpeg2/mad)) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Nero 7 Essentials (HKLM\...\{81CD6232-10F5-4832-B3DA-1B88B1571031}) (Version: 7.02.5851 - Nero AG)

NVIDIA GeForce Experience 2.5.15.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.46 - NVIDIA Corporation)

NVIDIA Grafiktreiber 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

OpenMG Secure Module 4.7.00 (HKLM\...\InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}) (Version: 4.7.00.12140 - Sony Corporation)

OpenMG Secure Module 4.7.00 (Version: 4.7.00.12140 - Sony Corporation) Hidden

Origin (HKLM\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)

PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden

QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)

RawTherapee Version 4.0.11 (HKLM\...\{128459AB-59A7-430A-8BD0-3D8803D50400}_is1) (Version: 4.0.11 - rawtherapee.com)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7404 - Realtek Semiconductor Corp.)

Reputation Advisor (HKLM\...\sysTPL 1.4.1.5) (Version: 1.4.1.5 - Tlapia) <==== ACHTUNG

RGSS-RTP Standard (HKLM\...\{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}) (Version: 1.0.0 - Enterbrain)

RTP for RM2K (Png, Wav, Midi, Fonts) (HKLM\...\RTP for RM2K (Png, Wav, Midi, Fonts)) (Version:  - )

SAMSUNG CDMA Modem Driver Set (HKLM\...\SAMSUNG CDMA Modem) (Version:  - )

SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )

SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )

Samsung PC Studio (Version: 3.0.0.60203 - Samsung Electronics Co., Ltd.) Hidden

Samsung PC Studio 3 USB Driver Installer (HKLM\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)

Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung)

Samsung Support Center (HKLM\...\{CCC2B140-B47A-45FA-AAE3-BD60DA41AE00}) (Version: 1.0.21 - Samsung)

Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)

SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.5.15.46 - NVIDIA Corporation) Hidden

SonicStage 4.3 (HKLM\...\{A0EB195B-5876-48E6-879D-33D4B2102610}) (Version: 4.3 - Sony Corporation)

Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)

Steam (HKLM\...\Steam) (Version:  - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

Ubisoft Game Launcher (HKLM\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)

Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )

User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

VLC media player 1.0.3 (HKLM\...\VLC media player) (Version: 1.0.3 - VideoLAN Team)

Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet IE Plugin (HKLM\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.7 - Wacom Technology Corp.)

WebTablet Netscape Plugin (HKLM\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.5 - Wacom Technology Corp.)

Winamp (nur entfernen) (HKLM\...\Winamp) (Version:  - )

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)

WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media)

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{1c492e6a-2803-5ed7-83e1-1b1d4d41eb39}\InprocServer32 -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media)

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{b2b568c8-3712-4a75-b806-4b3c2fdb06d5}\localserver32 -> C:\Users\Denise\AppData\Local\Temp\{e9513610-f218-4dda-b954-2c7e6ba7cabb}\IDriver.NonElevated.exe => (Der Dateneintrag hat 12 mehr Zeichen).
 

==================== Wiederherstellungspunkte =========================
 

18-10-2015 08:58:21 Wiederherstellungsvorgang

22-11-2015 12:49:50 Removed Skype™ 7.8

22-11-2015 12:52:57 Removed Adobe Photoshop Lightroom 5.5.
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0125262C-427A-4DFE-BB7B-A01F82677284} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] ()

Task: {0C0875BC-0A59-4F6C-845C-E2DCFA46AADC} - System32\Tasks\{77683F70-B2A3-423A-BA32-3539EEFE97FD} => C:\Program Files\Skype\Phone\Skype.exe

Task: {1F17BFD7-CFCD-4F08-9700-3A157E04441A} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2009-10-13] (Samsung Electronics Co., Ltd.)

Task: {2748628F-A9EB-4010-94C1-1DED464FA34B} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-10-26] (SAMSUNG Electronics)

Task: {28118F91-F1F8-4886-8DDE-FDC81BFD3923} - System32\Tasks\{84B8F68B-3411-4A64-A517-B2D70055DC51} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {2BEE9C2A-EAC7-4CC4-8026-1B7B32F55B48} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.)

Task: {2CC1AEB9-AC28-401D-A101-970B91511899} - System32\Tasks\{B750924D-E105-450D-99A8-262347CA436C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.124/de/go/help.faq.installer?LastError=1604

Task: {3DAFF145-E835-4F26-BF28-BF738E8A67B4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {5D55A96E-E90E-4B22-BB46-ACD2D20EAEC5} - System32\Tasks\Genius_Interval => C:\Users\Denise\AppData\Roaming\Genius\Genius.exe [2015-08-17] ()

Task: {66D914C6-7066-488B-999A-71725199C662} - System32\Tasks\{944669E5-57EB-4345-8984-E39585338637} => pcalua.exe -a "C:\Users\Denise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A4OKM3FQ\20101130-003-i32[1].exe" -d C:\Users\Denise\Desktop

Task: {6A6CCE9D-4827-41C6-B848-31534D6BF6D4} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-25] (Adobe Systems Incorporated)

Task: {6F306A86-1F31-4DC6-8B55-C2299A584090} - System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => pcalua.exe -a C:\Users\Denise\Downloads\jxpiinstall.exe -d "C:\Program Files\Mozilla Firefox"

Task: {76EE0824-7352-4C6C-ACBB-2CFE1D990277} - System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {77348CC6-E978-4140-BE67-F524EF7499CB} - System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {923AFCCA-19CA-4175-B4A6-0682580544E0} - System32\Tasks\{4C6C12B0-0D3D-4B96-8BD1-E1EC26827F61} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {A8D63F98-436B-4454-8A21-5A41D4DB9BE9} - System32\Tasks\{A185E869-35A1-4000-A707-3E3B3F9A74A0} => pcalua.exe -a "C:\Program Files\EA GAMES\Die Sims 2 Deluxe\EP2\CSBin\PackageInstaller.exe" -d "C:\Program Files\Mozilla Firefox" -c "C:\Users\Denise\AppData\Local\Temp\Victorian Elegance.Sims2Pack"

Task: {AA57E286-DE28-4947-9020-4F898DFF0566} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1072828290-3828818215-1948454868-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

Task: {AC68A262-7B00-44F1-9D7A-D657B4C6FF65} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)

Task: {BDBAC32E-C087-4BF1-A434-256D535D1935} - System32\Tasks\Genius => C:\Users\Denise\AppData\Roaming\Genius\Genius.exe [2015-08-17] () <==== ACHTUNG

Task: {C5521848-C645-436A-9BCC-46ADB8A42C14} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.)

Task: {CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} - System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => pcalua.exe -a E:\setup.exe -d E:\

Task: {D6323718-D6F4-4835-B531-77E2AF730D98} - System32\Tasks\Trojan Killer => C:\Program Files\GridinSoft Trojan Killer\trojankiller.exe

Task: {DC571846-99C7-433D-BF77-54A9FF587F83} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC)

Task: {EAF88417-F062-4A34-8717-3BED50A2B750} - System32\Tasks\{ED001293-CFE2-44A6-BA5C-848DAB474DD0} => pcalua.exe -a "C:\Program Files\Samsung Casual Games\Go-Go Gourmet\Uninstall.exe" -c "C:\Program Files\Samsung Casual Games\Go-Go Gourmet\install.log"

Task: {F31F4939-9458-4471-8E2B-88C1283793A6} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1072828290-3828818215-1948454868-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2011-04-15 13:56 - 2015-09-18 06:51 - 00270336 _____ () C:\windows\system32\DNSAPI.dll

2011-04-15 13:56 - 2015-09-18 06:51 - 00270336 _____ () c:\windows\system32\DNSAPI.dll

2015-02-25 21:14 - 2015-02-04 03:05 - 00106640 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll

2011-04-15 13:56 - 2015-09-18 06:51 - 00270336 _____ () C:\windows\System32\DNSAPI.dll

2011-06-20 19:34 - 2011-06-12 12:55 - 00073600 _____ () c:\windows\system32\ezgosvc.dll

2010-03-13 13:47 - 2009-08-13 21:58 - 00044312 _____ () C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

2009-12-05 01:00 - 2009-07-07 19:23 - 00247152 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe

2011-03-14 13:57 - 2014-08-19 20:12 - 01019672 _____ () C:\Program Files\Tablet\Pen\libxml2.dll

2015-04-01 19:39 - 2015-10-04 09:24 - 00012080 _____ () C:\Program Files\NVIDIA Corporation\Update Core\detoured.dll

2014-05-23 01:10 - 2014-05-23 01:10 - 00693920 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll

2010-04-18 11:05 - 2009-08-16 16:06 - 00141312 _____ () C:\Program Files\WinRAR\rarext.dll

2009-06-03 12:59 - 2009-06-03 12:59 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll

2009-06-03 12:59 - 2009-06-03 12:59 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll

2010-07-28 22:58 - 2014-11-20 09:06 - 00646744 _____ () C:\Program Files\Bamboo Dock\BambooCore.exe

2003-04-17 07:54 - 2003-04-17 07:54 - 00012288 _____ () C:\Program Files\Winamp\winampa.exe

2014-05-26 04:52 - 2014-05-26 04:52 - 32733088 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\HEX\libcef.dll

2014-05-23 01:10 - 2014-05-23 01:10 - 05341856 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2014-05-12 21:22 - 2014-05-12 21:22 - 02217128 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\plugins\ExchangePlugin\ExManCoreLib\ExManZxpSign.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:373E1720

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54

AlternateDataStreams: C:\ProgramData\Temp:A42A9F39

AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE

AlternateDataStreams: C:\ProgramData\Temp:BC359956

AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1

AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D

AlternateDataStreams: C:\Users\Denise\Desktop\IMG_2589fertig.jpg:com.dropbox.attributes
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: Datenträger ist nicht mit dem Internet verbunden.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{80763932-6272-4EC3-922F-91E8FFCFF411}] => (Allow) C:\Program Files\CyberLink\PowerDirector\PDR.EXE

FirewallRules: [{1B4A8D63-D7D1-415C-803A-98E0DFD28F92}] => (Allow) C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.EXE

FirewallRules: [{2ECD0310-FA77-4FC9-92BA-C88211C2541B}] => (Allow) svchost.exe

FirewallRules: [{633D5160-7155-4043-8CAF-96CB23B39FD2}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

FirewallRules: [{0CE838CB-9BBE-4349-BB06-DFBD6A808828}] => (Allow) LPort=4481

FirewallRules: [{2180A482-9630-4E2F-82DA-5C72699BCE0A}] => (Allow) LPort=4481

FirewallRules: [{9F6E8EB7-6FB3-4A92-9D9C-04EF5914F432}] => (Allow) LPort=4482

FirewallRules: [{B5BE4872-11E6-4E5E-9CA1-7CC6C74C58E5}] => (Allow) LPort=4482

FirewallRules: [{6F909844-BB20-40E0-81B3-4B12C2D0BE54}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{9F246357-8DCE-4BA1-A55E-1EFB85B07125}] => (Allow) LPort=2869

FirewallRules: [{613B0BD8-E42A-4F3B-BBDE-0BEF819D8489}] => (Allow) LPort=1900

FirewallRules: [{E89796A6-38F1-4DBD-819B-2B40F77ED89C}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{6CEB2B97-13EB-467D-B703-628876C9D511}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{527EC58B-EC2B-42AC-94AB-E5A7C276622E}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{444A1476-A7B6-4418-934F-F1D4D8AFE561}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{E1E3BB11-C1FE-4D15-A524-E9D069A3C39E}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F6797D73-4DF6-433B-A766-9C4454B6A975}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F0DE6D99-195B-4344-A991-9DCF02A1F941}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{D09C0081-C6E4-45BA-AA76-58DDFE24CEF2}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{37A97BB5-789D-42AE-A7E0-162FCB81AA0F}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{52638EE3-8914-4932-B0DB-92BBBB3F992C}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{286D7930-A45E-4D5F-BB3F-0771995B825D}] => (Allow) C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{6B4F4303-DA4D-41A1-A52B-B60440E15B31}] => (Allow) C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{417D3A6D-E34D-4A61-A1FB-F5BF712B167C}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{55F4E51F-5690-43EA-BBD1-B5281C832641}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{E722ACE8-371A-4CB6-B6E2-BAA391D37221}] => (Allow) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{B5EB9715-5C0E-4D05-8C4A-24CF26367082}] => (Allow) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{A11B07C1-76D5-4AD6-82E5-EEFF0DA01AA3}C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{2FA9A431-CF1D-47CC-8261-5C664011D66F}C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{014963E3-F16F-44D0-B3CD-097089958639}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{7AC0F6CA-DC84-4356-B3CB-AEE83736B907}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{2AAFA724-3E9C-43EE-A5FB-658C6F7DC093}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{117BFE89-2975-4275-9DCA-5A97932B5A6E}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [TCP Query User{D8AB2B32-B7D7-4970-90B3-F47032151FEB}C:\users\denise\downloads\remotecontrolserver.exe] => (Allow) C:\users\denise\downloads\remotecontrolserver.exe

FirewallRules: [UDP Query User{DBA93071-C46D-4796-AD4F-5FEC4791510E}C:\users\denise\downloads\remotecontrolserver.exe] => (Allow) C:\users\denise\downloads\remotecontrolserver.exe

FirewallRules: [{956267F8-A470-479D-B88B-E895A54337AF}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{2E69A59B-ADB3-4887-B700-4103B19D2786}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{897A7DFF-26A6-4DE8-A55B-4B684D739469}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{FAD963BC-B554-4BB1-910E-FE3BA39522F2}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{84DD2A37-2FC4-4F49-AEC0-FD6013B816EF}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [{AB929B3D-09D2-4DAF-903F-D9D6FCFCF271}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{75D332C6-B7E9-4FEF-AE8B-42A56F5DC98E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{3847EB80-4EB5-472C-B257-7030CF957EEF}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{54806E36-CA94-400C-AC19-201AE17B1DC5}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{0197331E-5166-4E0E-A130-FBCB2BC5965F}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{6538BD51-6C13-49E8-930D-590B218A7025}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{8ACE36A0-D9EA-40AF-B50C-859AA95FE5A6}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{86312056-6F97-49E2-9260-60FD30E8EA4D}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{448DB76F-CA05-472C-8879-AF45B332A7F2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{FCFAB0B9-2DD4-4469-B028-9FABA11B64A0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{C3ED60B3-021A-4C1B-8710-0BF122E69CBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{4DC07AA8-F009-450B-AA74-797C7B3679AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{0B657F6F-74AB-4FB5-BE99-13C500E48232}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (11/22/2015 00:58:36 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: CompatTelRunner.exe, Version: 10.0.10208.0, Zeitstempel: 0x55b60451

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd7a8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00032228

ID des fehlerhaften Prozesses: 0x10c4

Startzeit der fehlerhaften Anwendung: 0xCompatTelRunner.exe0

Pfad der fehlerhaften Anwendung: CompatTelRunner.exe1

Pfad des fehlerhaften Moduls: CompatTelRunner.exe2

Berichtskennung: CompatTelRunner.exe3
 

Error: (10/18/2015 01:44:41 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Ausnahmecode: 0x40000015

Fehleroffset: 0x00052d24

ID des fehlerhaften Prozesses: 0x80c

Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0

Pfad der fehlerhaften Anwendung: jucheck.exe1

Pfad des fehlerhaften Moduls: jucheck.exe2

Berichtskennung: jucheck.exe3
 

Error: (10/18/2015 01:26:22 PM) (Source: WTabletServiceCon) (EventID: 1) (User: )

Description: Prefs: Failed to get user path
 

Error: (10/17/2015 09:20:03 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 

Error: (10/17/2015 09:20:03 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:

0x8007043C
 

Error: (10/17/2015 09:04:12 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Ausnahmecode: 0x40000015

Fehleroffset: 0x00052d24

ID des fehlerhaften Prozesses: 0x948

Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0

Pfad der fehlerhaften Anwendung: jucheck.exe1

Pfad des fehlerhaften Moduls: jucheck.exe2

Berichtskennung: jucheck.exe3
 

Error: (10/17/2015 09:01:10 AM) (Source: WTabletServiceCon) (EventID: 1) (User: )

Description: Prefs: Failed to get user path
 

Error: (10/17/2015 09:00:10 AM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )

Description: Fehler bei der Installation des Kaufnachweises. 0x80070005

Teil-Pkey=2BT4J

ACID=?

Genauer Fehler[?]
 

Error: (10/08/2015 11:46:33 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AitStatic.exe, Version: 10.0.10004.0, Zeitstempel: 0x54c64d23

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xc000000d

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x1988

Startzeit der fehlerhaften Anwendung: 0xAitStatic.exe0

Pfad der fehlerhaften Anwendung: AitStatic.exe1

Pfad des fehlerhaften Moduls: AitStatic.exe2

Berichtskennung: AitStatic.exe3
 

Error: (10/08/2015 11:46:31 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AitStatic.exe, Version: 10.0.10004.0, Zeitstempel: 0x54c64d23

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xc000000d

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x1bc4

Startzeit der fehlerhaften Anwendung: 0xAitStatic.exe0

Pfad der fehlerhaften Anwendung: AitStatic.exe1

Pfad des fehlerhaften Moduls: AitStatic.exe2

Berichtskennung: AitStatic.exe3
 
 

Systemfehler:

=============

Error: (11/22/2015 01:26:34 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {ACC034BD-7413-4569-A624-5DA4F33B8698}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {ACC034BD-7413-4569-A624-5DA4F33B8698}1
 

        Aktionsstatus:  {ACC034BD-7413-4569-A624-5DA4F33B8698}8
 

        Fehlercode: {ACC034BD-7413-4569-A624-5DA4F33B8698}3
 

        Fehlerbeschreibung: {ACC034BD-7413-4569-A624-5DA4F33B8698}4
 

        Signaturversion: 2015-11-22T12:25:56.090Z1
 

        Modulversion: 2015-11-22T12:25:56.090Z2
 

Error: (11/22/2015 01:25:47 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {A6EED6B8-7415-4231-B4DC-F24D49231C72}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {A6EED6B8-7415-4231-B4DC-F24D49231C72}1
 

        Aktionsstatus:  {A6EED6B8-7415-4231-B4DC-F24D49231C72}8
 

        Fehlercode: {A6EED6B8-7415-4231-B4DC-F24D49231C72}3
 

        Fehlerbeschreibung: {A6EED6B8-7415-4231-B4DC-F24D49231C72}4
 

        Signaturversion: 2015-11-22T12:04:52.220Z1
 

        Modulversion: 2015-11-22T12:04:52.220Z2
 

Error: (11/22/2015 01:04:52 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {99FACF3E-3A12-4BF2-9443-02FAEF0A9BBA}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {99FACF3E-3A12-4BF2-9443-02FAEF0A9BBA}1
 

        Aktionsstatus:  {99FACF3E-3A12-4BF2-9443-02FAEF0A9BBA}8
 

        Fehlercode: {99FACF3E-3A12-4BF2-9443-02FAEF0A9BBA}3
 

        Fehlerbeschreibung: {99FACF3E-3A12-4BF2-9443-02FAEF0A9BBA}4
 

        Signaturversion: 2015-11-22T12:04:17.604Z1
 

        Modulversion: 2015-11-22T12:04:17.604Z2
 

Error: (11/22/2015 01:04:03 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {0B52AD21-4F86-4AD2-9278-0A30DEC2AACE}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {0B52AD21-4F86-4AD2-9278-0A30DEC2AACE}1
 

        Aktionsstatus:  {0B52AD21-4F86-4AD2-9278-0A30DEC2AACE}8
 

        Fehlercode: {0B52AD21-4F86-4AD2-9278-0A30DEC2AACE}3
 

        Fehlerbeschreibung: {0B52AD21-4F86-4AD2-9278-0A30DEC2AACE}4
 

        Signaturversion: 2015-11-22T12:03:25.359Z1
 

        Modulversion: 2015-11-22T12:03:25.359Z2
 

Error: (11/22/2015 01:03:25 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {18AFEC98-9E11-4A89-9C05-2CF827A8B145}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {18AFEC98-9E11-4A89-9C05-2CF827A8B145}1
 

        Aktionsstatus:  {18AFEC98-9E11-4A89-9C05-2CF827A8B145}8
 

        Fehlercode: {18AFEC98-9E11-4A89-9C05-2CF827A8B145}3
 

        Fehlerbeschreibung: {18AFEC98-9E11-4A89-9C05-2CF827A8B145}4
 

        Signaturversion: 2015-11-22T12:02:37.514Z1
 

        Modulversion: 2015-11-22T12:02:37.514Z2
 

Error: (11/22/2015 01:02:55 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {D9D25097-7A28-48FE-9A59-1E07F418F900}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {D9D25097-7A28-48FE-9A59-1E07F418F900}1
 

        Aktionsstatus:  {D9D25097-7A28-48FE-9A59-1E07F418F900}8
 

        Fehlercode: {D9D25097-7A28-48FE-9A59-1E07F418F900}3
 

        Fehlerbeschreibung: {D9D25097-7A28-48FE-9A59-1E07F418F900}4
 

        Signaturversion: 2015-11-22T11:36:55.950Z1
 

        Modulversion: 2015-11-22T11:36:55.950Z2
 

Error: (11/22/2015 00:47:25 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 115.25.0.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/22/2015 00:36:55 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {7593A48B-AC2A-4133-A256-5DC3BF5A262B}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {7593A48B-AC2A-4133-A256-5DC3BF5A262B}1
 

        Aktionsstatus:  {7593A48B-AC2A-4133-A256-5DC3BF5A262B}8
 

        Fehlercode: {7593A48B-AC2A-4133-A256-5DC3BF5A262B}3
 

        Fehlerbeschreibung: {7593A48B-AC2A-4133-A256-5DC3BF5A262B}4
 

        Signaturversion: 2015-11-22T11:36:08.838Z1
 

        Modulversion: 2015-11-22T11:36:08.838Z2
 

Error: (11/22/2015 00:36:08 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {53A0CC11-4561-47D5-82ED-991B51CF35DB}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {53A0CC11-4561-47D5-82ED-991B51CF35DB}1
 

        Aktionsstatus:  {53A0CC11-4561-47D5-82ED-991B51CF35DB}8
 

        Fehlercode: {53A0CC11-4561-47D5-82ED-991B51CF35DB}3
 

        Fehlerbeschreibung: {53A0CC11-4561-47D5-82ED-991B51CF35DB}4
 

        Signaturversion: 2015-11-22T11:33:27.929Z1
 

        Modulversion: 2015-11-22T11:33:27.929Z2
 

Error: (11/22/2015 00:33:27 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {31324EFE-4072-446C-B8B2-23E1B573DA49}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {31324EFE-4072-446C-B8B2-23E1B573DA49}1
 

        Aktionsstatus:  {31324EFE-4072-446C-B8B2-23E1B573DA49}8
 

        Fehlercode: {31324EFE-4072-446C-B8B2-23E1B573DA49}3
 

        Fehlerbeschreibung: {31324EFE-4072-446C-B8B2-23E1B573DA49}4
 

        Signaturversion: 2015-11-22T11:32:43.864Z1
 

        Modulversion: 2015-11-22T11:32:43.864Z2
 
 

CodeIntegrity:

===================================

  Date: 2014-02-04 23:11:25.411

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-03 10:21:01.710

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-02 13:57:26.418

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-02 13:28:30.840

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 20:34:10.497

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 20:25:55.905

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 10:23:03.700

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 09:40:10.678

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 09:31:11.760

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-29 13:00:46.224

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz

Prozentuale Nutzung des RAM: 45%

Installierter physikalischer RAM: 3036.61 MB

Verfügbarer physikalischer RAM: 1646.12 MB

Summe virtueller Speicher: 6069.48 MB

Verfügbarer virtueller Speicher: 4750.12 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:141.49 GB) (Free:13.26 GB) NTFS

Drive d: () (Fixed) (Total:141.5 GB) (Free:73.16 GB) NTFS

Drive g: (1 GB) (Removable) (Total:0.91 GB) (Free:0.29 GB) FAT
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 298.1 GB) (Disk ID: 711561A4)

Partition 1: (Not Active) - (Size=15 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (Size: 930 MB) (Disk ID: B7B9F347)

Partition 1: (Active) - (Size=930 MB) - (Type=06)
 

==================== Ende vom Addition.txt ============================

Denise94

23.11.2015 13:46

Und zu guter letzter Logdatei von TDSS-Killer

Code:

13:21:59.0625 0x0d0c  TDSS rootkit removing tool 3.1.0.6 Nov 16 2015 12:17:23

13:22:04.0913 0x0d0c  ============================================================

13:22:04.0913 0x0d0c  Current date / time: 2015/11/23 13:22:04.0913

13:22:04.0913 0x0d0c  SystemInfo:

13:22:04.0913 0x0d0c  

13:22:04.0913 0x0d0c  OS Version: 6.1.7601 ServicePack: 1.0

13:22:04.0913 0x0d0c  Product type: Workstation

13:22:04.0913 0x0d0c  ComputerName: DENISE-PC

13:22:04.0913 0x0d0c  UserName: Denise

13:22:04.0913 0x0d0c  Windows directory: C:\windows

13:22:04.0913 0x0d0c  System windows directory: C:\windows

13:22:04.0913 0x0d0c  Processor architecture: Intel x86

13:22:04.0913 0x0d0c  Number of processors: 2

13:22:04.0913 0x0d0c  Page size: 0x1000

13:22:04.0913 0x0d0c  Boot type: Normal boot

13:22:04.0913 0x0d0c  ============================================================

13:22:06.0145 0x0d0c  KLMD registered as C:\windows\system32\drivers\26756205.sys

13:22:07.0549 0x0d0c  System UUID: {06B41997-4C25-E5A3-444A-405D4CA0650F}

13:22:08.0595 0x0d0c  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

13:22:08.0595 0x0d0c  Drive \Device\Harddisk1\DR3 - Size: 0x3A200000 ( 0.91 Gb ), SectorSize: 0x200, Cylinders: 0x76, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'

13:22:08.0595 0x0d0c  ============================================================

13:22:08.0595 0x0d0c  \Device\Harddisk0\DR0:

13:22:08.0595 0x0d0c  MBR partitions:

13:22:08.0595 0x0d0c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1E00800, BlocksNum 0x32000

13:22:08.0595 0x0d0c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1E32800, BlocksNum 0x11AFD000

13:22:08.0595 0x0d0c  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1392F800, BlocksNum 0x11AFE800

13:22:08.0595 0x0d0c  \Device\Harddisk1\DR3:

13:22:08.0595 0x0d0c  MBR partitions:

13:22:08.0595 0x0d0c  \Device\Harddisk1\DR3\Partition1: MBR, Type 0x6, StartLBA 0x108, BlocksNum 0x1D0EF8

13:22:08.0595 0x0d0c  ============================================================

13:22:08.0641 0x0d0c  C: <-> \Device\Harddisk0\DR0\Partition2

13:22:08.0688 0x0d0c  D: <-> \Device\Harddisk0\DR0\Partition3

13:22:08.0688 0x0d0c  ============================================================

13:22:08.0688 0x0d0c  Initialize success

13:22:08.0688 0x0d0c  ============================================================

13:23:00.0621 0x0660  ============================================================

13:23:00.0621 0x0660  Scan started

13:23:00.0621 0x0660  Mode: Manual; SigCheck; TDLFS; 

13:23:00.0621 0x0660  ============================================================

13:23:00.0621 0x0660  KSN ping started

13:23:00.0730 0x0660  KSN ping finished: false

13:23:01.0760 0x0660  ================ Scan system memory ========================

13:23:01.0760 0x0660  System memory - ok

13:23:01.0760 0x0660  ================ Scan services =============================

13:23:01.0962 0x0660  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys

13:23:02.0087 0x0660  1394ohci - ok

13:23:02.0150 0x0660  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\windows\system32\drivers\ACPI.sys

13:23:02.0181 0x0660  ACPI - ok

13:23:02.0196 0x0660  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\windows\system32\drivers\acpipmi.sys

13:23:02.0243 0x0660  AcpiPmi - ok

13:23:02.0399 0x0660  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

13:23:02.0430 0x0660  AdobeARMservice - ok

13:23:02.0508 0x0660  [ C6D147C12C424373B016C0AB0A6C61EB, 043D44F3C942CFC3558E782938C26849BF648A58A7AA62C4A526E37DE4136C27 ] AdobeFlashPlayerUpdateSvc C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

13:23:02.0540 0x0660  AdobeFlashPlayerUpdateSvc - ok

13:23:02.0586 0x0660  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\windows\system32\DRIVERS\adp94xx.sys

13:23:02.0633 0x0660  adp94xx - ok

13:23:02.0649 0x0660  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\windows\system32\DRIVERS\adpahci.sys

13:23:02.0680 0x0660  adpahci - ok

13:23:02.0696 0x0660  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\windows\system32\DRIVERS\adpu320.sys

13:23:02.0727 0x0660  adpu320 - ok

13:23:02.0774 0x0660  [ 12E6A172D72AFC626727B8635DD17E39, 33B3D109C39DF6EA86AFC3C89A93657906E981D3D22FF854401BC7326990CC08 ] AeLookupSvc     C:\windows\System32\aelupsvc.dll

13:23:02.0805 0x0660  AeLookupSvc - ok

13:23:02.0867 0x0660  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD             C:\windows\system32\drivers\afd.sys

13:23:02.0914 0x0660  AFD - ok

13:23:02.0961 0x0660  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\windows\system32\drivers\agp440.sys

13:23:02.0976 0x0660  agp440 - ok

13:23:03.0008 0x0660  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\windows\system32\DRIVERS\djsvs.sys

13:23:03.0023 0x0660  aic78xx - ok

13:23:03.0054 0x0660  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\windows\System32\alg.exe

13:23:03.0086 0x0660  ALG - ok

13:23:03.0117 0x0660  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\windows\system32\drivers\aliide.sys

13:23:03.0148 0x0660  aliide - ok

13:23:03.0164 0x0660  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\windows\system32\drivers\amdagp.sys

13:23:03.0195 0x0660  amdagp - ok

13:23:03.0242 0x0660  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\windows\system32\drivers\amdide.sys

13:23:03.0273 0x0660  amdide - ok

13:23:03.0320 0x0660  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\windows\system32\DRIVERS\amdk8.sys

13:23:03.0335 0x0660  AmdK8 - ok

13:23:03.0351 0x0660  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\windows\system32\DRIVERS\amdppm.sys

13:23:03.0382 0x0660  AmdPPM - ok

13:23:03.0429 0x0660  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\windows\system32\drivers\amdsata.sys

13:23:03.0444 0x0660  amdsata - ok

13:23:03.0476 0x0660  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\windows\system32\DRIVERS\amdsbs.sys

13:23:03.0507 0x0660  amdsbs - ok

13:23:03.0522 0x0660  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\windows\system32\drivers\amdxata.sys

13:23:03.0538 0x0660  amdxata - ok

13:23:03.0585 0x0660  [ C532028F7EFF8831BE6B5E3C417E07FA, 9D3C91F4DE0456F2BD4BAB044A3281F895A8EBF259F15E3BA6299965F5B8ABED ] AppID           C:\windows\system32\drivers\appid.sys

13:23:03.0632 0x0660  AppID - ok

13:23:03.0678 0x0660  [ 7A152F43A6B25D63D1279511258FE381, 416B592DAB9ECA4AEBD336F35AC622FA240E229F31BFB52E6084BAA48CC6F397 ] AppIDSvc        C:\windows\System32\appidsvc.dll

13:23:03.0694 0x0660  AppIDSvc - ok

13:23:03.0725 0x0660  [ 133A7896E643D139443B47FDBFA327C7, 371FC602B531DF1EFDCEEC3A2F5497A0D0BE7F558B0583F572862C69A65BD454 ] Appinfo         C:\windows\System32\appinfo.dll

13:23:03.0756 0x0660  Appinfo - ok

13:23:03.0772 0x0660  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\windows\system32\DRIVERS\arc.sys

13:23:03.0803 0x0660  arc - ok

13:23:03.0819 0x0660  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\windows\system32\DRIVERS\arcsas.sys

13:23:03.0850 0x0660  arcsas - ok

13:23:04.0006 0x0660  [ 537B2948976F5D9B5767B74A63EBB395, 1A14F8B582E74AD15B612EDA5B707AA3CB0B2A107ED14572B4232EAA7383B634 ] aspnet_state    C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe

13:23:04.0037 0x0660  aspnet_state - ok

13:23:04.0053 0x0660  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys

13:23:04.0100 0x0660  AsyncMac - ok

13:23:04.0131 0x0660  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\windows\system32\drivers\atapi.sys

13:23:04.0162 0x0660  atapi - ok

13:23:04.0318 0x0660  [ 49F17A2E79469BE6581D491706720671, C6D1497847286A0C63779B27F730526235250D2113B4BED66AF630DC1CF22527 ] athr            C:\windows\system32\DRIVERS\athr.sys

13:23:04.0427 0x0660  athr - detected UnsignedFile.Multi.Generic ( 1 )

13:23:04.0583 0x0660  athr ( UnsignedFile.Multi.Generic ) - warning

13:23:04.0630 0x0660  [ 547F07839F71A4357A5E503646CAC2B0, 05FF433B76D5DB40C073F84565D037436DA94B85ABFF1FC84F1468F6EB19C03D ] atksgt          C:\windows\system32\DRIVERS\atksgt.sys

13:23:04.0661 0x0660  atksgt - ok

13:23:04.0724 0x0660  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll

13:23:04.0770 0x0660  AudioEndpointBuilder - ok

13:23:04.0786 0x0660  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] Audiosrv        C:\windows\System32\Audiosrv.dll

13:23:04.0833 0x0660  Audiosrv - ok

13:23:04.0895 0x0660  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\windows\System32\AxInstSV.dll

13:23:04.0926 0x0660  AxInstSV - ok

13:23:04.0973 0x0660  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\windows\system32\DRIVERS\bxvbdx.sys

13:23:05.0020 0x0660  b06bdrv - ok

13:23:05.0067 0x0660  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\windows\system32\DRIVERS\b57nd60x.sys

13:23:05.0098 0x0660  b57nd60x - ok

13:23:05.0145 0x0660  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\windows\System32\bdesvc.dll

13:23:05.0176 0x0660  BDESVC - ok

13:23:05.0192 0x0660  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\windows\system32\drivers\Beep.sys

13:23:05.0238 0x0660  Beep - ok

13:23:05.0316 0x0660  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\windows\System32\bfe.dll

13:23:05.0379 0x0660  BFE - ok

13:23:05.0472 0x0660  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\windows\System32\qmgr.dll

13:23:05.0535 0x0660  BITS - ok

13:23:05.0566 0x0660  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\windows\system32\DRIVERS\blbdrive.sys

13:23:05.0597 0x0660  blbdrive - ok

13:23:05.0644 0x0660  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\windows\system32\DRIVERS\bowser.sys

13:23:05.0675 0x0660  bowser - ok

13:23:05.0691 0x0660  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\windows\system32\DRIVERS\BrFiltLo.sys

13:23:05.0738 0x0660  BrFiltLo - ok

13:23:05.0769 0x0660  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\windows\system32\DRIVERS\BrFiltUp.sys

13:23:05.0800 0x0660  BrFiltUp - ok

13:23:05.0847 0x0660  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\windows\System32\browser.dll

13:23:05.0878 0x0660  Browser - ok

13:23:05.0925 0x0660  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\windows\System32\Drivers\Brserid.sys

13:23:05.0956 0x0660  Brserid - ok

13:23:05.0987 0x0660  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys

13:23:06.0018 0x0660  BrSerWdm - ok

13:23:06.0034 0x0660  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys

13:23:06.0065 0x0660  BrUsbMdm - ok

13:23:06.0096 0x0660  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys

13:23:06.0112 0x0660  BrUsbSer - ok

13:23:06.0143 0x0660  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\windows\system32\DRIVERS\bthmodem.sys

13:23:06.0174 0x0660  BTHMODEM - ok

13:23:06.0221 0x0660  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\windows\system32\bthserv.dll

13:23:06.0268 0x0660  bthserv - ok

13:23:06.0299 0x0660  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys

13:23:06.0346 0x0660  cdfs - ok

13:23:06.0393 0x0660  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\windows\system32\DRIVERS\cdrom.sys

13:23:06.0424 0x0660  cdrom - ok

13:23:06.0486 0x0660  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\windows\System32\certprop.dll

13:23:06.0549 0x0660  CertPropSvc - ok

13:23:06.0580 0x0660  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\windows\system32\DRIVERS\circlass.sys

13:23:06.0611 0x0660  circlass - ok

13:23:06.0658 0x0660  [ 33A60554882FDF59CDA3E1806370BBA1, 3DE5451E1CB84AAEBD03F54BEFC670C401447B4881A8B022748B6ECF0F500F01 ] CLFS            C:\windows\system32\CLFS.sys

13:23:06.0705 0x0660  CLFS - ok

13:23:06.0752 0x0660  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

13:23:06.0767 0x0660  clr_optimization_v2.0.50727_32 - ok

13:23:06.0814 0x0660  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

13:23:06.0861 0x0660  clr_optimization_v4.0.30319_32 - ok

13:23:06.0876 0x0660  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\windows\system32\DRIVERS\CmBatt.sys

13:23:06.0892 0x0660  CmBatt - ok

13:23:06.0954 0x0660  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\windows\system32\drivers\cmdide.sys

13:23:06.0986 0x0660  cmdide - ok

13:23:07.0110 0x0660  [ 3051724F223EA48968B19567DE2A81F4, DCC27DE1B2B35866FC6DBDE95A368E7D0D346B6C3F31D0BACA63DD39B0A8874E ] CNG             C:\windows\system32\Drivers\cng.sys

13:23:07.0157 0x0660  CNG - ok

13:23:07.0188 0x0660  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\windows\system32\DRIVERS\compbatt.sys

13:23:07.0220 0x0660  Compbatt - ok

13:23:07.0266 0x0660  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\windows\system32\drivers\CompositeBus.sys

13:23:07.0298 0x0660  CompositeBus - ok

13:23:07.0313 0x0660  COMSysApp - ok

13:23:07.0376 0x0660  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\windows\system32\DRIVERS\crcdisk.sys

13:23:07.0391 0x0660  crcdisk - ok

13:23:07.0454 0x0660  [ 33F67BBCC3C0499D3F3382473114CFA8, FDDCC41CE005B7C1BEBB6F4ACA9A3F10E5972792ADFD7D294E70A0B781460981 ] CryptSvc        C:\windows\system32\cryptsvc.dll

13:23:07.0485 0x0660  CryptSvc - ok

13:23:07.0563 0x0660  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\windows\system32\rpcss.dll

13:23:07.0625 0x0660  DcomLaunch - ok

13:23:07.0672 0x0660  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\windows\System32\defragsvc.dll

13:23:07.0719 0x0660  defragsvc - ok

13:23:07.0766 0x0660  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\windows\system32\Drivers\dfsc.sys

13:23:07.0812 0x0660  DfsC - ok

13:23:07.0844 0x0660  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\windows\system32\dhcpcore.dll

13:23:07.0890 0x0660  Dhcp - ok

13:23:08.0046 0x0660  [ 0A3386E3CF9C5D089D695AC5A35F4C6F, D610071493EB95FCE39E24C457A0B5BBA131193159E43FDC1E8EDABB9C7AB81A ] DiagTrack       C:\windows\system32\diagtrack.dll

13:23:08.0109 0x0660  DiagTrack - ok

13:23:08.0156 0x0660  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\windows\system32\drivers\discache.sys

13:23:08.0202 0x0660  discache - ok

13:23:08.0249 0x0660  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\windows\system32\DRIVERS\disk.sys

13:23:08.0280 0x0660  Disk - ok

13:23:08.0327 0x0660  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\windows\System32\dnsrslvr.dll

13:23:08.0358 0x0660  Dnscache - ok

13:23:08.0421 0x0660  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\windows\System32\dot3svc.dll

13:23:08.0483 0x0660  dot3svc - ok

13:23:08.0530 0x0660  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\windows\system32\dps.dll

13:23:08.0592 0x0660  DPS - ok

13:23:08.0639 0x0660  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\windows\system32\drivers\drmkaud.sys

13:23:08.0733 0x0660  drmkaud - ok

13:23:08.0811 0x0660  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl         C:\windows\System32\drivers\dxgkrnl.sys

13:23:08.0873 0x0660  DXGKrnl - ok

13:23:08.0889 0x0660  EagleXNt - ok

13:23:08.0936 0x0660  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\windows\System32\eapsvc.dll

13:23:08.0982 0x0660  EapHost - ok

13:23:09.0185 0x0660  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\windows\system32\DRIVERS\evbdx.sys

13:23:09.0357 0x0660  ebdrv - ok

13:23:09.0419 0x0660  [ 88142648ED929E6D2178CC3B8C13C00F, 7E6B6B2CF61C56FBF8F2A96BDA2E9506467A9A883BFD3BEA78A4F500851E76DB ] EFS             C:\windows\System32\lsass.exe

13:23:09.0466 0x0660  EFS - ok

13:23:09.0560 0x0660  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\windows\ehome\ehRecvr.exe

13:23:09.0606 0x0660  ehRecvr - ok

13:23:09.0653 0x0660  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\windows\ehome\ehsched.exe

13:23:09.0684 0x0660  ehSched - ok

13:23:09.0731 0x0660  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\windows\system32\DRIVERS\elxstor.sys

13:23:09.0778 0x0660  elxstor - ok

13:23:09.0825 0x0660  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\windows\system32\drivers\errdev.sys

13:23:09.0856 0x0660  ErrDev - ok

13:23:09.0934 0x0660  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\windows\system32\es.dll

13:23:09.0981 0x0660  EventSystem - ok

13:23:10.0012 0x0660  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\windows\system32\drivers\exfat.sys

13:23:10.0074 0x0660  exfat - ok

13:23:10.0137 0x0660  [ DA7ED3A484A2A03FD8AEC1B3A0DB401C, 459726F1502E1A4DECA5DE3C33297A8F1D949B92CE18F823CA979FFC59C481FD ] ezGOSvc         C:\windows\system32\ezGOSvc.dll

13:23:10.0152 0x0660  ezGOSvc - ok

13:23:10.0184 0x0660  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\windows\system32\drivers\fastfat.sys

13:23:10.0230 0x0660  fastfat - ok

13:23:10.0308 0x0660  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\windows\system32\fxssvc.exe

13:23:10.0355 0x0660  Fax - ok

13:23:10.0386 0x0660  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\windows\system32\DRIVERS\fdc.sys

13:23:10.0402 0x0660  fdc - ok

13:23:10.0433 0x0660  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\windows\system32\fdPHost.dll

13:23:10.0480 0x0660  fdPHost - ok

13:23:10.0511 0x0660  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\windows\system32\fdrespub.dll

13:23:10.0558 0x0660  FDResPub - ok

13:23:10.0574 0x0660  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\windows\system32\drivers\fileinfo.sys

13:23:10.0605 0x0660  FileInfo - ok

13:23:10.0636 0x0660  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\windows\system32\drivers\filetrace.sys

13:23:10.0683 0x0660  Filetrace - ok

13:23:10.0683 0x0660  FirebirdServerMAGIXInstance - ok

13:23:10.0714 0x0660  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\windows\system32\DRIVERS\flpydisk.sys

13:23:10.0730 0x0660  flpydisk - ok

13:23:10.0776 0x0660  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys

13:23:10.0808 0x0660  FltMgr - ok

13:23:10.0901 0x0660  [ 37DE123FE4276D8EC7F3C5B10C236238, 93CA47B9A96D904DD177FC0E04DECDF13756C8FA3C7613913DB4BF29A70ECE96 ] FontCache       C:\windows\system32\FntCache.dll

13:23:10.0995 0x0660  FontCache - ok

13:23:11.0073 0x0660  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

13:23:11.0088 0x0660  FontCache3.0.0.0 - ok

13:23:11.0104 0x0660  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\windows\system32\drivers\FsDepends.sys

13:23:11.0135 0x0660  FsDepends - ok

13:23:11.0182 0x0660  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys

13:23:11.0213 0x0660  Fs_Rec - ok

13:23:11.0260 0x0660  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys

13:23:11.0291 0x0660  fvevol - ok

13:23:11.0322 0x0660  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\windows\system32\DRIVERS\gagp30kx.sys

13:23:11.0354 0x0660  gagp30kx - ok

13:23:11.0525 0x0660  [ 6A604C6172B7A873C3EBB39E69D2F2E1, E08E4EA76500943550B6C5F4852C6919A88F51A3B1800475A632DDD3BD2BAB86 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

13:23:11.0603 0x0660  GfExperienceService - ok

13:23:11.0650 0x0660  [ 93CA4D9A0433BE0EDD0B9F2F26D5E54C, ACD6BBB639CAF092809927F84F5693B7BA11080684A4993029D713ACF67D4C79 ] ggflt           C:\windows\system32\DRIVERS\ggflt.sys

13:23:11.0666 0x0660  ggflt - ok

13:23:11.0697 0x0660  [ 17E678AAB82CCDFB80E7614504933895, 43935C8C5C30DA415957B789DC9FA10721C240C603DC8733D9B791A2F58BE1BD ] ggsemc          C:\windows\system32\DRIVERS\ggsemc.sys

13:23:11.0712 0x0660  ggsemc - ok

13:23:11.0744 0x0660  GMSIPCI - ok

13:23:11.0822 0x0660  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc           C:\windows\System32\gpsvc.dll

13:23:11.0900 0x0660  gpsvc - ok

13:23:11.0978 0x0660  [ 833051C6C6C42117191935F734CFBD97, 5EB5672ABC7994A4AFF855A572158B8BE4FC6E541CFD4B9BE4FF2739A9A6AFB8 ] hamachi         C:\windows\system32\DRIVERS\hamachi.sys

13:23:11.0993 0x0660  hamachi - ok

13:23:12.0024 0x0660  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys

13:23:12.0056 0x0660  hcw85cir - ok

13:23:12.0134 0x0660  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys

13:23:12.0180 0x0660  HdAudAddService - ok

13:23:12.0196 0x0660  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\windows\system32\drivers\HDAudBus.sys

13:23:12.0227 0x0660  HDAudBus - ok

13:23:12.0258 0x0660  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\windows\system32\DRIVERS\HidBatt.sys

13:23:12.0290 0x0660  HidBatt - ok

13:23:12.0321 0x0660  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\windows\system32\DRIVERS\hidbth.sys

13:23:12.0352 0x0660  HidBth - ok

13:23:12.0368 0x0660  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\windows\system32\DRIVERS\hidir.sys

13:23:12.0399 0x0660  HidIr - ok

13:23:12.0461 0x0660  [ 17EA65E6496FD6BB627175FB838A82A4, 4C454DEF56C24329006C570EDB267F3D6CB82E140DB605FB736E285B0E2249B0 ] hidkmdf         C:\windows\system32\DRIVERS\hidkmdf.sys

13:23:12.0477 0x0660  hidkmdf - ok

13:23:12.0539 0x0660  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\windows\system32\hidserv.dll

13:23:12.0586 0x0660  hidserv - ok

13:23:12.0633 0x0660  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\windows\system32\DRIVERS\hidusb.sys

13:23:12.0680 0x0660  HidUsb - ok

13:23:12.0726 0x0660  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\windows\system32\kmsvc.dll

13:23:12.0773 0x0660  hkmsvc - ok

13:23:12.0867 0x0660  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\windows\system32\ListSvc.dll

13:23:12.0914 0x0660  HomeGroupListener - ok

13:23:12.0976 0x0660  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\windows\system32\provsvc.dll

13:23:13.0007 0x0660  HomeGroupProvider - ok

13:23:13.0054 0x0660  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys

13:23:13.0085 0x0660  HpSAMD - ok

13:23:13.0179 0x0660  [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP            C:\windows\system32\drivers\HTTP.sys

13:23:13.0257 0x0660  HTTP - ok

13:23:13.0257 0x0660  hwdatacard - ok

13:23:13.0319 0x0660  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys

13:23:13.0350 0x0660  hwpolicy - ok

13:23:13.0397 0x0660  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\windows\system32\drivers\i8042prt.sys

13:23:13.0428 0x0660  i8042prt - ok

13:23:13.0491 0x0660  [ 0BAA4115DFFFD6A6D809A89D65E1281A, FE524C9AFD31780F9E05765A49FFEA7B5EB0C0C9C6222080B50032BB3643A21B ] iaStor          C:\windows\system32\DRIVERS\iaStor.sys

13:23:13.0522 0x0660  iaStor - ok

13:23:13.0616 0x0660  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\windows\system32\drivers\iaStorV.sys

13:23:13.0647 0x0660  iaStorV - ok

13:23:13.0740 0x0660  [ DAF66902F08796F9C694901660E5A64A, F4A4764DED05980426BAB54AAF040BC27A39C80315F5161E8D0B4C7F694BD8E6 ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

13:23:13.0756 0x0660  IDriverT - detected UnsignedFile.Multi.Generic ( 1 )

13:23:13.0756 0x0660  IDriverT ( UnsignedFile.Multi.Generic ) - warning

13:23:13.0865 0x0660  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

13:23:13.0928 0x0660  idsvc - ok

13:23:14.0006 0x0660  IEEtwCollectorService - ok

13:23:14.0286 0x0660  [ AD626F6964F4D364D226C39E06872DD3, 5D52F89930BB07D4D2D0FC12143BD233B5D2C238527B3B4CAD74736D1EC84218 ] igfx            C:\windows\system32\DRIVERS\igdkmd32.sys

13:23:14.0645 0x0660  igfx - ok

13:23:14.0692 0x0660  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\windows\system32\DRIVERS\iirsp.sys

13:23:14.0723 0x0660  iirsp - ok

13:23:14.0832 0x0660  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\windows\System32\ikeext.dll

13:23:14.0895 0x0660  IKEEXT - ok

13:23:15.0113 0x0660  [ DAA00AE67B4F8B083442BEAB684A387B, 8770DE3B80F8F192E333311A90BB0AD8E2CA0959B2CF363589C54E15F3D37569 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHDA.sys

13:23:15.0316 0x0660  IntcAzAudAddService - ok

13:23:15.0378 0x0660  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\windows\system32\drivers\intelide.sys

13:23:15.0394 0x0660  intelide - ok

13:23:15.0441 0x0660  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\windows\system32\DRIVERS\intelppm.sys

13:23:15.0472 0x0660  intelppm - ok

13:23:15.0503 0x0660  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\windows\system32\ipbusenum.dll

13:23:15.0550 0x0660  IPBusEnum - ok

13:23:15.0581 0x0660  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys

13:23:15.0644 0x0660  IpFilterDriver - ok

13:23:15.0722 0x0660  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\windows\System32\iphlpsvc.dll

13:23:15.0784 0x0660  iphlpsvc - ok

13:23:15.0831 0x0660  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\windows\system32\drivers\IPMIDrv.sys

13:23:15.0862 0x0660  IPMIDRV - ok

13:23:15.0878 0x0660  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\windows\system32\drivers\ipnat.sys

13:23:15.0940 0x0660  IPNAT - ok

13:23:15.0956 0x0660  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\windows\system32\drivers\irenum.sys

13:23:16.0018 0x0660  IRENUM - ok

13:23:16.0065 0x0660  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\windows\system32\drivers\isapnp.sys

13:23:16.0080 0x0660  isapnp - ok

13:23:16.0143 0x0660  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys

13:23:16.0174 0x0660  iScsiPrt - ok

13:23:16.0205 0x0660  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\windows\system32\DRIVERS\kbdclass.sys

13:23:16.0236 0x0660  kbdclass - ok

13:23:16.0252 0x0660  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\windows\system32\DRIVERS\kbdhid.sys

13:23:16.0283 0x0660  kbdhid - ok

13:23:16.0299 0x0660  [ 88142648ED929E6D2178CC3B8C13C00F, 7E6B6B2CF61C56FBF8F2A96BDA2E9506467A9A883BFD3BEA78A4F500851E76DB ] KeyIso          C:\windows\system32\lsass.exe

13:23:16.0330 0x0660  KeyIso - ok

13:23:16.0408 0x0660  [ 4476FE98AAF505ACDCD3EE6360AABEC1, 1573C5B9F1B12FEEE6D771AFF8969FB9D06878B1E0BECCD4AF13DA9F194FB256 ] KMWDFILTERx86   C:\windows\system32\DRIVERS\KMWDFILTER.sys

13:23:16.0439 0x0660  KMWDFILTERx86 - ok

13:23:16.0486 0x0660  [ 88246FD556E98BF416AC00C418B83D1D, 917EC561EB1C4D8D736DFDCD8456389B3DB0E8CB5AE900FB507F7F1550048BAD ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys

13:23:16.0517 0x0660  KSecDD - ok

13:23:16.0548 0x0660  [ C41140DBF0BEA35E480A9CF9823B2B08, 142C4EB8AF27C9B649F24BEECFA1FD3E2B160BC8E8172A04526B73BB157CAD3A ] KSecPkg         C:\windows\system32\Drivers\ksecpkg.sys

13:23:16.0580 0x0660  KSecPkg - ok

13:23:16.0642 0x0660  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\windows\system32\msdtckrm.dll

13:23:16.0704 0x0660  KtmRm - ok

13:23:16.0767 0x0660  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\windows\system32\srvsvc.dll

13:23:16.0829 0x0660  LanmanServer - ok

13:23:16.0860 0x0660  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\windows\System32\wkssvc.dll

13:23:16.0907 0x0660  LanmanWorkstation - ok

13:23:16.0954 0x0660  [ F8A7212D0864EF5E9185FB95E6623F4D, 277EAA06BD3D1CB31E6CD7B9ECD3A4B7D4AB7A369DB5FFF04EC7D749DF26E3D2 ] lirsgt          C:\windows\system32\DRIVERS\lirsgt.sys

13:23:16.0985 0x0660  lirsgt - ok

13:23:17.0016 0x0660  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys

13:23:17.0063 0x0660  lltdio - ok

13:23:17.0110 0x0660  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\windows\System32\lltdsvc.dll

13:23:17.0172 0x0660  lltdsvc - ok

13:23:17.0188 0x0660  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\windows\System32\lmhsvc.dll

13:23:17.0250 0x0660  lmhosts - ok

13:23:17.0282 0x0660  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\windows\system32\DRIVERS\lsi_fc.sys

13:23:17.0313 0x0660  LSI_FC - ok

13:23:17.0344 0x0660  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\windows\system32\DRIVERS\lsi_sas.sys

13:23:17.0375 0x0660  LSI_SAS - ok

13:23:17.0391 0x0660  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\windows\system32\DRIVERS\lsi_sas2.sys

13:23:17.0422 0x0660  LSI_SAS2 - ok

13:23:17.0453 0x0660  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\windows\system32\DRIVERS\lsi_scsi.sys

13:23:17.0484 0x0660  LSI_SCSI - ok

13:23:17.0516 0x0660  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\windows\system32\drivers\luafv.sys

13:23:17.0562 0x0660  luafv - ok

13:23:17.0656 0x0660  [ B895839B8743E400D7C7DAE156F74E7E, 52E13C6260F7E6718C782DF0B43D838FB4939B314695A7A9CB2012D8B224066B ] LVRS            C:\windows\system32\DRIVERS\lvrs.sys

13:23:17.0718 0x0660  LVRS - ok

13:23:17.0781 0x0660  [ 23F8EF78BB9553E465A476F3CEE5CA18, 22E19B9F16EC555CCA091841711C8D1938F7EBCD8C6AC82E77375AE5EA96610C ] LVUSBSta        C:\windows\system32\drivers\LVUSBSta.sys

13:23:17.0796 0x0660  LVUSBSta - ok

13:23:17.0859 0x0660  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\windows\system32\Mcx2Svc.dll

13:23:17.0890 0x0660  Mcx2Svc - ok

13:23:17.0906 0x0660  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\windows\system32\DRIVERS\megasas.sys

13:23:17.0937 0x0660  megasas - ok

13:23:17.0984 0x0660  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\windows\system32\DRIVERS\MegaSR.sys

13:23:18.0015 0x0660  MegaSR - ok

13:23:18.0062 0x0660  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\windows\system32\mmcss.dll

13:23:18.0108 0x0660  MMCSS - ok

13:23:18.0140 0x0660  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\windows\system32\drivers\modem.sys

13:23:18.0186 0x0660  Modem - ok

13:23:18.0218 0x0660  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\windows\system32\DRIVERS\monitor.sys

13:23:18.0249 0x0660  monitor - ok

13:23:18.0311 0x0660  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\windows\system32\DRIVERS\mouclass.sys

13:23:18.0327 0x0660  mouclass - ok

13:23:18.0374 0x0660  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\windows\system32\DRIVERS\mouhid.sys

13:23:18.0405 0x0660  mouhid - ok

13:23:18.0452 0x0660  [ BAD9C0366134BA181514E9263C8CE606, 7976B2D3DC283ACDBC21C7D197C0E2A650E6555F6569283302766B17D736BDB8 ] mountmgr        C:\windows\system32\drivers\mountmgr.sys

13:23:18.0483 0x0660  mountmgr - ok

13:23:18.0576 0x0660  [ 22A7042C70F90F8261840740DDBB5176, AD0075C97D2D7C568D5CFB1C3A02DCE3BC01941844A759B29CD4DE4AF2F5FC45 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

13:23:18.0608 0x0660  MozillaMaintenance - ok

13:23:18.0717 0x0660  [ F112DA773EC3E9D3CDE9221ED300E033, 693C416B281DA3489C096812D0E4E0413C05798D36AF534624C3B29551CE68A4 ] MpFilter        C:\windows\system32\DRIVERS\MpFilter.sys

13:23:18.0748 0x0660  MpFilter - ok

13:23:18.0810 0x0660  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\windows\system32\drivers\mpio.sys

13:23:18.0842 0x0660  mpio - ok

13:23:19.0013 0x0660  [ BB7BB66A8DAF16950F83AE7BF498AF8F, A96FC3BE055C52B98E7ECDF68D69081620F829B04B5496C73D87F271E40EA638 ] MpKsl479104d5   C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{378E663A-D49E-486C-A32F-4376EC840978}\MpKsl479104d5.sys

13:23:19.0044 0x0660  MpKsl479104d5 - ok

13:23:19.0122 0x0660  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys

13:23:19.0169 0x0660  mpsdrv - ok

13:23:19.0263 0x0660  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\windows\system32\mpssvc.dll

13:23:19.0341 0x0660  MpsSvc - ok

13:23:19.0403 0x0660  [ 03F899F521D2AAED1C55008F734DF252, 4E56A51476A13F5630719018037B1F63DF9ACEA1CFE782AF04E669BD696954C5 ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys

13:23:19.0450 0x0660  MRxDAV - ok

13:23:19.0512 0x0660  [ BAF4E2BE25E8EDFDAA98AA17D92E3C35, 1C7C7A7217962BE8338F8F989A2DBA2C0FD8A1CCC4E773EA5D02F291C2AF0BCA ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys

13:23:19.0559 0x0660  mrxsmb - ok

13:23:19.0590 0x0660  [ 300E85A19AFD4DF992AB6297C6E64CA1, B794DC07336DA64ECB8F6F695978C5B67FBFC7D1B60F3AD94D970FC9DE05A095 ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys

13:23:19.0622 0x0660  mrxsmb10 - ok

13:23:19.0653 0x0660  [ 70EF9F86474BA28A6898228E1C9ABDCB, 5BCCE0A1D33F7A0780350F3AA870468DB7B51F4FBA267AF663BC946B2259E0F8 ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys

13:23:19.0684 0x0660  mrxsmb20 - ok

13:23:19.0746 0x0660  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\windows\system32\drivers\msahci.sys

13:23:19.0778 0x0660  msahci - ok

13:23:19.0871 0x0660  [ 8E46A7BAC823DD82D4FB2A34C3DF4C1D, FEA8FB1B8752660EC6174542B24D234A61EBFF8318A5855B3E5C91DB86856CAB ] MSCSPTISRV      C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe

13:23:19.0887 0x0660  MSCSPTISRV - detected UnsignedFile.Multi.Generic ( 1 )

13:23:19.0887 0x0660  MSCSPTISRV ( UnsignedFile.Multi.Generic ) - warning

13:23:19.0918 0x0660  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\windows\system32\drivers\msdsm.sys

13:23:19.0949 0x0660  msdsm - ok

13:23:19.0996 0x0660  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\windows\System32\msdtc.exe

13:23:20.0027 0x0660  MSDTC - ok

13:23:20.0090 0x0660  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\windows\system32\drivers\Msfs.sys

13:23:20.0136 0x0660  Msfs - ok

13:23:20.0168 0x0660  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\windows\System32\drivers\mshidkmdf.sys

13:23:20.0214 0x0660  mshidkmdf - ok

13:23:20.0277 0x0660  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys

13:23:20.0308 0x0660  msisadrv - ok

13:23:20.0339 0x0660  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\windows\system32\iscsiexe.dll

13:23:20.0402 0x0660  MSiSCSI - ok

13:23:20.0417 0x0660  msiserver - ok

13:23:20.0448 0x0660  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\windows\system32\drivers\MSKSSRV.sys

13:23:20.0495 0x0660  MSKSSRV - ok

13:23:20.0573 0x0660  [ CC09BB7FDEFC5763CCB3CF7DAE2D76CF, F8F00900EDBA2F64BF136DD0B6C83CAF07C72F24F3D49C78B7EA24757FDBC6D0 ] MsMpSvc         C:\Program Files\Microsoft Security Client\MsMpEng.exe

13:23:20.0604 0x0660  MsMpSvc - ok

13:23:20.0636 0x0660  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys

13:23:20.0682 0x0660  MSPCLOCK - ok

13:23:20.0714 0x0660  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\windows\system32\drivers\MSPQM.sys

13:23:20.0760 0x0660  MSPQM - ok

13:23:20.0792 0x0660  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\windows\system32\drivers\MsRPC.sys

13:23:20.0823 0x0660  MsRPC - ok

13:23:20.0870 0x0660  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\windows\system32\drivers\mssmbios.sys

13:23:20.0885 0x0660  mssmbios - ok

13:23:20.0932 0x0660  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\windows\system32\drivers\MSTEE.sys

13:23:20.0979 0x0660  MSTEE - ok

13:23:21.0010 0x0660  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\windows\system32\DRIVERS\MTConfig.sys

13:23:21.0041 0x0660  MTConfig - ok

13:23:21.0088 0x0660  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\windows\system32\Drivers\mup.sys

13:23:21.0104 0x0660  Mup - ok

13:23:21.0150 0x0660  mvgordih - ok

13:23:21.0213 0x0660  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\windows\system32\qagentRT.dll

13:23:21.0275 0x0660  napagent - ok

13:23:21.0338 0x0660  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\windows\system32\DRIVERS\nwifi.sys

13:23:21.0384 0x0660  NativeWifiP - ok

13:23:21.0478 0x0660  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\windows\system32\drivers\ndis.sys

13:23:21.0540 0x0660  NDIS - ok

13:23:21.0587 0x0660  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\windows\system32\DRIVERS\ndiscap.sys

13:23:21.0634 0x0660  NdisCap - ok

13:23:21.0665 0x0660  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys

13:23:21.0712 0x0660  NdisTapi - ok

13:23:21.0774 0x0660  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\windows\system32\DRIVERS\ndisuio.sys

13:23:21.0821 0x0660  Ndisuio - ok

13:23:21.0868 0x0660  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\windows\system32\DRIVERS\ndiswan.sys

13:23:21.0930 0x0660  NdisWan - ok

13:23:21.0993 0x0660  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\windows\system32\drivers\NDProxy.sys

13:23:22.0040 0x0660  NDProxy - ok

13:23:22.0086 0x0660  [ 7AFD0E39AB15CB355487B7CC19F4E2C5, E6AFC722743ABEBC1CB9909912AB822F2996EAA7F42774BD7C77F24A6DAAA7A5 ] Netaapl         C:\windows\system32\DRIVERS\netaapl.sys

13:23:22.0102 0x0660  Netaapl - detected UnsignedFile.Multi.Generic ( 1 )

13:23:22.0102 0x0660  Netaapl ( UnsignedFile.Multi.Generic ) - warning

13:23:22.0133 0x0660  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\windows\system32\DRIVERS\netbios.sys

13:23:22.0196 0x0660  NetBIOS - ok

13:23:22.0242 0x0660  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT           C:\windows\system32\DRIVERS\netbt.sys

13:23:22.0305 0x0660  NetBT - ok

13:23:22.0320 0x0660  [ 88142648ED929E6D2178CC3B8C13C00F, 7E6B6B2CF61C56FBF8F2A96BDA2E9506467A9A883BFD3BEA78A4F500851E76DB ] Netlogon        C:\windows\system32\lsass.exe

13:23:22.0352 0x0660  Netlogon - ok

13:23:22.0414 0x0660  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\windows\System32\netman.dll

13:23:22.0476 0x0660  Netman - ok

13:23:22.0570 0x0660  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

13:23:22.0601 0x0660  NetMsmqActivator - ok

13:23:22.0632 0x0660  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

13:23:22.0679 0x0660  NetPipeActivator - ok

13:23:22.0726 0x0660  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\windows\System32\netprofm.dll

13:23:22.0788 0x0660  netprofm - ok

13:23:22.0835 0x0660  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

13:23:22.0866 0x0660  NetTcpActivator - ok

13:23:22.0882 0x0660  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

13:23:22.0929 0x0660  NetTcpPortSharing - ok

13:23:22.0976 0x0660  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\windows\system32\DRIVERS\nfrd960.sys

13:23:22.0991 0x0660  nfrd960 - ok

13:23:23.0069 0x0660  [ 780FF28BCD8470C5FDDEEF69982AA295, 1ED386E87E0AA733F23D554D2BF4EF4168DB9A419B7BA0BA8FBA20F118BE21DF ] NisDrv          C:\windows\system32\DRIVERS\NisDrvWFP.sys

13:23:23.0085 0x0660  NisDrv - ok

13:23:23.0132 0x0660  [ 3FF257F54649D4F19E39263C5D581CD1, 1F201EEE770A452AA30C6270AAA456A77F9F3A102F473E12C22D3B8809932C1B ] NisSrv          C:\Program Files\Microsoft Security Client\NisSrv.exe

13:23:23.0163 0x0660  NisSrv - ok

13:23:23.0225 0x0660  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\windows\System32\nlasvc.dll

13:23:23.0288 0x0660  NlaSvc - ok

13:23:23.0381 0x0660  [ 7B273501C59D52978B761F82BEBADB06, 696BFE74E63BB0F97C6884EADABC67B5A2FAA9D9057BED8B7E1E336064B0F6E7 ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

13:23:23.0412 0x0660  NMIndexingService - ok

13:23:23.0444 0x0660  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\windows\system32\drivers\Npfs.sys

13:23:23.0490 0x0660  Npfs - ok

13:23:23.0506 0x0660  npggsvc - ok

13:23:23.0553 0x0660  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\windows\system32\nsisvc.dll

13:23:23.0600 0x0660  nsi - ok

13:23:23.0631 0x0660  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys

13:23:23.0678 0x0660  nsiproxy - ok

13:23:23.0802 0x0660  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\windows\system32\drivers\Ntfs.sys

13:23:23.0880 0x0660  Ntfs - ok

13:23:23.0943 0x0660  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\windows\system32\drivers\Null.sys

13:23:23.0990 0x0660  Null - ok

13:23:24.0052 0x0660  [ 9F8EE4948B7ADD9D12F778F61A2758A4, 9848C7D97AC000BF7A00BAE12593E48E14D36D7FFFCF25A163FAAB446691032F ] NVHDA           C:\windows\system32\drivers\nvhda32v.sys

13:23:24.0083 0x0660  NVHDA - ok

13:23:24.0645 0x0660  [ 1A7AE487E2AAA86089EC8BDD6A104538, 4BCF9E718198DE25ECA6F290510CD438CCDF92DF30C3ACA15F59634FC11D2864 ] nvlddmkm        C:\windows\system32\DRIVERS\nvlddmkm.sys

13:23:25.0331 0x0660  nvlddmkm - ok

13:23:26.0064 0x0660  [ 930AE35B57C33F361AF045D220229063, B67776D3392E879CF6006AC86D72DEA826EF4607A4853116B837F2F95BEBF270 ] NvNetworkService C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

13:23:26.0174 0x0660  NvNetworkService - ok

13:23:26.0252 0x0660  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\windows\system32\drivers\nvraid.sys

13:23:26.0267 0x0660  nvraid - ok

13:23:26.0298 0x0660  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\windows\system32\drivers\nvstor.sys

13:23:26.0330 0x0660  nvstor - ok

13:23:26.0454 0x0660  [ 3A75036E302390A04ADFA34096042CBD, 2C9A84F0A7A95406DE4C9D6EAF2BD2A1BA0534DCE618F460ED28905EAADD03C4 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys

13:23:26.0486 0x0660  NvStreamKms - ok

13:23:26.0798 0x0660  [ 12CFFEEFA26A3A1140F3AD3412AE57CB, D714197EDE035A9C3BAEB30B28554415A59808CD424B41DB4E5EFAB3A7EC9B8D ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

13:23:27.0063 0x0660  NvStreamSvc - ok

13:23:27.0266 0x0660  [ 9AF133F51F7832ABAD3EEA362C84FE43, B4AFFC869725321026DF3B7606D014BACAD739862A779D349123A7E4E9B7E026 ] nvsvc           C:\windows\system32\nvvsvc.exe

13:23:27.0328 0x0660  nvsvc - ok

13:23:27.0406 0x0660  [ C2A9985C97DF5946AEAE7C001625410C, A0B00BFB2B6E5F19E8DBFAB74C65B9590659909168D7CB559037C5E64C44F3D0 ] nvvad_WaveExtensible C:\windows\system32\drivers\nvvad32v.sys

13:23:27.0437 0x0660  nvvad_WaveExtensible - ok

13:23:27.0500 0x0660  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\windows\system32\drivers\nv_agp.sys

13:23:27.0531 0x0660  nv_agp - ok

13:23:27.0624 0x0660  [ B5D5DA8230D3D3525839D939A9196C3E, 32058E8D55D55D3E0EA31AFC37548B8F904A946D97E5E5FBC079AB1AD1650A60 ] OberonGameConsoleService C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

13:23:27.0656 0x0660  OberonGameConsoleService - ok

13:23:27.0687 0x0660  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\windows\system32\drivers\ohci1394.sys

13:23:27.0718 0x0660  ohci1394 - ok

13:23:27.0905 0x0660  [ 4F9FFCF12B6ED0B4DAC95427772C226E, 4A79AEC410ED1034366FAC1388FB29381EE6541AA17E3652BE86265D09541C56 ] Origin Client Service C:\Program Files\Origin\OriginClientService.exe

13:23:28.0014 0x0660  Origin Client Service - ok

13:23:28.0108 0x0660  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

13:23:28.0139 0x0660  ose - ok

13:23:28.0186 0x0660  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\windows\system32\pnrpsvc.dll

13:23:28.0248 0x0660  p2pimsvc - ok

13:23:28.0295 0x0660  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\windows\system32\p2psvc.dll

13:23:28.0326 0x0660  p2psvc - ok

13:23:28.0404 0x0660  [ 753A8F339F231D2B857E2CCD51A6E6CA, 59510E69D623B9DA725A8097A44FD210FCF05BB3BA27D5296EA4610359DA0831 ] PACSPTISVR      C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe

13:23:28.0420 0x0660  PACSPTISVR - detected UnsignedFile.Multi.Generic ( 1 )

13:23:28.0420 0x0660  PACSPTISVR ( UnsignedFile.Multi.Generic ) - warning

13:23:28.0467 0x0660  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\windows\system32\DRIVERS\parport.sys

13:23:28.0498 0x0660  Parport - ok

13:23:28.0560 0x0660  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\windows\system32\drivers\partmgr.sys

13:23:28.0576 0x0660  partmgr - ok

13:23:28.0623 0x0660  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\windows\system32\DRIVERS\parvdm.sys

13:23:28.0638 0x0660  Parvdm - ok

13:23:28.0716 0x0660  [ 52954BE460EC6C54C0ACB2B3B126FFC6, 9F9878EC5ABC74C5A8EE8E1D940F0934F081895B07D844F42F80A638FE713F7B ] PcaSvc          C:\windows\System32\pcasvc.dll

13:23:28.0763 0x0660  PcaSvc - ok

13:23:28.0841 0x0660  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\windows\system32\drivers\pci.sys

13:23:28.0872 0x0660  pci - ok

13:23:28.0935 0x0660  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\windows\system32\drivers\pciide.sys

13:23:28.0950 0x0660  pciide - ok

13:23:28.0982 0x0660  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\windows\system32\DRIVERS\pcmcia.sys

13:23:29.0028 0x0660  pcmcia - ok

13:23:29.0075 0x0660  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\windows\system32\drivers\pcw.sys

13:23:29.0122 0x0660  pcw - ok

13:23:29.0247 0x0660  [ AEBC369F7DC72AB3F5B9BDF34FA0D43F, 2A819154AC6C23E97C583D90B4D0C112188B7AE9D8D9B3F88811BFCED124E551 ] PEAUTH          C:\windows\system32\drivers\peauth.sys

13:23:29.0325 0x0660  PEAUTH - ok

13:23:29.0403 0x0660  [ A05F0D7419CF4680EEDD5736E6549E7B, D8B32DE00A317593D61016E4823370B073618F9760A785FF7DA0F26DD5E4FCAB ] pepifilter      C:\windows\system32\DRIVERS\lv302af.sys

13:23:29.0418 0x0660  pepifilter - ok

13:23:30.0105 0x0660  [ 4BB5AC2DD485B8EEFCCB977EE66A68AD, 8C45E74697B2484A26DE693D179AF81F2F4DC4EC0985908A89EF6167F3096056 ] PID_PEPI        C:\windows\system32\DRIVERS\LV302V32.SYS

13:23:30.0276 0x0660  PID_PEPI - ok

13:23:30.0432 0x0660  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\windows\system32\pla.dll

13:23:30.0542 0x0660  pla - ok

13:23:30.0635 0x0660  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\windows\system32\umpnpmgr.dll

13:23:30.0698 0x0660  PlugPlay - ok

13:23:30.0744 0x0660  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\windows\system32\pnrpauto.dll

13:23:30.0776 0x0660  PNRPAutoReg - ok

13:23:30.0807 0x0660  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\windows\system32\pnrpsvc.dll

13:23:30.0854 0x0660  PNRPsvc - ok

13:23:30.0932 0x0660  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent     C:\windows\System32\ipsecsvc.dll

13:23:30.0994 0x0660  PolicyAgent - ok

13:23:31.0088 0x0660  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\windows\system32\umpo.dll

13:23:31.0134 0x0660  Power - ok

13:23:31.0181 0x0660  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys

13:23:31.0244 0x0660  PptpMiniport - ok

13:23:31.0275 0x0660  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\windows\system32\DRIVERS\processr.sys

13:23:31.0306 0x0660  Processor - ok

13:23:31.0353 0x0660  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc         C:\windows\system32\profsvc.dll

13:23:31.0400 0x0660  ProfSvc - ok

13:23:31.0431 0x0660  [ 88142648ED929E6D2178CC3B8C13C00F, 7E6B6B2CF61C56FBF8F2A96BDA2E9506467A9A883BFD3BEA78A4F500851E76DB ] ProtectedStorage C:\windows\system32\lsass.exe

13:23:31.0462 0x0660  ProtectedStorage - ok

13:23:31.0493 0x0660  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\windows\system32\DRIVERS\pacer.sys

13:23:31.0540 0x0660  Psched - ok

13:23:31.0649 0x0660  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\windows\system32\DRIVERS\ql2300.sys

13:23:31.0743 0x0660  ql2300 - ok

13:23:31.0774 0x0660  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\windows\system32\DRIVERS\ql40xx.sys

13:23:31.0805 0x0660  ql40xx - ok

13:23:31.0852 0x0660  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\windows\system32\qwave.dll

13:23:31.0899 0x0660  QWAVE - ok

13:23:31.0930 0x0660  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys

13:23:31.0961 0x0660  QWAVEdrv - ok

13:23:31.0992 0x0660  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys

13:23:32.0039 0x0660  RasAcd - ok

13:23:32.0086 0x0660  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\windows\system32\DRIVERS\AgileVpn.sys

13:23:32.0133 0x0660  RasAgileVpn - ok

13:23:32.0164 0x0660  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\windows\System32\rasauto.dll

13:23:32.0226 0x0660  RasAuto - ok

13:23:32.0242 0x0660  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\windows\system32\DRIVERS\rasl2tp.sys

13:23:32.0304 0x0660  Rasl2tp - ok

13:23:32.0382 0x0660  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\windows\System32\rasmans.dll

13:23:32.0445 0x0660  RasMan - ok

13:23:32.0476 0x0660  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys

13:23:32.0523 0x0660  RasPppoe - ok

13:23:32.0554 0x0660  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\windows\system32\DRIVERS\rassstp.sys

13:23:32.0616 0x0660  RasSstp - ok

13:23:32.0694 0x0660  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\windows\system32\DRIVERS\rdbss.sys

13:23:32.0757 0x0660  rdbss - ok

13:23:32.0788 0x0660  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\windows\system32\DRIVERS\rdpbus.sys

13:23:32.0819 0x0660  rdpbus - ok

13:23:32.0866 0x0660  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys

13:23:32.0913 0x0660  RDPCDD - ok

13:23:33.0006 0x0660  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys

13:23:33.0053 0x0660  RDPENCDD - ok

13:23:33.0084 0x0660  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys

13:23:33.0131 0x0660  RDPREFMP - ok

13:23:33.0256 0x0660  [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys

13:23:33.0303 0x0660  RdpVideoMiniport - ok

13:23:33.0365 0x0660  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\windows\system32\drivers\RDPWD.sys

13:23:33.0412 0x0660  RDPWD - ok

13:23:33.0490 0x0660  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\windows\system32\drivers\rdyboost.sys

13:23:33.0521 0x0660  rdyboost - ok

13:23:33.0599 0x0660  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\windows\System32\mprdim.dll

13:23:33.0646 0x0660  RemoteAccess - ok

13:23:33.0693 0x0660  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\windows\system32\regsvc.dll

13:23:33.0755 0x0660  RemoteRegistry - ok

13:23:33.0849 0x0660  [ 7CCAEBCAB6FC1ED0206C07E083E79207, 40BFA1BEDFF093652279494EDD397FC094794B76916C2681D0544D6793314DFE ] RichVideo       C:\Program Files\CyberLink\Shared files\RichVideo.exe

13:23:33.0880 0x0660  RichVideo - ok

13:23:33.0927 0x0660  [ 616EAC1B0E48B236A5A9B8AE07FDB81C, B336AD485AE908DCEB50102C0E6295E1ED60E29F311EE69947AB80AADF2A62FD ] RimUsb          C:\windows\system32\Drivers\RimUsb.sys

13:23:33.0974 0x0660  RimUsb - ok

13:23:34.0020 0x0660  [ 2C4FB2E9F039287767C384E46EE91030, 5290E9457256C007A3FCAE246D0C536179C54D9F4B365E3143B9D0764FCBFCDB ] RimVSerPort     C:\windows\system32\DRIVERS\RimSerial.sys

13:23:34.0067 0x0660  RimVSerPort - ok

13:23:34.0098 0x0660  [ 564297827D213F52C7A3A2FF749568CA, B09A78D3B3F0BF47818BBEEDEF73BD6ACB9C5E367592BB90C85FD262BE521876 ] ROOTMODEM       C:\windows\system32\Drivers\RootMdm.sys

13:23:34.0145 0x0660  ROOTMODEM - ok

13:23:34.0239 0x0660  RoxLiveShare9 - ok

13:23:34.0286 0x0660  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll

13:23:34.0348 0x0660  RpcEptMapper - ok

13:23:34.0395 0x0660  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\windows\system32\locator.exe

13:23:34.0426 0x0660  RpcLocator - ok

13:23:34.0504 0x0660  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs           C:\windows\system32\rpcss.dll

13:23:34.0566 0x0660  RpcSs - ok

13:23:34.0598 0x0660  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys

13:23:34.0644 0x0660  rspndr - ok

13:23:34.0676 0x0660  [ 7DFD48E24479B68B258D8770121155A0, 3B5F7309403C46855DB888CF2058B07C9029690DBC7FB3224BAC7BE5547D2D57 ] RTL8167         C:\windows\system32\DRIVERS\Rt86win7.sys

13:23:34.0707 0x0660  RTL8167 - ok

13:23:34.0769 0x0660  [ 6E5FBB7CBAEC47038B945D5E9B144A64, B2AA2F39DAA841FCA470846CC07C580464E2F07C3EFAA64AF783144718F09C13 ] SABI            C:\windows\system32\Drivers\SABI.sys

13:23:34.0800 0x0660  SABI - ok

13:23:34.0832 0x0660  [ 88142648ED929E6D2178CC3B8C13C00F, 7E6B6B2CF61C56FBF8F2A96BDA2E9506467A9A883BFD3BEA78A4F500851E76DB ] SamSs           C:\windows\system32\lsass.exe

13:23:34.0863 0x0660  SamSs - ok

13:23:34.0925 0x0660  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\windows\system32\drivers\sbp2port.sys

13:23:34.0956 0x0660  sbp2port - ok

13:23:35.0003 0x0660  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\windows\System32\SCardSvr.dll

13:23:35.0066 0x0660  SCardSvr - ok

13:23:35.0128 0x0660  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys

13:23:35.0175 0x0660  scfilter - ok

13:23:35.0268 0x0660  [ 9060B8D5BCD5F2B019249F85E3D811F3, 7FB32AB7FE118462988321B9230074DAA960B587417EB463187539C3215445AE ] Schedule        C:\windows\system32\schedsvc.dll

13:23:35.0346 0x0660  Schedule - ok

13:23:35.0393 0x0660  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\windows\System32\certprop.dll

13:23:35.0456 0x0660  SCPolicySvc - ok

13:23:35.0518 0x0660  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\windows\System32\SDRSVC.dll

13:23:35.0565 0x0660  SDRSVC - ok

13:23:35.0596 0x0660  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\windows\system32\drivers\secdrv.sys

13:23:35.0643 0x0660  secdrv - ok

13:23:35.0690 0x0660  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\windows\system32\seclogon.dll

13:23:35.0752 0x0660  seclogon - ok

13:23:35.0814 0x0660  [ E5B56569A9F79B70314FEDE6C953641E, 41B088CD3AE5A342D44F2FDCB63975E15D79155F56DFC75631663D9C31D98634 ] seehcri         C:\windows\system32\DRIVERS\seehcri.sys

13:23:35.0830 0x0660  seehcri - detected UnsignedFile.Multi.Generic ( 1 )

13:23:35.0830 0x0660  seehcri ( UnsignedFile.Multi.Generic ) - warning

13:23:35.0861 0x0660  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\windows\System32\sens.dll

13:23:35.0924 0x0660  SENS - ok

13:23:35.0970 0x0660  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\windows\system32\sensrsvc.dll

13:23:36.0017 0x0660  SensrSvc - ok

13:23:36.0033 0x0660  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\windows\system32\DRIVERS\serenum.sys

13:23:36.0064 0x0660  Serenum - ok

13:23:36.0095 0x0660  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\windows\system32\DRIVERS\serial.sys

13:23:36.0126 0x0660  Serial - ok

13:23:36.0173 0x0660  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\windows\system32\DRIVERS\sermouse.sys

13:23:36.0189 0x0660  sermouse - ok

13:23:36.0314 0x0660  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\windows\system32\sessenv.dll

13:23:36.0376 0x0660  SessionEnv - ok

13:23:36.0423 0x0660  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\windows\system32\drivers\sffdisk.sys

13:23:36.0454 0x0660  sffdisk - ok

13:23:36.0501 0x0660  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys

13:23:36.0516 0x0660  sffp_mmc - ok

13:23:36.0563 0x0660  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\windows\system32\drivers\sffp_sd.sys

13:23:36.0579 0x0660  sffp_sd - ok

13:23:36.0641 0x0660  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\windows\system32\DRIVERS\sfloppy.sys

13:23:36.0657 0x0660  sfloppy - ok

13:23:36.0750 0x0660  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\windows\System32\ipnathlp.dll

13:23:36.0813 0x0660  SharedAccess - ok

13:23:36.0891 0x0660  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\windows\System32\shsvcs.dll

13:23:36.0953 0x0660  ShellHWDetection - ok

13:23:37.0000 0x0660  [ 1644C3814E0DAE66CD68E39FFB97D869, C68CCCFDC4A1B984434BA512CF5CC52D27E2D56B15519CEA3B0383E1C7C482B9 ] SipIMNDI        C:\windows\system32\DRIVERS\SipIMNDI.sys

13:23:37.0031 0x0660  SipIMNDI - ok

13:23:37.0062 0x0660  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\windows\system32\drivers\sisagp.sys

13:23:37.0078 0x0660  sisagp - ok

13:23:37.0109 0x0660  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\windows\system32\DRIVERS\SiSRaid2.sys

13:23:37.0140 0x0660  SiSRaid2 - ok

13:23:37.0172 0x0660  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\windows\system32\DRIVERS\sisraid4.sys

13:23:37.0203 0x0660  SiSRaid4 - ok

13:23:37.0265 0x0660  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\windows\system32\DRIVERS\smb.sys

13:23:37.0328 0x0660  Smb - ok

13:23:37.0406 0x0660  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\windows\System32\snmptrap.exe

13:23:37.0437 0x0660  SNMPTRAP - ok

13:23:37.0499 0x0660  [ 977AAA4398D7D6FA65D973F5B3F54E40, 9E7DD68E62A0BC6A8F512582E7B7BA00CC90CEA65B1F46EA6922C38C2D340021 ] SonicStage Back-End Service C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe

13:23:37.0530 0x0660  SonicStage Back-End Service - ok

13:23:37.0562 0x0660  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\windows\system32\drivers\spldr.sys

13:23:37.0593 0x0660  spldr - ok

13:23:37.0671 0x0660  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\windows\System32\spoolsv.exe

13:23:37.0733 0x0660  Spooler - ok

13:23:37.0952 0x0660  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\windows\system32\sppsvc.exe

13:23:38.0154 0x0660  sppsvc - ok

13:23:38.0232 0x0660  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\windows\system32\sppuinotify.dll

13:23:38.0295 0x0660  sppuinotify - ok

13:23:38.0404 0x0660  [ CDDDEC541BC3C96F91ECB48759673505, B030FFA02832317AC5626BF1BF8A4A95A5992C9A6E81BC1C002D5F4D667C27FB ] sptd            C:\windows\system32\Drivers\sptd.sys

13:23:38.0404 0x0660  Suspicious file ( NoAccess ): C:\windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505, sha256: B030FFA02832317AC5626BF1BF8A4A95A5992C9A6E81BC1C002D5F4D667C27FB

13:23:38.0435 0x0660  sptd - detected LockedFile.Multi.Generic ( 1 )

13:23:38.0435 0x0660  sptd ( LockedFile.Multi.Generic ) - warning

13:23:38.0435 0x0660  Force sending object to P2P due to detect: sptd

13:23:38.0451 0x0660  Object send P2P result: false

13:23:38.0513 0x0660  [ E3E6C96B0EF4492C3C8FD0DEEF4E35A1, BDCCF36D760B8B92BD8DF54C6F2992D66B76EBA1999623F60F0D68CD91D3CEE1 ] SPTISRV         C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

13:23:38.0513 0x0660  SPTISRV - detected UnsignedFile.Multi.Generic ( 1 )

13:23:38.0513 0x0660  SPTISRV ( UnsignedFile.Multi.Generic ) - warning

13:23:38.0591 0x0660  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv             C:\windows\system32\DRIVERS\srv.sys

13:23:38.0654 0x0660  srv - ok

13:23:38.0700 0x0660  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\windows\system32\DRIVERS\srv2.sys

13:23:38.0732 0x0660  srv2 - ok

13:23:38.0778 0x0660  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys

13:23:38.0810 0x0660  srvnet - ok

13:23:38.0872 0x0660  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\windows\System32\ssdpsrv.dll

13:23:38.0934 0x0660  SSDPSRV - ok

13:23:38.0981 0x0660  [ DF5C19F053EFF7F8BA25D73AEA899656, 95C894638064DA665AA2858E67792716A798B1CB1271D4A5FBAF59AD0355C541 ] ssm_bus         C:\windows\system32\DRIVERS\ssm_bus.sys

13:23:39.0012 0x0660  ssm_bus - ok

13:23:39.0059 0x0660  [ 5347169FA449EABC4D0728AE39FAB926, E18D1D12A5D78716CDE449DD37E2BA1CF262BEC066211A3BA3C97B9EC636B88D ] ssm_mdfl        C:\windows\system32\DRIVERS\ssm_mdfl.sys

13:23:39.0090 0x0660  ssm_mdfl - ok

13:23:39.0137 0x0660  [ 7AAE23DD105EED15C4F45FC269FA42A9, 1ACF4AE796D95B157832C806FDEB03762C4541EF68893CF8381A24170F33F274 ] ssm_mdm         C:\windows\system32\DRIVERS\ssm_mdm.sys

13:23:39.0153 0x0660  ssm_mdm - ok

13:23:39.0215 0x0660  [ 756E371B3B86A3D3039926D32EAC0E8D, 7D3EE49848B90F0815599EC35897E23ECB69BF2686A8F1907E974B4F21419F5D ] SSScsiSV        C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

13:23:39.0231 0x0660  SSScsiSV - ok

13:23:39.0278 0x0660  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\windows\system32\sstpsvc.dll

13:23:39.0324 0x0660  SstpSvc - ok

13:23:39.0449 0x0660  [ EBAA82F7C9B97C0E450449178E007340, D470927CC216C4E3EA23236E6C6464187CD3A49C3A4A456F488FEC8E713EA31B ] Steam Client Service C:\Program Files\Common Files\Steam\SteamService.exe

13:23:39.0496 0x0660  Steam Client Service - ok

13:23:39.0558 0x0660  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\windows\system32\DRIVERS\stexstor.sys

13:23:39.0574 0x0660  stexstor - ok

13:23:39.0683 0x0660  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\windows\System32\wiaservc.dll

13:23:39.0730 0x0660  StiSvc - ok

13:23:39.0761 0x0660  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\windows\system32\drivers\swenum.sys

13:23:39.0792 0x0660  swenum - ok

13:23:39.0964 0x0660  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

13:23:40.0011 0x0660  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )

13:23:40.0011 0x0660  SwitchBoard ( UnsignedFile.Multi.Generic ) - warning

13:23:40.0089 0x0660  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\windows\System32\swprv.dll

13:23:40.0151 0x0660  swprv - ok

13:23:40.0214 0x0660  [ 069E5728E565BD401347CB94732C4733, 16D6F0DE070E0A00FEE2512A9F238DA8175C4C44D76FBC5DD49CAF2EBB779C1F ] SynTP           C:\windows\system32\DRIVERS\SynTP.sys

13:23:40.0245 0x0660  SynTP - ok

13:23:40.0370 0x0660  [ 4EE25AC85AFC3FD67D9F57ECDF566FF2, F1BFF1FB655F31B97FA9C6A49D433EFD33D8A35F6B28B4D83E45C27A05A86228 ] SysMain         C:\windows\system32\sysmain.dll

13:23:40.0463 0x0660  SysMain - ok

13:23:40.0526 0x0660  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\windows\System32\TabSvc.dll

13:23:40.0572 0x0660  TabletInputService - ok

13:23:40.0619 0x0660  taphss6 - ok

13:23:40.0682 0x0660  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\windows\System32\tapisrv.dll

13:23:40.0744 0x0660  TapiSrv - ok

13:23:40.0791 0x0660  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\windows\System32\tbssvc.dll

13:23:40.0853 0x0660  TBS - ok

13:23:40.0994 0x0660  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip           C:\windows\system32\drivers\tcpip.sys

13:23:41.0072 0x0660  Tcpip - ok

13:23:41.0150 0x0660  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys

13:23:41.0228 0x0660  TCPIP6 - ok

13:23:41.0321 0x0660  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys

13:23:41.0337 0x0660  tcpipreg - ok

13:23:41.0415 0x0660  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys

13:23:41.0446 0x0660  TDPIPE - ok

13:23:41.0493 0x0660  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\windows\system32\drivers\tdtcp.sys

13:23:41.0524 0x0660  TDTCP - ok

13:23:41.0586 0x0660  [ 7FE680A3DFA421C4A8E4879AE4C5AAB0, A4C64E155AB2843823CD3586756BA7681CFDEA50812095468221503BBAD30DCD ] tdx             C:\windows\system32\DRIVERS\tdx.sys

13:23:41.0618 0x0660  tdx - ok

13:23:41.0680 0x0660  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\windows\system32\drivers\termdd.sys

13:23:41.0711 0x0660  TermDD - ok

13:23:41.0805 0x0660  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\windows\System32\termsrv.dll

13:23:41.0867 0x0660  TermService - ok

13:23:41.0914 0x0660  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\windows\system32\themeservice.dll

13:23:41.0945 0x0660  Themes - ok

13:23:42.0008 0x0660  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\windows\system32\mmcss.dll

13:23:42.0054 0x0660  THREADORDER - ok

13:23:42.0101 0x0660  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\windows\System32\trkwks.dll

13:23:42.0164 0x0660  TrkWks - ok

13:23:42.0273 0x0660  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe

13:23:42.0320 0x0660  TrustedInstaller - ok

13:23:42.0398 0x0660  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys

13:23:42.0429 0x0660  tssecsrv - ok

13:23:42.0476 0x0660  [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys

13:23:42.0522 0x0660  TsUsbFlt - ok

13:23:42.0585 0x0660  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys

13:23:42.0632 0x0660  tunnel - ok

13:23:42.0678 0x0660  [ 0397852EF1E5463D57F22C689F6354F9, 620845F35754DE1772CBC750A1F787C6C5130FFB8CE24DE51ADD2F5921B33477 ] t_mouse.sys     C:\windows\system32\DRIVERS\t_mouse.sys

13:23:42.0725 0x0660  t_mouse.sys - ok

13:23:42.0788 0x0660  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\windows\system32\DRIVERS\uagp35.sys

13:23:42.0819 0x0660  uagp35 - ok

13:23:42.0866 0x0660  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\windows\system32\DRIVERS\udfs.sys

13:23:42.0928 0x0660  udfs - ok

13:23:43.0006 0x0660  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\windows\system32\UI0Detect.exe

13:23:43.0022 0x0660  UI0Detect - ok

13:23:43.0084 0x0660  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys

13:23:43.0100 0x0660  uliagpkx - ok

13:23:43.0162 0x0660  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\windows\system32\drivers\umbus.sys

13:23:43.0178 0x0660  umbus - ok

13:23:43.0209 0x0660  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\windows\system32\DRIVERS\umpass.sys

13:23:43.0240 0x0660  UmPass - ok

13:23:43.0287 0x0660  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\windows\System32\upnphost.dll

13:23:43.0349 0x0660  upnphost - ok

13:23:43.0396 0x0660  [ D4FB6ECC60A428564BA8768B0E23C0FC, 4170FB6D0D593B5C22F5B4F664F6253435208C8948AFB66C0D12E2B818BA6DD5 ] USBAAPL         C:\windows\system32\Drivers\usbaapl.sys

13:23:43.0412 0x0660  USBAAPL - detected UnsignedFile.Multi.Generic ( 1 )

13:23:43.0412 0x0660  USBAAPL ( UnsignedFile.Multi.Generic ) - warning

13:23:43.0490 0x0660  [ A1977C315BF5691DA99235AA4A6907AF, 34B52FBA83F0E1C6B001D0AD1808B00152F731D18AAECC3C53B9918AA89BACEC ] usbaudio        C:\windows\system32\drivers\usbaudio.sys

13:23:43.0521 0x0660  usbaudio - ok

13:23:43.0599 0x0660  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp         C:\windows\system32\DRIVERS\usbccgp.sys

13:23:43.0646 0x0660  usbccgp - ok

13:23:43.0677 0x0660  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\windows\system32\drivers\usbcir.sys

13:23:43.0708 0x0660  usbcir - ok

13:23:43.0724 0x0660  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci         C:\windows\system32\DRIVERS\usbehci.sys

13:23:43.0755 0x0660  usbehci - ok

13:23:43.0833 0x0660  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\windows\system32\drivers\usbhub.sys

13:23:43.0864 0x0660  usbhub - ok

13:23:43.0911 0x0660  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci         C:\windows\system32\drivers\usbohci.sys

13:23:43.0926 0x0660  usbohci - ok

13:23:43.0973 0x0660  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\windows\system32\DRIVERS\usbprint.sys

13:23:44.0004 0x0660  usbprint - ok

13:23:44.0067 0x0660  [ FC6B21DB4B5B398AB93DBE59CBF11036, A94094C208F376405C07822A6143001EF1B12AE93205CD8002E87F6EB45F6374 ] usbscan         C:\windows\system32\drivers\usbscan.sys

13:23:44.0114 0x0660  usbscan - ok

13:23:44.0192 0x0660  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR         C:\windows\system32\DRIVERS\USBSTOR.SYS

13:23:44.0223 0x0660  USBSTOR - ok

13:23:44.0254 0x0660  [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci         C:\windows\system32\DRIVERS\usbuhci.sys

13:23:44.0270 0x0660  usbuhci - ok

13:23:44.0363 0x0660  [ DE014425522610BEDCA3821BB8C0F1D5, D6FEA0DF07F89834AEEE8C02CC7FD41068D758B6CCECE2EEE5CF4B9DB646FA1E ] usbvideo        C:\windows\System32\Drivers\usbvideo.sys

13:23:44.0394 0x0660  usbvideo - ok

13:23:44.0441 0x0660  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\windows\System32\uxsms.dll

13:23:44.0488 0x0660  UxSms - ok

13:23:44.0519 0x0660  [ 88142648ED929E6D2178CC3B8C13C00F, 7E6B6B2CF61C56FBF8F2A96BDA2E9506467A9A883BFD3BEA78A4F500851E76DB ] VaultSvc        C:\windows\system32\lsass.exe

13:23:44.0550 0x0660  VaultSvc - ok

13:23:44.0613 0x0660  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys

13:23:44.0644 0x0660  vdrvroot - ok

13:23:44.0722 0x0660  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\windows\System32\vds.exe

13:23:44.0800 0x0660  vds - ok

13:23:44.0847 0x0660  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\windows\system32\DRIVERS\vgapnp.sys

13:23:44.0878 0x0660  vga - ok

13:23:44.0909 0x0660  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\windows\System32\drivers\vga.sys

13:23:44.0956 0x0660  VgaSave - ok

13:23:45.0003 0x0660  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\windows\system32\drivers\vhdmp.sys

13:23:45.0034 0x0660  vhdmp - ok

13:23:45.0081 0x0660  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\windows\system32\drivers\viaagp.sys

13:23:45.0096 0x0660  viaagp - ok

13:23:45.0143 0x0660  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\windows\system32\DRIVERS\viac7.sys

13:23:45.0159 0x0660  ViaC7 - ok

13:23:45.0221 0x0660  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\windows\system32\drivers\viaide.sys

13:23:45.0252 0x0660  viaide - ok

13:23:45.0299 0x0660  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\windows\system32\drivers\volmgr.sys

13:23:45.0315 0x0660  volmgr - ok

13:23:45.0377 0x0660  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\windows\system32\drivers\volmgrx.sys

13:23:45.0408 0x0660  volmgrx - ok

13:23:45.0455 0x0660  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\windows\system32\drivers\volsnap.sys

13:23:45.0486 0x0660  volsnap - ok

13:23:45.0533 0x0660  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\windows\system32\DRIVERS\vsmraid.sys

13:23:45.0564 0x0660  vsmraid - ok

13:23:45.0689 0x0660  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\windows\system32\vssvc.exe

13:23:45.0783 0x0660  VSS - ok

13:23:45.0830 0x0660  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\windows\system32\DRIVERS\vwifibus.sys

13:23:45.0861 0x0660  vwifibus - ok

13:23:45.0892 0x0660  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys

13:23:45.0923 0x0660  vwififlt - ok

13:23:45.0970 0x0660  [ A3F04CBEA6C2A10E6CB01F8B47611882, 32AFE18B07FECA30BC95831A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp         C:\windows\system32\DRIVERS\vwifimp.sys

13:23:46.0001 0x0660  vwifimp - ok

13:23:46.0079 0x0660  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\windows\system32\w32time.dll

13:23:46.0157 0x0660  W32Time - ok

13:23:46.0235 0x0660  [ 0DC36E066294B88F3EC1F9F97AD0F9D4, 87966571D6580BAB3F787500F92DCCAC85F34AD4D1A626AF1BE316B74DF41339 ] WacHidRouter    C:\windows\system32\DRIVERS\wachidrouter.sys

13:23:46.0251 0x0660  WacHidRouter - ok

13:23:46.0282 0x0660  wacommousefilter - ok

13:23:46.0313 0x0660  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\windows\system32\DRIVERS\wacompen.sys

13:23:46.0344 0x0660  WacomPen - ok

13:23:46.0407 0x0660  [ B54A60581FB7BFEEE9368951C34472E7, E5C59B5000C5B40E0685DB25E65F18DE0A2A98F852CB383C7946E3AE7ECC6201 ] wacomrouterfilter C:\windows\system32\DRIVERS\wacomrouterfilter.sys

13:23:46.0422 0x0660  wacomrouterfilter - ok

13:23:46.0454 0x0660  wacomvhid - ok

13:23:46.0485 0x0660  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys

13:23:46.0532 0x0660  WANARP - ok

13:23:46.0563 0x0660  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys

13:23:46.0610 0x0660  Wanarpv6 - ok

13:23:46.0750 0x0660  [ 353A04C273EC58475D8633E75CCD5604, FFAE53B6B53AEFC9E8A10BF27480E072D74430276BEB532FE1D473E9616D8CE0 ] WatAdminSvc     C:\windows\system32\Wat\WatAdminSvc.exe

13:23:46.0844 0x0660  WatAdminSvc - ok

13:23:46.0968 0x0660  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\windows\system32\wbengine.exe

13:23:47.0078 0x0660  wbengine - ok

13:23:47.0187 0x0660  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\windows\System32\wbiosrvc.dll

13:23:47.0234 0x0660  WbioSrvc - ok

13:23:47.0312 0x0660  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\windows\System32\wcncsvc.dll

13:23:47.0358 0x0660  wcncsvc - ok

13:23:47.0390 0x0660  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll

13:23:47.0436 0x0660  WcsPlugInService - ok

13:23:47.0483 0x0660  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\windows\system32\DRIVERS\wd.sys

13:23:47.0499 0x0660  Wd - ok

13:23:47.0608 0x0660  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys

13:23:47.0670 0x0660  Wdf01000 - ok

13:23:47.0733 0x0660  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\windows\system32\wdi.dll

13:23:47.0764 0x0660  WdiServiceHost - ok

13:23:47.0795 0x0660  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost   C:\windows\system32\wdi.dll

13:23:47.0826 0x0660  WdiSystemHost - ok

13:23:47.0889 0x0660  [ 55C70654420DBF429604FD567E6F3CD3, 22191B049BCA76EF13AEDF8078E452E6B35E998A75AD63F14C542B541EA9F67D ] WebClient       C:\windows\System32\webclnt.dll

13:23:47.0951 0x0660  WebClient - ok

13:23:48.0014 0x0660  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\windows\system32\wecsvc.dll

13:23:48.0076 0x0660  Wecsvc - ok

13:23:48.0107 0x0660  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\windows\System32\wercplsupport.dll

13:23:48.0170 0x0660  wercplsupport - ok

13:23:48.0201 0x0660  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\windows\System32\WerSvc.dll

13:23:48.0263 0x0660  WerSvc - ok

13:23:48.0294 0x0660  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys

13:23:48.0341 0x0660  WfpLwf - ok

13:23:48.0404 0x0660  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\windows\system32\drivers\wimmount.sys

13:23:48.0435 0x0660  WIMMount - ok

13:23:48.0575 0x0660  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

13:23:48.0638 0x0660  WinDefend - ok

13:23:48.0731 0x0660  WinHttpAutoProxySvc - ok

13:23:48.0840 0x0660  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\windows\system32\wbem\WMIsvc.dll

13:23:48.0887 0x0660  Winmgmt - ok

13:23:49.0028 0x0660  [ 1DE9BD23AFA36150586C732D876D9B74, 32CF2C8EC18CFDA677AB72A182EB4B839DCC72BFCD6CA309BE2F434991CAE973 ] WinRM           C:\windows\system32\WsmSvc.dll

13:23:49.0121 0x0660  WinRM - ok

13:23:49.0246 0x0660  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\windows\system32\DRIVERS\WinUsb.sys

13:23:49.0277 0x0660  WinUsb - ok

13:23:49.0371 0x0660  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\windows\System32\wlansvc.dll

13:23:49.0449 0x0660  Wlansvc - ok

13:23:49.0620 0x0660  [ FB01D4AE207B9EFDBABFC55DC95C7E31, E0EFDBBE0BAC275230C8C1A053948C21BCF20B99B92E50939E95FFB9DC87F6BA ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

13:23:49.0730 0x0660  wlidsvc - ok

13:23:49.0792 0x0660  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\windows\system32\drivers\wmiacpi.sys

13:23:49.0823 0x0660  WmiAcpi - ok

13:23:49.0901 0x0660  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe

13:23:49.0932 0x0660  wmiApSrv - ok

13:23:50.0073 0x0660  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

13:23:50.0166 0x0660  WMPNetworkSvc - ok

13:23:50.0229 0x0660  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\windows\System32\wpcsvc.dll

13:23:50.0260 0x0660  WPCSvc - ok

13:23:50.0338 0x0660  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll

13:23:50.0385 0x0660  WPDBusEnum - ok

13:23:50.0432 0x0660  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\windows\system32\drivers\ws2ifsl.sys

13:23:50.0494 0x0660  ws2ifsl - ok

13:23:50.0556 0x0660  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\windows\System32\wscsvc.dll

13:23:50.0588 0x0660  wscsvc - ok

13:23:50.0619 0x0660  WSearch - ok

13:23:50.0806 0x0660  [ 398F2927880FC18C1A07C359C745DE1A, 759C2C31B5293CFF8DA8F95259E5F68AC67FE09A6BDC1A151D98881FC55B1A33 ] WTabletServiceCon C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

13:23:50.0853 0x0660  WTabletServiceCon - ok

13:23:51.0056 0x0660  [ 3EFC48CE17BE25D2F8C04C5A0FAE1F53, 6439396AE1C59966E3C0DF519956F9D25568155174004F9562F764CEF8A49802 ] wuauserv        C:\windows\system32\wuaueng.dll

13:23:51.0196 0x0660  wuauserv - ok

13:23:51.0274 0x0660  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\windows\system32\drivers\WudfPf.sys

13:23:51.0336 0x0660  WudfPf - ok

13:23:51.0399 0x0660  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys

13:23:51.0430 0x0660  WUDFRd - ok

13:23:51.0461 0x0660  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\windows\System32\WUDFSvc.dll

13:23:51.0492 0x0660  wudfsvc - ok

13:23:51.0555 0x0660  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\windows\System32\wwansvc.dll

13:23:51.0617 0x0660  WwanSvc - ok

13:23:51.0695 0x0660  [ 30B73EB97218A16CBC6DE535782A1B35, 5B034F39FA5B902BD6899717F7696871CDAFB8698B48BB0E95DAE51234715A28 ] yukonw7         C:\windows\system32\DRIVERS\yk62x86.sys

13:23:51.0758 0x0660  yukonw7 - ok

13:23:51.0929 0x0660  ================ Scan global ===============================

13:23:51.0992 0x0660  [ 5E7C5DE85AF978495C3A9A0B720B9811, 142CDEBED78E3BAEE8D2DBF6A97CE26313932024010548EC2E570CAE480AF7C3 ] C:\windows\system32\basesrv.dll

13:23:52.0054 0x0660  [ A83DD77AC941A8B1B2652035EA589149, 8F879178E154B3F9F367FB3D6F9A21B129F36796CD3B6A76A9E7CFDD0F63332C ] C:\windows\system32\winsrv.dll

13:23:52.0101 0x0660  [ A83DD77AC941A8B1B2652035EA589149, 8F879178E154B3F9F367FB3D6F9A21B129F36796CD3B6A76A9E7CFDD0F63332C ] C:\windows\system32\winsrv.dll

13:23:52.0132 0x0660  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\windows\system32\sxssrv.dll

13:23:52.0194 0x0660  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\windows\system32\services.exe

13:23:52.0210 0x0660  [ Global ] - ok

13:23:52.0210 0x0660  ================ Scan MBR ==================================

13:23:52.0226 0x0660  [ 2E5DEBB2116B3417023E0D6562D7ED07 ] \Device\Harddisk0\DR0

13:23:52.0725 0x0660  \Device\Harddisk0\DR0 - ok

13:23:52.0725 0x0660  [ 973E9BA32FDBB305C552ED3E1EBF0686 ] \Device\Harddisk1\DR3

13:23:52.0850 0x0660  \Device\Harddisk1\DR3 - ok

13:23:52.0850 0x0660  ================ Scan VBR ==================================

13:23:52.0865 0x0660  [ F92B9D6B59FD66260C04087457A4D6E1 ] \Device\Harddisk0\DR0\Partition1

13:23:52.0865 0x0660  \Device\Harddisk0\DR0\Partition1 - ok

13:23:52.0881 0x0660  [ FF3BC22053CEF46FBE2AE4D7B4FBA0BF ] \Device\Harddisk0\DR0\Partition2

13:23:52.0881 0x0660  \Device\Harddisk0\DR0\Partition2 - ok

13:23:52.0896 0x0660  [ 33710005F03B0F1BA5A9D55F769A7B70 ] \Device\Harddisk0\DR0\Partition3

13:23:52.0896 0x0660  \Device\Harddisk0\DR0\Partition3 - ok

13:23:52.0912 0x0660  [ 920342057DF3E902B1ABB008966A5D5B ] \Device\Harddisk1\DR3\Partition1

13:23:52.0912 0x0660  \Device\Harddisk1\DR3\Partition1 - ok

13:23:52.0912 0x0660  ================ Scan generic autorun ======================

13:23:55.0361 0x0660  [ D72ABA21ABB9314DA878FB9760E7A4C2, 90E3892B4070A6265CE8AB33115EEBED7D61F6FDB836B5EB1972BE7DD30E21F0 ] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

13:23:56.0126 0x0660  RtHDVCpl - ok

13:23:56.0453 0x0660  [ E4A94D17436B4E9F53CD64D08E53D964, E3B2D336A1E90C1C520B834FA986AE2CFBD2807664C35E8AB9059CC899E58CFC ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

13:23:56.0562 0x0660  SynTPEnh - ok

13:23:56.0765 0x0660  [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe

13:23:56.0828 0x0660  UpdateLBPShortCut - ok

13:23:57.0093 0x0660  [ 54FA8528EDA1B6B34615F4EA3FCB35E6, B078821475D6FDED19579A487484D0752DC6E1AA0D1ACA71353C743B00291C61 ] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

13:23:57.0140 0x0660  CLMLServer - ok

13:23:57.0202 0x0660  [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe

13:23:57.0233 0x0660  UpdateP2GoShortCut - ok

13:23:57.0311 0x0660  [ AAD52179D4A526AD4A705B87C6E4F72A, 0015F316DD2E73D5D2434DAC7CAB47050B21BF8CAE23482302A0E1982EF8A3BD ] C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe

13:23:57.0342 0x0660  UpdatePDRShortCut - ok

13:23:57.0420 0x0660  [ 28FD28A29C637C9AFEFE0A26E27C6DFE, A490ADCD7BC9863B6E8773CADFDE6CA58A0743CD64C39D14AF380B18ABDEC003 ] C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

13:23:57.0436 0x0660  RemoteControl8 - ok

13:23:57.0483 0x0660  [ F8270CFD51F9D6BF42140FA4071C83FE, B7AAF6B13C01CB6B94DEABBDD40249A6D298DD4BCBE2921D8E332F88ED3B754A ] C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe

13:23:57.0498 0x0660  PDVD8LanguageShortcut - ok

13:23:57.0592 0x0660  [ 9ACFD9D5E12D849B28C78FED6D620EB3, 203D1EECFB44BA7D3936AAA2280B1D88207BA7655AB735C17BF9F3AAF3D8A803 ] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe

13:23:57.0623 0x0660  UpdatePPShortCut - ok

13:23:57.0717 0x0660  [ 82A3031F7FAA61CB5E040B0D98A104AF, 5EB990BACE18112658208F517EE2E635DBD00A06380DD9DAB253556C980DEA99 ] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe

13:23:57.0732 0x0660  UpdatePSTShortCut - ok

13:23:57.0810 0x0660  [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe

13:23:57.0842 0x0660  UCam_Menu - ok

13:23:57.0904 0x0660  [ 5C1AB463BC29CC9095625D0A7E0A4C99, 803C5ADA2AE2A9947D63619AEF3DF7D232004808A0333B7F6BD035238FAF9B78 ] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

13:23:57.0935 0x0660  NeroFilterCheck - ok

13:23:58.0029 0x0660  [ C6352C29C56077749CEEDD08680D347D, DF520DA9E9F8D34004E497969FC4AB0D9F057EEE5D8A0BBB91C5EBC983011ABD ] C:\Program Files\Bamboo Dock\BambooCore.exe

13:23:58.0076 0x0660  BambooCore - ok

13:23:58.0154 0x0660  [ 3F5D3051112747AC7307620641FAC63B, 483B5D04560C8831A363915F08DB8B4857C6B863A8AFABE401FC429F068CECD8 ] C:\Program Files\Winamp\Winampa.exe

13:23:58.0185 0x0660  WinampAgent - detected UnsignedFile.Multi.Generic ( 1 )

13:23:58.0185 0x0660  WinampAgent ( UnsignedFile.Multi.Generic ) - warning

13:23:58.0263 0x0660  [ 8DDA2B606279753601F9415DA503CA63, 2C9AD8218E150B6D50817991377ED3230A1672EFBD7AE29D0CD9E55E2418C800 ] C:\Program Files\QuickTime\QTTask.exe

13:23:58.0294 0x0660  QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )

13:23:58.0294 0x0660  QuickTime Task ( UnsignedFile.Multi.Generic ) - warning

13:23:58.0356 0x0660  [ DB367E8C8F46C26A05BA982715CC0DB5, 63AE8DD8E41260123E8C98905BD3D444BED86AEA6353F690483E5CB116433AC2 ] C:\windows\system32\TiltWheelMouse.exe

13:23:58.0388 0x0660  MouseDriver - ok

13:23:58.0512 0x0660  [ 20DE1CDD37A5D3D4177B8D9FEF907D81, F6CE80984852595A677C92B8C555F9B0D398BAE36768E0D6FC7F8C7211D962D2 ] C:\Program Files\Microsoft Security Client\msseces.exe

13:23:58.0590 0x0660  MSC - ok

13:23:59.0058 0x0660  [ 43ECFBA026E6CFEF983FF6CD1D38D639, D13ACC5191F9FBB8234BEE91BC6FA5E4ECF88ED44CA6B8644C5D05AB34ECA358 ] C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

13:23:59.0199 0x0660  Adobe Creative Cloud - ok

13:23:59.0495 0x0660  [ F5A5DBADCD24BDF33BFDAA789E39C876, A0D931FA339CA1FB6198BF5DF327ECEB0881796FFF92BDE0F9FC2C233C46E83C ] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe

13:23:59.0558 0x0660  AdobeAAMUpdater-1.0 - ok

13:23:59.0620 0x0660  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

13:23:59.0667 0x0660  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )

13:23:59.0667 0x0660  SwitchBoard ( UnsignedFile.Multi.Generic ) - warning

13:23:59.0667 0x0660  Force sending object to P2P due to detect: C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

13:23:59.0682 0x0660  Object send P2P result: false

13:23:59.0807 0x0660  [ 8FE651ACBA3344E645CFEB6286FFF6B8, ECE4DFFEB7EB0B19B6790FD0F619A5C4B23CA0BA9CC3F25924925F8EA07264B6 ] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe

13:23:59.0870 0x0660  AdobeCS6ServiceManager - ok

13:24:00.0275 0x0660  [ FEDF59A44767480267C5615C46F0FBA5, 91FE9E7E1FC471E99BD769F4F6FC96934B91A3E5406A921CD75292021B72C3CF ] C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe

13:24:00.0462 0x0660  NvBackend - ok

13:24:00.0494 0x0660  [ 51138BEEA3E2C21EC44D0932C71762A8, 5AD3C37E6F2B9DB3EE8B5AEEDC474645DE90C66E3D95F8620C48102F1EBA4124 ] C:\windows\system32\rundll32.exe

13:24:00.0525 0x0660  ShadowPlay - ok

13:24:00.0618 0x0660  [ F916BA0DA28A4B4F7B1ADE76EB42F088, FB3C91D44709D039E959B275F6ECE26AF9307D272FE3E25CC41EAC259AA3B596 ] C:\Program Files\Common Files\Java\Java Update\jusched.exe

13:24:00.0665 0x0660  SunJavaUpdateSched - ok

13:24:00.0837 0x0660  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

13:24:00.0930 0x0660  Sidebar - ok

13:24:01.0008 0x0660  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

13:24:01.0055 0x0660  mctadmin - ok

13:24:01.0118 0x0660  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

13:24:01.0196 0x0660  Sidebar - ok

13:24:01.0211 0x0660  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

13:24:01.0242 0x0660  mctadmin - ok

13:24:01.0289 0x0660  [ F34E7705751BB413283434697BF8E55D, BDF8B29A56C51439BEB9B4C3576341BBE3EE80582063AD602AB77D19A0630C35 ] C:\Program Files\DAEMON Tools Lite\DTLite.exe

13:24:01.0336 0x0660  DAEMON Tools Lite - ok

13:24:01.0695 0x0660  [ A733475CBD8E68419DCA837BF8585BB7, D434273D35E63413617768B3DBA9F431630B3FDD5E97AE7874492625D1BDDCF6 ] C:\Program Files\Origin\Origin.exe

13:24:01.0929 0x0660  EADM - ok

13:24:02.0085 0x0660  [ 43D083268A0919F3527A2837390BAF63, 58B62697B01B8C9396271A64424178691FA85D4625DAF2AC8DE7F06A64F64C2A ] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

13:24:02.0116 0x0660  ISUSPM - ok

13:24:02.0147 0x0660  msnmsgr - ok

13:24:02.0163 0x0660  Skype - ok

13:24:02.0163 0x0660  ICQ - ok

13:24:02.0194 0x0660  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.8.204.0 ), 0x61000 ( enabled : updated )

13:24:02.0194 0x0660  Win FW state via NFP2: enabled ( trusted )

13:24:02.0194 0x0660  ============================================================

13:24:02.0194 0x0660  Scan finished

13:24:02.0194 0x0660  ============================================================

13:24:02.0210 0x142c  Detected object count: 13

13:24:02.0210 0x142c  Actual detected object count: 13

13:25:16.0481 0x142c  athr ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0481 0x142c  athr ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0481 0x142c  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0481 0x142c  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0481 0x142c  MSCSPTISRV ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0481 0x142c  MSCSPTISRV ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0481 0x142c  Netaapl ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0481 0x142c  Netaapl ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0481 0x142c  PACSPTISVR ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0481 0x142c  PACSPTISVR ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0497 0x142c  seehcri ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0497 0x142c  seehcri ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0497 0x142c  sptd ( LockedFile.Multi.Generic ) - skipped by user

13:25:16.0497 0x142c  sptd ( LockedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0497 0x142c  SPTISRV ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0497 0x142c  SPTISRV ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0497 0x142c  SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0497 0x142c  SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0497 0x142c  USBAAPL ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0497 0x142c  USBAAPL ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0497 0x142c  WinampAgent ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0497 0x142c  WinampAgent ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0497 0x142c  QuickTime Task ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0513 0x142c  QuickTime Task ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:16.0513 0x142c  SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user

13:25:16.0513 0x142c  SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:25:37.0573 0x00fc  Deinitialize success

M-K-D-B

23.11.2015 14:55

Servus,

deine Version von AdwCleaner ist veraltet und bringt uns hier nicht weiter.

Lade dir AdwCleaner, MBAM und JRT auf einen Stick und führe diese wie beschrieben (Schritte 1-3) aus. Zum Schluss dann nochmal FRST ausführen (Schritt 4).

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die Logdatei von JRT,
die beiden neuen Logdateien von FRST.

Denise94

23.11.2015 15:28

Beim 2. Schritt habe ich beim Versuch Malwarebytes Anti-Malware zu installieren folgende Fehlermeldung:

Runtime Error (at 97:137):
Could not call proc.

M-K-D-B

23.11.2015 15:29

Servus,

dann weiter mit JRT und FRST bitte. :)

Denise94

23.11.2015 15:42

Logdatei vom AdwCleaner

Code:

# AdwCleaner v5.022 - Bericht erstellt am 23/11/2015 um 15:13:39

# Aktualisiert am 22/11/2015 von Xplode

# Datenbank : 2015-11-22.2 [Lokal]

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x86)

# Benutzername : Denise - DENISE-PC

# Gestartet von : C:\Users\Denise\Desktop\AdwCleaner_5.022.exe

# Option : Löschen

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 

[-] Ordner Gelöscht : C:\Users\Denise\AppData\Local\ext_meduke

[-] Ordner Gelöscht : C:\Users\Denise\AppData\Roaming\Genius

[#] Ordner Gelöscht : C:\windows\system32\Tasks\Genius
 

***** [ Dateien ] *****
 

[-] Datei Gelöscht : C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\fg@favgenius.com.xpi
 

***** [ DLLs ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Aufgabenplanung ] *****
 

[-] Aufgabenplanung Gelöscht : Genius

[-] Aufgabenplanung Gelöscht : Genius_Interval
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D879A501-50A7-BEFC-A4C5-32DC6E0CB208}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11B16A3D-F03E-4565-A532-66AB219C9B03}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3BD9808B-ED48-4D9F-9B5D-BFE2A98BB37D}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3E1B6DED-FBEA-43F6-8A19-9B78A04868CC}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4B0E9456-D1E3-4357-AD4C-E475AA1EE7CD}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8F91CD5E-B055-46B9-B848-8E19126528D5}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A6F5BB87-0757-4F32-96E4-514CFE725BD9}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C9391096-A296-4A65-AD69-F04EFEBDCF6F}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{41AA42BF-6A1D-4CF3-A000-114075D09856}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{47C91A57-A863-43DF-B9D8-FB13C2E98479}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DEE0062A-5880-44A4-B43A-864CC76EF42C}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11B16A3D-F03E-4565-A532-66AB219C9B03}

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11B16A3D-F03E-4565-A532-66AB219C9B03}

[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11B16A3D-F03E-4565-A532-66AB219C9B03}
 

***** [ Internetbrowser ] *****
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Proxy Einstellungen zurückgesetzt

:: Winsock Einstellungen zurückgesetzt

:: Chrome Richtlinien gelöscht
 

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [2710 Bytes] ##########

Logdatei vom JRT

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.0 (11.12.2015)

Operating System: Windows 7 Home Premium x86 

Ran by Denise (Administrator) on 23.11.2015 at 15:31:58,45

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 858 
 

Successfully deleted: C:\Users\Denise\AppData\Local\{000F0B6D-E736-4ED3-BCB0-045A445A9C2D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{00D721CE-1022-4038-8849-1C3B7921A3AE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{00DC3E45-81AC-46A1-8A73-C03FF9056E51} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{01051A8F-93DA-4AEC-A992-9161F635BAAA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0149AE32-449C-4BA6-A9CD-416169804BC2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{02CE0315-7F2C-4364-A767-F6FA198A1CF1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{02F7636A-68C2-46E6-9B09-F6AE50E65C46} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{03B28215-7E36-499F-A93A-D8239AD8A98E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{048058AC-4172-4999-B548-725964FB83EA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{051FF1A8-AE8D-482F-9499-6C163F34457E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{052BD34D-C18D-4D78-8693-81DC6E933AE8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0572D781-B27A-4E4C-AF36-9505338085D6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{05CA3C41-28D7-4A79-A5EF-B4066E9AB3F0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{06023F73-51B0-41FC-A080-0351F4E204DA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{060823A8-6215-4F66-A77E-E60A15BFCC55} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0616EAF6-7B05-47C4-A243-B469E856D836} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{077B23F1-3DB4-4E50-B4FF-0D87AAD68ACB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{078146B1-07F1-4ACD-8BAD-2A2FA876141C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{07EA9EFC-CD95-4599-B835-9BEC78BD34DF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{080AFC22-AC5C-4E8C-A9D7-AC1DB23A1C79} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{081EDBBF-4FEF-4B3B-A4FC-6FB4E864940B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0821F4C6-CABD-4A1C-933C-A44A673B5349} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{087CFA42-9F89-4821-9BD9-2A325920BF91} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{08B036DD-7A98-47BE-84E7-9442F8636B46} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{08C60092-E1A6-49AD-AE48-53EBED558127} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{08C819CC-0730-4DF0-A2E4-119211D52DC5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{08D4DBB3-BF75-4FCD-8242-C6F1C26D9664} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{09005D2F-20C6-40F4-A45C-C906C02513A7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{095B8B3B-DC24-4C97-B81F-F6E95A81753C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{097A9977-AFD1-48AD-8BD1-C0179AABF468} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{098C425A-5AD8-4238-9522-F30EFBA09FDE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{09C1B629-DB21-4B0B-BFA6-2BEE6703E893} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0A0275F0-5894-4376-A424-F63DCFF8F4DA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0A125B3D-2D39-4CAE-AC73-B728912755A9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0A12DFA2-C517-49EE-A525-879F90CC1625} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0A95534A-4920-445C-A159-9616BC74A7A7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0AE5DFAE-E9F3-42E1-A94F-859CF69CDAF9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0AFC383C-5D7F-4583-9F11-57B4319CCD82} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0B2001C9-EAB9-4D50-A725-A45787CEC6A1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0B5C81B0-9722-4681-8A50-020D99A763C9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0B6CA5ED-109C-4456-B9CF-D6A8D42BEDE8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0CD625E9-6D27-41D3-AC93-6FD10AE1EE95} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0D8E1608-D20F-45FE-A4B5-9DB6C685EB21} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0DDB0EB3-3823-4587-BB0C-8D3CCCEF17FC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0DE49295-B04D-403D-97E1-B342FA9252B0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0E031AB9-9193-4398-AB94-F1D8386FDB32} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0E5A18CF-6728-4E40-9011-9BF0B3E8C62D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0E609463-D73F-4214-925C-EF8231B0369A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0E956E6D-E18B-49A4-9B24-78474CCB7E7B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0EC1CDCC-5B74-4EFC-BC1A-5DDA033BCE1E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0EE4CB7E-5885-4B87-95FF-47994FE05E4B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0F9A1262-71AA-48CE-9608-D85E64AD88B0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0FAD90D0-4CBA-4BD0-A9E0-C658079DD479} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{0FB433D2-5181-450D-BAE0-C546C39F76CE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1072F809-5C00-4EF6-B510-839DBE4E778F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{10778B5D-DB41-4F69-BB70-58CEFA9DA504} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{107A2C21-BE42-48A1-9831-3AAA0FF5CF68} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1088CB56-80FC-4E28-A2ED-DA11D6C47D1A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{10BDD316-9E04-4AFB-B3E6-3CB54A8C2256} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{11B7A657-EA45-439C-A474-22B3A8D6AE98} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{11BC2549-99E9-4FB9-980D-186C929D9AA4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{12094640-F723-46EE-8EC3-3BFBCB73D8C2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{124D2E62-9C22-4BDD-A2B5-FBFE0E8FD06B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{126F7CD1-0D6C-48CF-82E7-3359956AECA6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{12AF721B-7C76-43AB-BAEB-DBC0AE2B29CF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{12D5529D-6E26-4867-BC18-5311EF771E2E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{12E81296-9899-464B-B7F6-06DF73AFDA5E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1312A44A-E056-42FA-A339-B754ABDF12D8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{132F74CE-F87F-45BA-A900-69B6BBB04A78} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{138EFDDF-2B53-4F4C-A4CA-5282F49BC2F0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{13AB44B7-0FE5-4A96-846B-2A401F12D2EF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{13C79604-1A29-487C-AA55-61FB314225D7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{13D82FD7-35E9-4C3A-A785-C9A4BDBB095B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{141E70DF-3956-4D71-9D3F-15E04069E7B0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1481722D-6FEC-43B9-84D6-0FEEB1D5407A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{14FE511E-A8C1-4CED-A5E6-C8F11F9C7E6B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{15033E1B-AD31-49E7-9436-331428B992C7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1576E600-DA41-4ADF-A0D9-A129574891A4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{15B6D820-69E1-478E-9525-A21F2E3DB044} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1662BC45-7926-46A3-906F-2F377C75E090} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{168DAEE1-11A8-4361-BD3E-174F020F13BB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{16CE4D8F-7E64-4565-B94C-E76E5E8808F6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{174FE719-D142-4D3B-9078-114E7159D75F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{175B98C0-3994-4EED-AB6C-B65B9F75B54C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{17EF73EE-695E-4613-B03B-987A49CE73F6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{180E38C7-B7DA-41C6-91D2-8255479BA2D1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{18D6C47C-C0AC-4C9F-8CDE-D205CE720207} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{18F50F86-8687-4D83-9D63-3455D5712D77} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{193D5AD0-EC5D-43B7-9AEB-58A494DCBE6B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1957C48C-510D-42DC-A8CC-6CB76419D65E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{19615844-1CED-43E4-8142-871D05C2C1ED} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1977B267-C368-48A3-A02B-C68950129CA4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{19EF396B-0503-4E06-BDD8-421AF03755BE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1A0102DB-46E3-4335-96DF-D2C979ABE2F6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1A13D5AF-BB54-448F-A5A3-9913078250E7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1A15F136-6023-4432-A580-0295D37AB169} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1A2CC6BC-D2C2-48F8-8027-4F6D9E0665F2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1A3AF3EC-8CE2-4953-8793-789934A5F615} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1A50BE95-7D25-4FBE-A653-2AB4D15E8D30} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1A5B10E2-41AE-4C3D-B2CC-9B3731CF75E4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1ABB3A24-CBB9-4AEC-82F8-C13490E30050} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1B3D301B-121D-44B5-B452-097252C1867B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1B8D486B-ADE7-4341-8D70-DBF0A8FAB112} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1BB31BCD-E9E8-4B09-86FE-6D99AC1B9EFB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1BFAA701-9A78-4885-8AD5-4D4B6E994A9B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1C0ACB04-B856-40F6-B93C-40B73DC63F33} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1C932297-E9DA-4722-A1A7-1992935C3D36} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1CB5268F-1567-4AA8-A272-B98E06F75A47} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1D4A1FFB-555F-4642-B9DE-9D0C4DE07E79} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1D4FFB2B-3C5D-489F-80F0-02A7AD9C056F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1DD655F9-19F3-4E39-A151-DD2BE9215730} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1DED3F7E-2CD6-45D7-99D7-00FAB1743377} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1E2768F4-C7E4-41F9-8460-327235C7C7BC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1F0D07DF-9724-47ED-8823-7836BF725B7C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1F8AC6CC-792F-462B-871B-32E1ACB3939F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{1FE9EC30-2579-4E98-A4CF-0E524E96A5B4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{20297B34-5483-4EFB-92CA-1171EDFA8E65} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{20B06B49-7E9F-44F9-9258-83ED26B31604} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2107B507-703F-4F41-B2AD-C8D0636B3E72} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2154A931-6F59-4254-96E1-0065904058B9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{216FF243-3EDF-4366-8D97-FFD02AA23BBD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{21C3800E-50DD-4E9B-93D1-273CE919C656} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{21E0A48C-4927-4A94-AEE3-FB2323CAEC7F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{222DFF71-D776-4FA7-86B2-AE468067763E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{227CDF8B-0E4E-407E-A9CA-91CEFD423E44} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{22C3452B-6BA9-4554-8D6B-928523F0B86C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{23161D2A-9D7E-432D-9962-F2A79857C392} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{23635DE3-9395-4660-8219-9E8CEE81BBEF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2377C924-B001-4B06-B745-2EA42B23DDDF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{23FDFCD6-3460-4519-ADC3-5A6BD4F20D86} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{245C0774-33AA-4217-8221-361CF4CC396D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{24DD7974-8AC7-45E5-AC52-A8639F8F1B55} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{252E018C-FDC2-4A18-ABC6-42BB0E184919} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{25D6460F-64A8-45F2-8AF7-132D2257A07C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{25DE6F23-50E6-4967-8AF9-866B03075E4E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{26B59403-A112-4CB2-A504-016FF2BAA72F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2710D2B8-4051-4A70-8CFC-69F2C0D248F8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{27587C60-308B-4057-98F1-749A42403CDD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{278AC4A6-2189-4262-B11D-057FB46FCB67} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{282EAF15-358A-4ACD-8A44-AAA2B3B292F5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{29084AEF-E4BE-437D-8AB0-14DC2C4EB1DA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{291A9507-BDA1-415D-B06F-A0074F84C2AE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{297B09C4-B627-4C3A-AF6C-F38B8F54F220} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{29F4D7D3-E231-425A-92BF-71A66D03E6F9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2A61E977-F228-44DF-B830-5556CE560DBD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2A8764B2-3C96-4B85-BA71-1EA06191EF5E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2AE775A0-9459-4D31-848D-88F4B4895D00} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2AEE5F1B-28C4-4DC5-B591-B5648AD4B2C6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2AF0B036-2858-4983-AED9-A3BAAC4BC36A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2B22AB4D-BA66-4E91-B354-0FCF2F3B3B66} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2B77E9B2-AF13-494C-B9AD-9E7919E9DA4D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2B947DF9-0B8B-43F0-B48B-57493AC915AE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2C1A4A6B-EB38-439E-80AD-D4B769216992} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2C2C901B-3EF9-4A78-91CB-04084641F695} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2C354339-8D12-467E-ACE9-A52FD0EC8460} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2C487E39-AF10-4EFF-A5C4-030928EAC2DC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2C582FCC-3E92-4C83-9EA6-4E43CCB38A13} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2D164392-F6D9-4491-807B-B8393EA78AF5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2D6F5A8C-16EE-4AEF-830C-786A157E3519} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2D9A638B-73B9-4E3F-804B-FEB5B1D1660F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2E42D2DF-EC31-4096-BCA5-6ECCABA5149A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2E9F2311-C953-4C39-A37F-F8F9BD824678} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{2F6BE94A-BAFC-4FC8-90C2-3E8D79A49B53} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{302DF3AA-4667-4673-A4E3-8E536C4F7D5B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{30FE6491-D683-46B9-987C-5A9F6C724C2D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{316F80F8-3672-4A74-8CC2-123EBAE570D4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3194AD7E-D841-48BF-8953-FF7741EBA1AB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3194C6B7-1487-4DCC-80C3-21213A7AD3BA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{31DE959F-9E1C-4C57-A41F-EB8C2819AC5B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{321E39EA-C25B-484A-99E4-C049238BA9B3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3222C64F-E99F-46A8-A52C-0251453DED03} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{32601B18-241E-4707-BABB-84FB4C6BD9B4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{327B8E82-0862-4928-A927-6865AEDB15F9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{33089EDB-4D77-4FE5-8D93-5B7CF0E816D2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{33A34833-E39A-4DDF-988D-E885E39EA3D7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3432204F-AF40-4FB1-8B90-AB1B42BE42E5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{343DC94C-F3D0-4C0F-9608-705F1F616BC7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{34C8B8AB-CF9E-4B10-9E10-73FFF205D097} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{356A7F21-8594-4F62-8A1B-B43F23A9CC30} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{359DABAE-5689-4C96-81CA-BE7F8195C8F2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{35B53CB2-9331-4FC9-BA8F-298D8B05FE13} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{365065C2-F1AF-42AB-AFDE-3ABD61CCC7C1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{373AC23F-4B98-43E1-87E4-245279A49925} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{37D2B108-408B-40F8-89D6-058F6A6FD7AC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{38D9A211-91F2-4877-A65F-3FD8E2ED854B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{38DC649F-80C8-45AD-B545-E08B63ECD200} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{392EEFFD-F786-4DBA-AF52-D76133CE4BEB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{39316C36-E29D-4132-8567-7960A8EB3286} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3954BE01-6B8D-41B5-8FA1-17D5AC00030F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{396F54B1-8DD6-4009-B8E0-C6AAD4581418} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3989FAE9-D97B-4AA2-B66C-7ACA5FCFD32E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{39EA6C0A-00AF-4BBE-9308-DC292127F519} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3A721853-D219-4873-AA9D-267E6F923E98} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3B1FA739-E981-4D81-A8BC-953A49A61F73} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3B80F56F-7CA3-4EE7-8156-18E8A732EA89} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3B9DDB43-9AAF-4408-BEA1-06A2A1C6A2DE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3BB4454C-F496-4B79-9A3E-2DE18721B717} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3CB1A20F-0532-40B9-8272-7B3D41E435F8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3CD36875-3DB5-4B45-B3A6-3DEF996FFB41} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3CEC3A5F-C5CD-470C-B434-5ADCC558968C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3CF19C80-C44D-44BF-90CE-C597BD424B4E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3D047995-B56D-4218-9770-35DEDB905355} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3D2E6FE2-2D26-4557-BF90-23E37637AF01} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3D5214FD-CE21-4F97-B470-E772F0AC10A1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3DF6B6A7-241C-486A-B2A2-765203249292} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3F98FCE3-D2E2-4A55-92AB-C0BA2A45FFC7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{3FA3701D-D051-4994-9978-A4D985ABB8B2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{402158A1-7E55-4E1B-8E34-0C0FE0EF0A47} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{407B2D21-9480-439A-9F9D-0147C06D4E3D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4094ED65-024F-4206-8E90-7D7F5EB7776E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{40C882EE-C4B6-435B-95AE-5A4828796768} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{40D9F3BA-F3C2-43B9-8312-38C0F437CC1D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{40F930D1-A359-4465-8C84-3EE38A1BCE4F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4228E0C0-C990-41DF-B3E9-7EE1728F43CF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{42A7497C-03BD-49F6-80FD-B20D08F2E115} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{42E60B4F-2BC8-4853-8089-00EA329D71F6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4338B722-0462-4417-837D-1993AFA3D05D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{43529BE9-4477-46FC-A3DF-C9A868184799} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{435B89C0-2E4B-4EE1-8D17-6721FFA9B27F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4432489E-6264-42B8-B096-A1AF351CFA27} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{451A2E9B-0152-4F35-98F2-DD45751176CC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{451D14C2-7C4A-42C0-BBCE-DB39EAB19C9F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{452668B3-E514-4BC6-8BB0-1A0E98603B84} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{454DF7EF-E1D6-4A8E-B3A2-48ECB86667B2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{45532E69-E724-404B-A00A-9E0CB3E862BC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{456B486A-0C33-4F45-B1D2-C3E571284380} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{457BF613-6A1F-43A6-809D-E6663F5FD736} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{45B66CF7-0C3C-4D1E-91C9-393A25696BAA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{461E0E27-BB85-449B-BE62-EC4050B38263} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4683D9D9-AF1F-4209-B24E-68B39C2B8551} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4696F07B-1B6B-4818-802E-2E66D5B3F25F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{46BACE83-A16C-4D9A-9398-39090DB09C2F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{47A5E3FE-C1A5-4E30-9069-A8B736646DA0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4827919B-D532-46B9-A6EE-F2A9841C72B3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4828AD86-65B7-4F5A-8B7B-69B99BC6ABA9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4881AD58-F773-4C1E-A55F-7F617A7950B4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{490AB755-D496-4448-A2A3-80653822C149} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{49479590-C3C8-4354-9A64-1FD225AD60E2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{49757AD2-5873-41C2-9D7C-9D66B7185EEF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{498F66A4-5249-4E62-B4C1-73C2E487B32F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{499396D6-8447-4845-97CC-551FDF641F9C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{499DF985-A581-4711-84CD-6B625713C837} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{49B61D0A-BCA3-4D14-B09A-08217E3D9491} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{49DA99FB-7A8A-4E08-A931-DE3F5EBF765C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4A105A7E-1443-4CFB-8FC4-1A9D7D6AA24E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4A375E30-EDF0-4191-B705-100CC1FBE9CC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4AAB57D4-80B0-4A0B-8895-E00F9581A91D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4AF50555-985F-4D30-9D2C-0B82773D1F5F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4B4AEE5C-64F5-47C8-A5FD-8AE75D543B2A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4B71E235-8987-4344-8821-8C0140C4C3B4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4BBA3A38-44BA-457B-A542-D8405B9E17C2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4BD1694A-B36E-47F0-8B7D-27616EE5828C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4C06843A-8EA7-4072-B677-AFBBD4A89007} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4C4F60A6-BD46-42A0-B13A-5C7504F0805E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4C756524-D6DE-44AF-BA09-29E7E230D488} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4CFF6A38-C0EB-4BD2-BABA-0A727CDE81A7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4D362CDD-C19B-4169-A9F0-B3034CF5AD18} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4DB43483-AF68-4833-80E9-6ACCECC863DC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4E285C22-BD41-4962-A48F-6921070624E0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4E31E974-F648-4BAD-93E8-26FB8AFA12E4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4E35FEDE-1925-465B-9FE3-41027D829D25} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4E6A7906-5456-42C6-8B0A-D7B924618947} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4F3A7846-8241-4F77-9AD9-AE3ACD948F84} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4F3FB4BB-BC03-4654-AC95-2E16A987B2D2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4F78CC70-FDB4-405E-A0E9-C22163DE2571} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4F875552-DBD9-4E1F-924B-2171E7B824B7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{4FA8A9BF-5129-44AE-8A01-C7C9B1A5092E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{500DB85F-55C9-42DD-AB11-BC2E0FD0FBE5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{502CF752-8553-4DCA-95E2-4879BB0E2C2D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5069FDB5-112E-48AC-BA64-44AB3E8BDA80} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{509AB146-DE26-4E0A-A550-6AE24F3DEEBC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{50AF170A-8ED0-4464-AF68-917FBB8B3ECA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{50B59AA9-E8A2-48DF-AED1-B9D5DF0942F4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{50D44806-89F0-40A4-A617-33AFB85B70AF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{511FCB4C-A581-4353-A0B8-54FCC701716B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5164CD1A-A251-4C8C-B04C-1E79C1C9FC2D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{519CDCEB-A398-47E1-93B4-C36E1052E0A6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{51B14C50-C6EB-469D-AC41-2204E0774FE6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{51D941AE-91EC-4079-AFB6-639D04557F88} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{52EA11DA-559C-4512-AF0E-0AAC2B5491BF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{53BC8540-54D8-4EB5-9EF2-B338853714CD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{53C74F01-FDE5-4B99-BEED-F43827E2438D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{53E834FA-9839-418C-B7EF-57C010C0C65E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{540B9AC3-CDC3-4B2B-9471-B444A6131BAB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{54CE696F-7CC0-4394-AE0D-6E2BE7857D8A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5516752E-8D67-465D-A3ED-0E2FBB59A326} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{553C284D-342B-4C85-AA14-741DFFC7C0F8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{55B3DB26-F5EF-4F79-8DA1-98166AC5E1B7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{55C99003-DB7E-4AA7-B29F-2896F6B79CA8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5621502D-67B2-490A-9575-A0D9156BB906} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5637C61E-8F36-4B5D-A137-4E444E15487D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{56E6CB5E-C7FC-466F-BC7B-F460A5C5C7D0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{56E8EEB1-BE1D-4BF4-AB6F-3E3B3B92D6C3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{576DFC60-2AB7-4DCF-98C8-24FD474F9CE4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{57771CF6-864B-447B-8C51-98A93697E6B6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5783B9A2-32C7-49E1-AA7E-FD9EE8A15674} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{57E5790A-E887-4D6B-B676-A2B28CF0FBFD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5802CE7A-1687-4E1F-8AA2-D25FA379ABB4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{58058300-F23C-4BB8-A251-DF6A05A0DB2A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{58D5B0DF-2A95-4D91-8393-1996452D6AB8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{593F4B07-B161-4430-A226-CF97DF32B64B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{59486350-A02C-4057-9AF9-A7276624D00B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{59A319EC-C469-4A2A-9D86-CE7B1B53FC0D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{59CD04A4-EA5B-4841-81EC-67E880853C88} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5A7C74E7-CA67-487E-A0DF-90295FB7BD3D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5A907DA2-25C9-4633-A0E7-8D1A9C122DB8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5AAA9D61-E985-47BE-8304-DF71A83F22CF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5AE300FE-ADE9-49C2-AC9E-52334A1B46D8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5B514D3E-A167-48EC-9FEA-AD95126C4D35} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5BC8BBF9-F2F8-440E-AAA8-9DACCD0979C6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5C0E8798-6577-4EB8-A67A-32FDE2B4732C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5C92E4C0-139C-45E1-A5AA-6D79BD03FEC4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5CC2933A-A54F-4BF6-834C-ADCBC4C5A8FE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5DC86D2E-F1C0-4AE1-A032-C425347ACC47} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5E0A470C-CE80-4DBD-956B-53DCB53A6C20} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5E896D7D-8128-481C-8271-800E67C75A60} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5EFD88BA-656D-4322-98B5-3857559B0CEF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5F0117EE-9C1D-4F78-A8B6-2E0DECE8BD2C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5F55C0E0-9D8D-4832-B3E6-536306E757D6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5F6B58E8-2B1E-4EDB-AF6B-E06F025C9FFC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5F7E742F-7359-47A9-8FFF-106CB59D4F55} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{5FA01506-9D48-45A9-98B9-E974684FC4C4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{600CE011-633A-42F9-8F1F-3056DFAA2681} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{605B01AF-DADD-40C3-BE85-8EC126D3085A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{609D04D8-9FF2-4F73-BD1A-F05E5F4C8391} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{60A0656E-4919-452A-A0A1-98B141CD9D9A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{610974B2-EBEC-4583-A1B9-594AC5D8DD13} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{61149FF8-2967-42E4-BD7A-6ADFBBF63552} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6212AFF7-57A3-4D01-AA97-FBD979772306} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6217274E-185A-4C05-8FCF-3A9ABAA64399} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{62EE0D9F-7939-4408-86C5-469382B6A23C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6380AE93-3164-4340-9ED2-950B08625549} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{63A7FA04-7642-406F-8EF6-87D8E19ADAAA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{63E989AC-AB2D-4BE8-B2A3-893EFCE3A3CE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{63F30CAE-D416-4439-9021-1C27E6B89862} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{644F37D7-6C07-40C4-BACE-E8AA4C939AF3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{657D95C4-3CED-4162-82CB-3DC80A445FF0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{65DCD756-D685-4BE7-8EE9-D956719A6BA1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{661465CC-A4B8-4B54-8B85-7D89B94897EF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{664DD983-B80D-4655-AF1B-0B12B35F9695} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{665A9DC5-411B-4698-BA7B-0FB0DA4F31FA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{668067FE-4D21-447B-88AA-F8EC18FC042F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{67E3792E-FB87-4C3C-8AF3-0160BCC47B54} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{683DE22A-B0DE-45FB-82A9-796BC3C00833} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{68CD58D4-938B-4939-9A80-9B4B42C99820} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{68CDDC0A-D906-4097-AFDB-11051807BAD6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{68D77664-7442-4544-B952-B316E8922A49} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{695CF6D5-200C-46DC-B632-73C7FB4807C7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{69D460B9-6F13-4ED3-B866-8C66FC39FAE8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6A4C55F0-E927-48DD-B13C-336816AE2050} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6A881755-50B9-4D66-BAD9-4A8D97A4537D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6AE95DEA-3CBD-4E9F-81F0-D7ECE7039EBF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6B36AB72-7919-4D9B-B2CA-DA0720900249} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6B870A6F-725E-434D-A4A3-0CC3CC2553BA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6BA36477-2096-4EE6-989F-AC36F2FC1B64} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6BBEB800-208E-4BF1-AF48-8CFCA031AAF6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6BC271E8-2854-42AA-AE40-D3265B19CC54} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6BF9D20F-3390-4EE9-B2C3-1BEE5E095F1D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6BFC9152-7D6D-499D-9C3E-3D20D4BE0598} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6C225694-9B5E-472C-83D6-A139AF0BA378} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6C509CDE-9DC2-4DE6-BF26-024EB4EC7B49} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6C9DCA1F-C966-4277-889D-91DB870F6D89} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6CF81A14-8A6F-4A61-B058-51E4E0B0B5CB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6D229529-C474-4FB2-BF53-AC6BE5AB90EB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6DEABA57-D6D9-416F-9534-703285989553} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6E275120-D83E-46D9-80B7-379F11D60835} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6EBCF474-FB0A-41DC-88F5-59284B4A13C6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6EF466BB-FEC3-40E1-9400-87D8A31957A3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6F7ECE87-6424-48C1-A8E1-FCCE10C32BFA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{6FC2C095-6D65-475E-A500-A7D5096CB2B2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{702FC1EC-8BA1-4270-A13F-9978A1076683} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7049977B-53C1-42F6-A52B-1F8D4F252C81} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{70BE422C-1503-4C76-B96F-7B60924EE542} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{70DB5B7A-0F77-499C-88E0-B0E60B0F804B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7104681B-A9FC-4CEB-878F-546C75D2DC08} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7129A2C4-500D-4106-BA1A-215D6146616B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{716AD83A-CD60-4689-8319-6819DCF3747E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7179E8BC-5F06-4384-8C03-6D27B4CDF7D9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{71E04CAA-26B5-4345-9A12-928DA920EBDF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{71EEB868-4564-4DCB-9D50-3156FA165D60} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{725C2BA4-BC4D-4D2C-AA1D-237C75C6F60E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{73271186-1173-4928-AFA9-1767DBD4C016} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{734E0380-08DA-47C8-9DEA-32BF95900409} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{73B5C58E-F162-42BA-B2CE-A249E407DF89} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{742D1843-199A-45CA-8BCB-6B07B76DBF21} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{74FC985F-DFC4-4027-939A-DAAE2FE7F9AE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{75C6BCED-5EF0-4C5E-8258-78DB2DBB5DD4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{75DCCF9D-D837-4A5A-8D79-31D13DC48E2A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7630668E-29FC-49F7-9F1E-5360D3BD34F2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{77A92358-40D8-4F78-9884-632D1BF8D1F5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7819D455-829E-4F99-AF4F-40CEE5EA275D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{782B18FF-7A5B-473F-A7F0-0C9C62ECCD79} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{78D473F3-EC44-4773-B67B-F63F1D7CB99B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7905E0CC-D00A-4CF4-A046-37F830DBE10E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{797E9E4E-52F2-4230-9470-84AD51CE5170} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{799AC9BA-EEEC-4968-9A55-7B53D93FA1F5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{79A507FD-FC84-4C63-8F57-EC94662F3AE1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7ACDE163-01CB-415F-95B8-97724B9731C2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7AE1F300-8275-4A76-8DF2-FCE4EE6678A3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7AE5A454-6049-437F-8C63-5525CCF533C2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7B0D4FF6-F81B-4613-8027-4A480E90EA7D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7B204805-3027-4854-B277-6DFCB1E09819} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7B4C06A0-3866-4803-A757-AB9FFFDD1E90} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7BB3ED57-18FA-4D6A-84B7-42455E6D6591} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7BFF82C0-B09D-4133-9D7D-81F4E0BEEEC0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7C7A4410-BB04-45A5-8BE5-5FDE265CD6FA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7CBBB8F4-6E66-459B-9CC9-3FD53809A695} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7CBBEB0C-54E6-4BCC-A2F5-52941BA7E77C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7CC99EA2-E2FC-49E0-ABA7-E9A0770D6E64} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7CCF7D66-225B-4A2A-BA8D-BBB477CDF8BF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7D69D96D-24B0-4D60-9EA5-0484D24AAE80} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7D8626F0-73A6-4EA2-982E-D79A3DD15445} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7E1B0358-07C0-494E-8237-4F3BD443F319} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7E20E1B2-02FB-44EB-978C-A6CD1445445C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7E3A6884-8D20-4D6B-91F3-CFD622E669BF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7F2523D2-EDA4-4550-AA9B-6CA90194AFC8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7F26244F-90F0-4AF5-A85E-1791A9069084} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7FBA97EF-AF88-4067-ADA7-261FDB45CF51} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{7FC7CF58-0A63-477C-87AE-94AC6E6D1661} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{801BE9A2-801F-424D-9C5F-2E723472763B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{804FD466-41C1-4E66-B60D-7F778F5331FE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{80B25D02-9C50-4C5B-BC8A-D34BEC5C3050} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8162DBDF-917D-4118-8D97-74A67A140686} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{81A5E3ED-FA03-42B8-BE7D-C03DDD43FB6C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{81A6524D-2F7D-49AD-B483-B32E4025EE7C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{81C9610A-8CA6-49E2-9DF6-547ACE3DF43B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{81F0A9A8-15E1-4E3F-B1A1-3EC2B4D745E0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8231A294-B1C8-4567-AB08-92C2B3885884} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{826911C9-4981-4DDF-BD6D-1F3859E01ABF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8369C331-0B37-4BEC-98A1-51D4D008C33C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{836D1C0B-B8F2-4325-9A52-08CAB3A8D92C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{83F58698-DB3A-483E-931A-9E47438729B4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{846115A1-C187-453A-B41A-D9E8A2523683} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8471D926-755A-44F3-B15A-ABA6F318D185} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{84847AE8-C0EE-4F9C-B769-F13994387A8F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8494069D-EC09-48F5-8546-6F43A22E41CF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{85359B4C-DD29-4EBC-B471-3BCA28B30CBF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{861DF1C8-7D7B-457C-88B2-EDD53D1C6897} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{86444300-7155-4152-99D2-C2065B1D7012} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8677EF23-E8D0-404A-9825-5A9F7C9FED7C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8686037C-9989-41DC-A0B8-6268F3C0D4FA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{86A3F5DE-FEC4-43F3-BC9E-588CE4D64CB1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{86C7B753-AE8E-432B-87E5-2D752A295048} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{86CCD193-98AA-457C-BFC0-D309A927CF59} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{87F004AF-40AF-4009-975A-53542A7DF78E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{87F3A650-8B13-429B-8D8B-ED7720CA57EF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{87FDEDAC-5DF8-42B1-BC32-6592A807696E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{88185311-753A-45C6-8B5A-398D77C8A43F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{881DD2B4-9B42-49D9-A6D8-FFE343E6B6DD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{88263262-9457-4468-961D-1154D2C7771C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{892E87A7-3F9C-47F4-85F6-7E1A01AA3918} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{89542C70-9090-4253-B59E-24762CE937DC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{89815DF3-11FE-47AE-B41D-88B888695CC9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{89FA45DA-F9F1-415F-BEE2-B2BD83BD3543} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8A03656C-B084-4AC1-957E-DC832ACB9259} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8A1EE03A-38DC-4720-9F5A-6B6256210CC3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8A31C880-098E-4DB1-98CC-79E8C3BE70BC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8A88F748-A9B3-4EA4-895E-624E512F0413} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8AE64496-3EE0-4A71-BD79-77CFF31C4295} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8AEAC03E-BCD8-47FF-B7AB-AC6B10D0CAD6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8B6892A8-DEEF-4D17-A657-F03AEC26E6C2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8B972E78-8E33-478A-94BA-179C6EE7929E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8BF96289-F47D-4A59-A1A7-4877772AAA1D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8C48A916-C47A-4D44-931C-310428A99E52} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8C72C7B7-E08C-4E7D-93B4-363990E32699} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8C81CEB0-9D15-4192-8D27-358090D37DA2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8CE850A4-50DD-421B-9FCA-3AF12E60A133} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8D07DDD3-67FE-4F64-AF93-980BA54A74D9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8D098F9B-B6C6-46B2-9341-D914E5EA6507} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8D1D4DA9-E1A7-49FC-BC40-AAA46A5AB000} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8D588906-5CD8-4DCF-AE2B-EE9075017A40} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8D760C09-EEAC-4ED4-87BA-B61A88349FAA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8D9CC71E-9AC4-4FE6-B745-1E7B5DE8A4EC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8DDA3D54-FE41-4A20-8DAC-F7EBF36AD9A9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8DDD9B0B-9C4B-403C-9C00-DA90DBE793D6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8E52D281-FB71-4079-BECF-E4D73F9DD04A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8E874FE4-C294-47DF-AF65-5F19E6D38226} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8EEE60B9-ABD9-4049-B3CE-7BB8931EE1BC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8EF66846-DC15-4097-A07B-E22A4795C6FA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8F119BD8-5009-4C4C-AE03-2914AB780781} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8F21369F-36BF-411D-9857-112EB1AF8634} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8F4B2F7A-FDAA-4EFC-8E45-DFBF9F132039} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{8FF8747E-B658-49F6-8F07-0E6A8124376F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{90A186CC-6B77-4063-8DEC-54D2F1C44114} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9147A6F4-B264-4F7A-87C4-51C449892119} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{91608645-EB34-47A0-86BE-7714CDD01B4C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9179628F-64D0-4A1F-919C-78D025709AD8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{91C8FC9C-AC72-4831-9BFA-202B54212BBA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{91D66F25-6FCF-4BBD-9C28-7E81C6489C4F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{92B7C659-4F49-43F2-BEAF-3D62A10F8F9B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{92CFDBE1-6A0B-46C2-9BB9-2092F0660117} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{93EE06DA-38B5-42DC-9F2B-6E8E9893E7B8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{940D196E-CFC5-49C4-AB5B-B8946CBA198D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9425B49B-2283-4241-AA1C-E3CFBE1FBA16} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{94439A4C-D6E2-4EAF-BB82-F044FB08893C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{94C94BB0-06CD-4635-943C-0503F88392F9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{94E096E8-2CAD-44B1-BE7E-7FE63CD0D0FA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9561FCE1-07C2-4BD6-A047-ABCC2EC33D45} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{95980097-752A-491D-BDB6-51407012A9F4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{95F5D860-D9F5-4917-A651-B002011EDF11} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{964E2F6A-C29C-4A76-BFA2-3020D08859AD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{96B7BA4C-7AF4-44FB-9639-C60DC8E6B120} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{970A9DD5-E3BA-4CE6-8F20-88B13A6A3207} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{97F11AB0-0557-4574-AA2D-39D1DAA8DB1F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{97F99A8D-E151-4BA0-A984-5126C868D8C4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{98CDCBB6-699A-4676-B530-99081BC69A46} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{99113037-1C06-450E-AE13-C68E8D1774B0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9918C174-792C-47C2-9B94-2776032BE1E3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9925FF41-641D-4552-BCFB-6347BC7EED51} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{99AA86F6-99AF-4211-B645-229AF811F546} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{99B54D70-59A4-4EF8-8575-5FE38E980AD9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9A790C33-4BDD-47C5-8257-53A8C12AB762} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9AC8A2F0-23F3-495B-934F-1F9E4AFA59AA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9B390B23-1CA2-4BA5-8ABD-6FA1C28D5911} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9BD3F1DC-B573-492D-84E1-54574A05D090} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9BEDE1A7-2436-473F-B877-7D9BEF3BD3AE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9C282ED8-4D21-49AF-AA17-7A98916C7329} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9C5FBDA4-B992-4AA1-85C7-5324BE69DD44} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9CA15B66-E3C1-42A5-AEA0-7A91AEF2824A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9CA90F2D-BF0F-45D1-B53C-83B33C2B7289} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9CC5D4C0-B206-497C-A067-3B26470F8555} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9D62C468-4AFB-45C4-A2EF-C83077344A83} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9D67C600-8D4D-4790-A51D-2083FB115ACF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9E214B56-6D29-47D6-80C3-BA12FAF78825} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9E3AD2F5-7391-4160-8149-A4D959ED1AB0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9F05C089-9B6C-46C2-A892-1356D1A08895} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9F3FBEF0-6BFF-4B4A-BC87-10D20DD6186B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9F7D2A64-E7E0-4A36-980F-A0CC4DA06D29} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9F8093AD-F361-4B38-83A7-B578CE7F1936} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{9FF7A721-4154-42A9-9F63-51B70AE74BC3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A03D9997-D5C9-42EA-9829-29FCC77389B0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A159270D-F3A2-4E37-B785-4BE320AA3D05} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A1697678-BDE9-4622-A059-479A44070EC0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A20084D3-1597-43A9-BFA2-BB1EED7A3751} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A20F97C3-077F-4B71-BFA0-1A57446E54FC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A285982C-85C8-463E-8B9F-E1D5DD9982FA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A2C6E2E1-479C-45D4-B022-A4C759AC5EEA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A3268DD6-67E0-4D6A-B2A7-02D8FC692AE6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A3692F05-E991-4E8F-8AA4-BBFFD5A7F4BA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A3789FF4-B1A2-4071-95B7-1CB6B8AFFA52} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A4289482-DEB9-4360-8C51-FD1FE22F0030} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A4A9BAB8-DDA1-46C1-AEBD-DF71B92E1751} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A57A01C8-F396-4DB5-862A-CF48A90AA3C3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A5EF3BC1-6579-4498-ACD9-AF7606EF7F25} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A5F2A5FE-49E6-4BD9-9981-1CA72CBBE5AB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A6214980-84E5-4389-B7A4-C4C21B029917} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A66D0C93-4292-4EAA-BCE6-4E79B32352F5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A68F1B46-7763-41CA-8BA7-2912CE00B70C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A80B5867-68CC-41C1-8252-7771DDD32019} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A8DEA1BE-6340-46FD-A6C7-5A8EFEFE5B02} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A8F960A5-275D-4108-96C6-D673FA424704} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{A978485F-F2C4-4E8A-841D-76441532A533} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AA0081C2-5054-4016-9203-80AE07FB2389} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AA1678E3-F090-4ADB-B17F-9477099692BA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AA1E2FD6-4219-429A-A4FA-C850285B58F2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AA485C49-E5CC-4DD0-9A04-6561BCD473A7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AA58315A-C905-4314-AEDB-636767E3E55B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AAA35663-1386-4BE9-AF33-7DDFB086EE01} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AB2B91D6-F65E-4BF3-B45C-F2AD8CC41CC1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AB354DA1-2564-4370-8328-83F7B930F046} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AB6EA788-2CCA-4702-978E-F6C99CAA4D79} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AB870DA8-42F8-41C0-9065-D1A85901E555} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{ABE57319-73DC-40B7-8BE0-D0BBE6319C46} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AC22EEC2-F3F9-4C08-9C5D-12B52D78FCE9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AD2436C3-F1B8-4EE2-B2DE-31E540133A79} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AD24AB2F-F5FB-4983-83C2-0FBC9399E341} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{ADA7164A-DB56-4157-84D4-8AFE866E3BC3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{ADAEDB64-4B8D-4CF1-9B47-26C1FA3CC4E9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AE0B6432-8A11-47C0-87E1-13B2E94FFD3B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AE5EB678-B912-4FCC-9719-32481108F9FC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AEA575B3-B302-44FE-AA43-3C7E9EBDA902} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AF16E9F8-C804-499B-B5AC-76248A47E2B1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AF84DF04-D3EC-4B58-B64E-6BDE603ADF82} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AFC929C3-4759-4115-8B3E-3E42D3204031} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{AFD3CBF6-5524-4860-91A2-E29DFBA2EFFF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B1092136-4699-470C-B5B4-1EBA70A23DE9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B137B223-B960-48FA-B80D-B44086E23B5D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B1B9F3F9-4D3C-48C5-A619-D95B9BEF5533} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B205FA2C-3470-45E8-8899-3F9BDF50F5F9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B21A57F4-717D-48F7-94AA-0B670B290594} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B24D5D62-7D08-4208-8380-EBC170160191} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B2C0A743-DF7E-4AF7-90C9-A2326BD2B1BD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B37D3EA6-86FD-4B4B-860D-A2AD6AAEB675} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B3C2B99A-5438-4C20-BE90-D75C1A606CCF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B3DDC51B-9002-4443-8AF2-B98C8B9F40C5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B462E729-CAF3-422D-8112-2C3F01A3B075} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B4BAE07D-9879-4EA8-BD9C-8111E1A33A2B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B4C2AC8B-C349-4CA5-8941-F07BE3CA398A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B4DDD744-BED9-46D7-BB59-F41FC8CADCB8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B4E661F4-E3CB-45AC-86AA-F44817358667} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B5F6C233-FCB3-4E59-9E58-0F77BDC64F85} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B624A265-7901-480A-B809-6A5F0E8CB4B8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B641030F-6777-48E0-966A-48E328B9BED2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B6497C92-6A1C-4C7B-8920-B15AA8158C37} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B66A4097-4ED7-4F1A-AC86-93BA26488BA0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B6A70A62-A453-4029-B0F3-541E012374FF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B718BD3E-2D09-4B73-A4C1-3880CF887594} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B71B57F2-996F-4946-AD4A-F8FF0121F819} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B7A136DD-47CD-452D-8067-170020689AF4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B7AA7173-290A-493E-BEA6-7C1BEC783232} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B7FDA4B1-2A03-4629-A7AF-6B461B032BDF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B81154F2-0AC8-4A35-AE0D-F64487594877} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B82B0393-F251-4826-AF01-B16514AF19B6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B84F395D-D35D-419F-8552-AE65966CE7AB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B86E5D09-A74A-410D-8E62-A0276A225F40} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B873EA93-01AB-4C3B-9C6A-E3AAEE2F0057} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B887D25B-D678-4D19-BE3A-14592FDD1EAE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B8B4CA41-5050-43F8-A169-8CD06011DCC7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B9351DB1-A95F-432C-BC68-67D56E3B07AF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B96FA01E-563E-4BA3-9320-EED9A7B8FC7F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{B9FCB96A-63F0-48E9-AD66-E4C433AA9140} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BA05E4AF-DA22-49EE-88C3-2B9D3786512F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BA4E8F2F-4805-483E-B10F-4A6648B31E7F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BA6DE96C-12E9-4294-8786-A1B0D857642B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BA8BECBF-C85D-4569-9CA6-17C6E9EC8F6A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BAAD15E9-B3D7-440B-AF4A-D6B710A2268E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BB2544CD-6FD7-49A0-A7D3-6AA950154B1C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BB7AF627-CD4A-4BF5-9BDD-DA1C3B70F226} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BB92E064-E455-4AF0-8DAB-2F761F81B191} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BBE7B3D6-9D45-4A93-B98F-DDACE9F34315} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BBEC03BE-DFAA-4DF8-BC46-3CB0CF449376} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BBFA1200-2816-47C0-833C-4E709655E2CA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BBFAB821-4AFA-4DD7-841B-F94C197F3661} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BC3E609D-3D8F-49A9-B618-A9DB5A36B97D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BC7C6114-6B50-4789-9192-84FFA601886A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BCC02031-173F-4BE4-A3C0-12481E9509CE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BD12BC4A-44D1-43C9-8E97-90DA977A564E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BD1B204D-EA82-42A4-B523-50DFA8FAAF2F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BD28FC64-218F-4EE9-8ED0-1B6BEBC81095} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BE2F13AA-FF49-4A84-B626-2ECF6604D974} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BEE52949-EC07-462C-9A9C-1865BA5F4B38} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BF36A193-E080-4E59-856A-CB2DB1E5100D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BF569FC5-64B0-4EB3-B18E-7593012C0FC2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BF6DED23-AE0F-4663-8051-1C2D4583D095} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{BF82D834-B2EF-4330-99E0-9EC02E793505} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C07BAFFC-E723-46A8-BE93-71D56D56CF72} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C09920C0-12E1-4639-A919-6D892F156D0F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C0D04305-2D8C-41A0-831B-0D5D66AE2F85} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C0D2E03F-5682-4183-BB46-35A9297C0CA0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C12ACBAB-E4BE-4618-ADC3-DC947C56022B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C1463885-CBAB-4A64-9377-A55B570D94B0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C1D59EA4-82BF-4DFA-8D76-5282C3B408C6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C1F9F036-56DE-4A53-9BE1-2433C0E53465} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C25B6C69-FE8C-4754-9841-52CBA9DD0BAB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C26991A4-65B7-4D3D-99B9-B86850A32001} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C271EEC2-2A43-4278-8329-A97FA27C4429} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C3289607-D906-47FB-AF39-CC4A9136515A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C34AA81F-F5DD-4DC7-91CB-A6C888AE03EA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C35E238D-7DCC-4F36-9DE7-A96ECE14A337} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C3E75056-2055-4302-B8A8-EA0C4A3BF7AC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C42A8E74-63D4-48BD-BE70-7C70843DEC65} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C49F2C5C-D319-4289-AADB-60459689EA99} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C567AB14-6DC0-48DC-BBF0-98A84C0360DB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C5AB3E0D-9A50-4D77-8047-18D698FF9038} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C5C39055-62E0-4961-8E58-A2FEECBD6641} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C5D727C0-0F38-4D73-B972-ADF102780237} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C5F684EB-97F5-401F-B8DA-3A7208C7AC1F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C6373774-7857-45D9-9905-AC8FF7E602DB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C6AA07AA-7E01-4EEB-8924-866E723C879F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C6AC934A-FCBF-4BFE-983B-76713B17D530} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C6BF4B70-5A9A-4E45-97CF-469762B978A9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C707212A-932C-4AEE-BF0D-CD7BB5A9EA6E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C735B954-C29C-4EF3-8A45-6D52DBC9D078} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C7582B07-6B95-466A-B443-12E41E1EB1A6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C769590E-A3E7-45FB-816B-0EBB717899B6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C78066D7-D016-4449-B39F-2A7E901E475C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C7CD1B4B-F08B-4DE2-9F71-4336E7362797} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C7DBBD98-6200-4959-8A32-7F52B77E48A8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C84D14A3-B5DA-4900-B6D2-988BCD3C52AD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C89BCA43-091A-481F-AC8D-24329318BBFE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C8A19F48-4B41-455B-832A-ACD9AB39743D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C9F1057F-71D1-441A-98A8-81E5DBA2D030} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{C9FB8CDE-87A1-46A3-B270-9E39A8843F1D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CABE74FB-A19D-4653-BD1E-9D2A69D74DEA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CAC270BD-B076-453E-9F82-5E565ADE3452} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CB6C2FCF-116F-459E-89A6-FA2B7256C636} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CBE04279-E39D-4207-9317-92F6C791D2F5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CCF9DB9E-CE22-4730-A3A2-370EF9311F54} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CD3A0647-7217-41B9-B210-CB0469C8BF9E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CD778F12-C72F-4EF8-88D8-F3A494BB9BC0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CDABC433-4FFE-41BE-8DC5-5100187F983C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CE1DCF91-A38F-4FDA-9DC8-E37A958027AD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CE86C927-1FBC-4AD7-BE59-3905F0F7BDCD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CEB7F2A7-156E-42AF-BC9B-A7942240D83C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CED2E2BC-297F-43E0-88D4-22EFC04A5035} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CEF3A193-49BB-4C31-8F7B-5226D09DDC1D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CEFF73CF-9129-44EA-B43B-8C793FDAD441} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{CF081A91-C6C1-4810-B76D-4504DE5C8202} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D0246FDF-E535-49A3-BFD2-96E6D0E086FE} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D062E927-B5B2-4119-80C8-9AEBA8FF424C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D0D51ABD-A12E-4413-98E9-6359583D9835} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D120E4C0-4CDD-427D-9FEC-D1FD10086656} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D1ABCABA-4AD9-4610-B48C-B9AC796C28F7} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D1C5D8F3-987E-49F5-A21F-DFED1BF6E09D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D1DAD255-2013-471E-8920-FB4B7AF16806} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D262BB5A-16D1-4BDC-B527-9CFA2C8B1137} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D31B0EA7-2170-44D7-A499-CF0BFCCCC4D2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D33B16B6-825A-46B8-8364-38A41C1092ED} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D38CE42D-6270-4538-88ED-8D1E968ACBA2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D39A5F3E-3B54-4A77-84D3-D9E8AB3513EC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D3BF2777-B3C7-4990-98A1-E38900B902A4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D3ED54BE-01EA-4DCA-8537-DA31D9AF9056} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D49906FA-5B88-4C9E-B7D0-A535FF434E82} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D4B12E4B-9CA9-4D72-9B48-2D4F551007D2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D5039455-2B89-4305-A54C-50909252DCB8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D59F7BE7-37EF-4AA7-AEB3-8A431BEC5F6D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D5E2D105-4DBA-4ACF-AF18-FB6C0B945805} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D62FBF59-6380-4451-B8BC-70629806FF7F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D6759DBA-EA58-4D73-9AA5-B0AEC2FDFB70} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D6D3AB10-45E0-4B54-882A-FF6D790F9748} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D6E92AAC-8369-452B-B23C-53EC0D25E2A2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D754F478-E01E-4820-929C-FDE17ADB632A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D7C27190-E083-4A76-8ACE-5AEEFCC46F63} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D82327DF-EA7D-4FFF-B20B-756F04ABDB0B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D8700AF5-073C-4A10-A295-03A23E467088} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D8F2AAE4-B3BF-4486-9BBC-4BCC5CE9087C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D9BBD633-A3C3-4662-AFEF-89516D0AA1FA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{D9F64AB9-0B90-4233-A583-58EDD08B4483} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DA2F9595-9946-432E-97A7-0F9C7924870B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DAA4A7A7-39B5-42A6-A1CE-7FA6C52F3DB5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DB2DFF57-825B-413D-AC58-33F0F5ED2197} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DB4F3628-50E5-478E-A07F-2F66B577A004} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DB8E2DE2-C440-4A00-A7CC-57528236B353} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DBA3A4D6-3F4E-487B-8870-82983A657DB1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DBC52755-200D-42C1-ABDB-9F1C63540F22} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DD22ACD7-9EF6-462C-8396-1EE0F5B817E8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DDA20A22-EE1F-4E3A-AD3B-81F442BE5E0D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DDDD63AE-54D3-4EC7-9870-F51578ABDBC9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DE2FA897-4363-4A50-94F6-6DAB5B5752A2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DE546794-1393-4A4D-9CD6-2D5840B861AA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DEADA7F7-BD2D-4ADE-8607-E87C2C658368} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DEE3F679-2397-473E-88B4-ECD5342741B1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DF3899AE-5F70-4A61-A414-163DE286F6F6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DF7D28EC-BAC3-4196-9AC7-E2C66CCAACA6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{DFC9D24C-2CC4-45BA-AA49-2C980E289AD1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E04FAE39-5EDE-474F-9F53-F36513FAF04E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E054CD68-9CE8-47CB-9AF0-313B0501B1F6} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E0AB7CE1-815B-440C-A12A-52B2DFCBDF44} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E0C07D27-CC8F-4499-811B-ECBBE20E6DD2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E0CBA0CF-D9AD-4BE6-AE36-B3043B9A3787} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E0E18DCE-8F62-4F68-8730-2CCE971C3027} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E0FA4F96-DEB6-4DE9-B287-E8BFA3574A15} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E149FF25-0EC4-4619-B7AE-4CBA8D6D4881} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E23ACFCF-82A6-4906-AD08-92960083F8A1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E2B250B9-571C-43C1-A317-271F4AC9AE64} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E2E36678-9FF5-4BBE-8B2E-3B2C2361DB34} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E36AB711-A3D4-497B-A89B-53F69C812BEB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E3BA099E-2567-499B-A164-9C96ABF3E02C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E3D86F23-8E9B-407D-BCC9-87D2DBA339F8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E4279846-EC78-493D-BB3F-CFDE1C45719D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E4340F07-8CDC-41F3-8F31-98CDC7C4C8E2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E56D867D-B8ED-44A6-871C-6CFE063DC466} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E582EB3A-BE5C-4007-8DB1-EB8803618571} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E5D10BAD-9303-48FB-85FE-24CBCA892CDC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E5EC1E64-FBF6-4FDB-84EF-4CE807AF616F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E66C9DE3-B325-4813-BD5A-FD0BDC68A23E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E70C47A3-1B68-4ABB-999A-1E28C158DB97} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E758069E-F101-4974-A412-0BE85DACAD30} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E7B9A341-2C46-4F0D-9D9E-C7BB860F474F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E84A39AC-96EE-4876-9EBD-2CA91C3C6BAC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E9527930-B740-4C3C-9C40-CD45B16F3644} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E96674FD-8718-47D2-9793-1750209A2C76} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E97B11CA-3571-49A7-8AFF-AF943CA1F6AD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{E9990D93-D67E-4FE3-A1C4-1168CD03C78A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EA788606-80BE-4EA9-B44A-BC12A903C8EA} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EB13DD98-3306-4091-8B48-B13CAB30761C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EB49408C-E745-47C9-9AA5-71A5CA7377AD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EB4A7D14-9A29-46F1-A33C-54AC9F8D2A77} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EB5635EB-9530-4DDD-AA66-38DDC5071969} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EBDE7A2A-8181-4FD3-86A3-0187C2453F52} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EC2CE81E-BA0F-4ED5-8151-460CC33DC931} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EC654BA4-D2E2-4712-A69B-700F1E12F717} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{ECC3D50A-9966-4F21-9EC4-CC383378F660} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{ED5B0A49-BA7F-4F6A-8454-F8E10B53F850} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{ED787E7F-0818-4575-8770-30D2A748A89F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{ED7FBB5B-3432-4E91-9BDD-4DEEA7451DC1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{ED85CF8B-4AAD-4E58-8138-8C95D6632D10} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EDA6B052-D082-427F-B851-C0C8F5CE9570} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EDF16FD8-B508-4FC9-A24D-A5E0291F2554} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EE160110-71BB-45EE-9C93-C89491555C33} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EE5416B2-13DC-4F53-996B-B70A573E48E8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EE916301-4404-4C48-BD18-B361585062C0} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EE941CF9-843F-453A-8CFC-63169AA2A8AC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EE997F2F-9D24-480A-9D94-42BCA3D20DB2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EEB61D8E-BED2-4004-9F62-657BFC51D28C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EF1EC8B5-1CD6-4126-93ED-21AA4976F49C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EF50607C-43E0-4454-BD41-991EC41FE4D1} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EF6077D0-D85C-4E13-9AB9-3C0D39734876} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{EFB6E05A-F3AB-4074-B97B-E06B32F14848} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F0365842-0099-4991-87FB-7B6C7681E805} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F04FAA78-7174-4916-A800-F7F7E82F4FD5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F054CC50-A207-47DF-9BE2-875893B6B2D8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F0C79BEF-1DCD-4CA4-BD7C-FD733329F39B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F0F86A94-E392-4013-9055-C7C614C31D7F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F1047310-F47C-4450-AC96-8AE3E5D702EF} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F1F549F5-37E8-448A-82EA-9F338E693C9D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F234B7EE-D078-4770-A0AD-0838CBD23AF8} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F28655E0-594F-45B3-98C6-DFD3450B7654} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F36C19B1-849F-4AA4-A037-165CF147AC0E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F3DE92A7-5CED-4BCE-87B7-B5D1D1CFAA1D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F41DB481-D787-42E5-B5DC-F5BF7D40133F} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F4520835-AC9F-4603-8AE6-D062D8DBC4DD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F460559F-1AE0-400A-B521-9E2CECCBC3D3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F48C452F-28AB-40E3-9110-8D4EECE2DAAD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F4C1A245-6880-4961-8986-9A6554C780FC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F4F121CC-2E01-478F-9222-F79472B57DE9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F5884EE9-B79E-4C42-BBDD-F69AFF406FBC} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F5B663FB-06E6-4768-B0E4-F23167541053} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F5DC23C9-CBC0-4D90-B00F-134B5A8411AD} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F5E4C373-0DF7-4090-AEB5-43FBA0FE2D91} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F62C9042-FD82-41B1-A6F6-5118331D8E21} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F6A74522-5CF4-4F8A-B5D1-1AAF31F95ABB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F6E80FE6-6611-41BA-A77D-8442AFB1B510} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F6F7476E-0980-4120-A247-AA31901E742D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F70E5AE1-99D2-41F9-B5FD-80AF6CDFDC76} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F7455381-138E-4087-9E26-8BEC78EB2DF5} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F7D4DC9D-1D17-4336-BF92-44A108962667} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F80E502A-BACA-4AF6-AAE3-7A73CD0747A4} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F817318E-2754-4108-82E8-52D3EAD2D375} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F81A242A-8958-4862-B429-32B1F1698B6E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F8D63C64-2CAE-4A23-AD5E-5AE0E8495B3D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F8D7C802-912B-4943-A2B5-DBFB38F29FF3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F9104E5C-C52A-46F5-8912-8B3380E4B425} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F92C28F9-F622-4569-9ABE-7D41BB7B1C3D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F969E992-F173-4122-9E0A-024E58110027} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F9827A3E-EFB0-4E56-818D-5157E919F482} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F9CEF83B-4932-4EA1-A876-2EA2596E4355} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F9E92576-D4F2-4574-8BDC-E67B1D79D13A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F9EA5FF4-C16D-465F-B8AF-05B028173921} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F9F58195-4457-4C3E-AD49-441E39D210F9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{F9FC12AB-4056-4302-8D37-23AC24354129} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FA0CF8CD-1167-49B8-A22A-AC7E831F6413} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FA122A00-7985-4621-B7F9-B871D5BDA83D} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FAC6C4B4-F5EC-455B-8021-3CE5B543B340} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FADB1E36-B34C-4059-90EE-604FC26F6391} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FAF75B59-CDA3-4562-A714-F0F57318544C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FB3E63E0-9699-4814-ADFD-2FAF2DF6AD18} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FB3F8A38-0C30-4BE8-A028-860D3206DE29} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FC13A7B1-1171-4E2E-83E2-F0EB20B87F2C} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FC72B7CA-4F7C-4FF1-9FDD-994911987AE3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FCCD5890-790C-47AE-83BD-53CB7AFB936A} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FCEC7987-3F17-447D-BE94-4BCD810975CB} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FCEEEEAC-BF7C-4690-BDAC-E65BD648DCD3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FD0BF1CC-932F-4560-9B35-BC406165D120} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FD1DC42E-8E35-4A64-A331-6C1ED8E37750} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FD47BDD2-61F7-4736-8D8F-5BA9A6C01E9B} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FD81CB2D-ED27-474F-AD1D-4F3194A7AC35} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FE493834-E18A-4A09-ACBB-74D3D04AFDC2} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FE71DCD4-EB90-454B-B450-839B9AEAB8E9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FEA78F18-6470-48D2-BB13-E494F9F4B4D9} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FF6F93CC-740E-48AF-9E8E-5DF1AE68D73E} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FF77700C-22B1-4C75-A7EB-1258F1CFBAC3} (Empty Folder)

Successfully deleted: C:\Users\Denise\AppData\Local\{FFE1BA54-1130-4414-8238-F955C89F1427} (Empty Folder)

Successfully deleted: C:\Users\Denise\Appdata\LocalLow\company (Folder) 

Successfully deleted: C:\Users\Denise\AppData\Roaming\getrighttogo (Folder) 

Successfully deleted: C:\Users\Denise\Documents\optimizer pro (Folder) 

Successfully deleted: C:\windows\System32\ai_recyclebin (Folder) 

Successfully deleted: C:\windows\System32\Tasks\EasySpeedUpManager (Task)
 
 
 

Registry: 5 
 

Successfully deleted: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd (Registry Key) 

Successfully deleted: HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{336d0c35-8a85-403a-b9d2-65c292c39087} (Registry Value) 

Successfully deleted: HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{fe1deeea-db6d-44b8-83f0-34fc0f9d1052} (Registry Value) 

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value) 

Successfully deleted: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} (Registry Key)
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 23.11.2015 at 15:34:49,16

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Denise94

23.11.2015 15:43

Und die Logdateien vom FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:20-11-2015

durchgeführt von Denise (Administrator) auf DENISE-PC (23-11-2015 15:35:56)

Gestartet von C:\Users\Denise\Desktop

Geladene Profile: Denise (Verfügbare Profile: Denise & Gast)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

() C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

() C:\Program Files\CyberLink\Shared files\RichVideo.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2014-12-11] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated)

HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)

HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)

HKLM\...\Run: [RemoteControl8] => C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)

HKLM\...\Run: [PDVD8LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)

HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] => C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-07-21] (CyberLink Corp.)

HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-02-26] (Nero AG)

HKLM\...\Run: [BambooCore] => C:\Program Files\Bamboo Dock\BambooCore.exe [646744 2014-11-20] ()

HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\Winampa.exe [12288 2003-04-17] ()

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)

HKLM\...\Run: [MouseDriver] => C:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-29] (Microsoft Corporation)

HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2688920 2014-05-26] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)

HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-04] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [3638256 2015-09-11] (Electronic Arts)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: G - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {0afaf239-5233-11e1-9281-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {5c1700f8-0a8e-11e0-89ea-00245467eac5} - F:\Autorun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {88771927-5bca-11e1-9d6d-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {8ed8c5b8-1d1f-11e3-a810-00245467eac5} - G:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {929343ec-dae9-11df-91fe-00245467eac5} - G:\LaunchU3.exe -a

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {98b26fee-6c31-11e1-b6ca-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {98b26ff2-6c31-11e1-b6ca-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {9d0d55be-049b-11e1-b91f-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {9d0d55c7-049b-11e1-b91f-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {a3b0880f-92f1-11e1-92ac-00245467eac5} - G:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {ac8e3a14-72f9-11e0-8ea1-00245467eac5} - F:\Autorun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {df1fb56f-8b3a-11e3-86dc-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {f2592001-7340-11e1-960d-00245467eac5} - H:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\WLXPGSS.SCR [302448 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{6740F581-8B96-4B73-9C1B-74E80ABB4E31}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{89937394-FABE-4827-A000-3CA618D78EDF}: [DhcpNameServer] 139.7.30.126 139.7.30.125

Tcpip\..\Interfaces\{D15BEF43-E20E-4980-8981-90385BBA009A}: [NameServer] 8.8.8.8

Tcpip\..\Interfaces\{FAA164E7-8D0A-412C-BC98-DE239EC26F45}: [DhcpNameServer] 192.168.0.1 192.168.0.2
 

Internet Explorer:

==================

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn

SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-31] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-31] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx

DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-09] (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Keine Datei
 

FireFox:

========

FF ProfilePath: C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018

FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-25] ()

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-31] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-31] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]

FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.5 -> C:\Program Files\TabletPlugins\npwacom.dll [2010-09-02] (Wacom, Inc.)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-05-26] (Adobe Systems)

FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin HKU\S-1-5-21-1072828290-3828818215-1948454868-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-09-27] ()

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-11-18] (Apple Inc.)

FF Extension: Kein Name - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\extensions\fg@favgenius.com.xpi [nicht gefunden]

FF Extension: YouTube Unblocker - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\youtubeunblocker@unblocker.yt [2015-08-05]

FF Extension: search service - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{bae37ea1-7abb-47f2-8b34-44f0f489f8a2}.xpi [2015-10-05] [ist nicht signiert]

FF Extension: Adblock Plus - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-25]

FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2013-04-10] <==== ACHTUNG
 

Chrome: 

=======

CHR Profile: C:\Users\Denise\AppData\Local\Google\Chrome\User Data\Default

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <kein Path\update_url>
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ezGOSvc; C:\windows\system32\ezGOSvc.dll [73600 2011-06-12] ()

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921392 2015-10-04] (NVIDIA Corporation)

S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]

S3 MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation) [Datei ist nicht signiert]

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)

S3 npggsvc; C:\windows\system32\GameMon.des [3461904 2010-01-12] (INCA Internet Co., Ltd.) [Datei ist nicht signiert]

R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-10-04] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4325680 2015-10-04] (NVIDIA Corporation)

R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] ()

S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2057736 2015-09-11] (Electronic Arts)

S3 PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] () [Datei ist nicht signiert]

R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()

S3 SonicStage Back-End Service; C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe [112184 2007-02-05] (Sony Corporation)

S3 SPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation) [Datei ist nicht signiert]

S3 SSScsiSV; C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe [75320 2007-02-05] (Sony Corporation)

S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [567064 2014-08-19] (Wacom Technology, Corp.)

S4 Agsvepehe; kein ImagePath

S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [X]

S2 RoxLiveShare9; "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 athr; C:\windows\System32\DRIVERS\athr.sys [2228224 2011-12-13] (Atheros Communications, Inc.) [Datei ist nicht signiert]

R2 atksgt; C:\windows\System32\DRIVERS\atksgt.sys [83872 2011-10-01] ()

S3 hamachi; C:\windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

S3 hidkmdf; C:\windows\System32\DRIVERS\hidkmdf.sys [12088 2014-08-06] (Windows (R) Win 7 DDK provider)

R3 KMWDFILTERx86; C:\windows\System32\DRIVERS\KMWDFILTER.sys [25088 2009-04-29] (Windows (R) Codename Longhorn DDK provider)

R2 lirsgt; C:\windows\System32\DRIVERS\lirsgt.sys [25888 2011-10-01] ()

R3 LVUSBSta; C:\windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)

R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)

R1 MpKslef5a3dae; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{378E663A-D49E-486C-A32F-4376EC840978}\MpKslef5a3dae.sys [39168 2015-11-23] (Microsoft Corporation)

S3 Netaapl; C:\windows\System32\DRIVERS\netaapl.sys [18432 2010-04-19] (Apple Inc.) [Datei ist nicht signiert]

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18736 2015-10-04] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [44840 2015-08-11] (NVIDIA Corporation)

S3 pepifilter; C:\windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)

S3 PID_PEPI; C:\windows\System32\DRIVERS\LV302V32.SYS [2570520 2008-07-26] (Logitech Inc.)

R3 seehcri; C:\windows\System32\DRIVERS\seehcri.sys [27632 2010-10-29] (Sony Ericsson Mobile Communications) [Datei ist nicht signiert]

S3 SipIMNDI; C:\windows\System32\DRIVERS\SipIMNDI.sys [24352 2009-10-15] (T-Systems International GmbH)

R0 sptd; C:\windows\System32\Drivers\sptd.sys [691696 2010-12-18] () [Datei ist nicht signiert]

S3 ssm_bus; C:\windows\System32\DRIVERS\ssm_bus.sys [58320 2005-08-30] (MCCI)

S3 ssm_mdfl; C:\windows\System32\DRIVERS\ssm_mdfl.sys [8336 2005-08-30] (MCCI)

S3 ssm_mdm; C:\windows\System32\DRIVERS\ssm_mdm.sys [94000 2005-08-30] (MCCI)

S3 t_mouse.sys; C:\windows\System32\DRIVERS\t_mouse.sys [5120 2012-12-19] ()

S3 USBAAPL; C:\windows\System32\Drivers\usbaapl.sys [41984 2011-02-18] (Apple, Inc.) [Datei ist nicht signiert]

S3 WacHidRouter; C:\windows\System32\DRIVERS\wachidrouter.sys [85304 2014-08-06] (Wacom Technology)

S3 wacomrouterfilter; C:\windows\System32\DRIVERS\wacomrouterfilter.sys [13112 2014-08-06] (Wacom Technology)

R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

U3 a08epgbt; C:\windows\system32\Drivers\a08epgbt.sys [0 ] (Microsoft Corporation) <==== ACHTUNG (Null Byte Datei/Ordner)

S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [X]

S3 GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [X]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S1 mvgordih; \??\C:\windows\system32\drivers\mvgordih.sys [X]

S3 taphss6; system32\DRIVERS\taphss6.sys [X]

S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]

S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]

U2 wuaserv; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

NETSVC: ezGOSvc -> C:\windows\system32\ezGOSvc.dll ()
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-23 15:35 - 2015-11-23 15:36 - 00023072 _____ C:\Users\Denise\Desktop\FRST.txt

2015-11-23 15:34 - 2015-11-23 15:34 - 00092838 _____ C:\Users\Denise\Desktop\JRT.txt

2015-11-23 15:11 - 2015-11-23 15:13 - 00000000 ____D C:\AdwCleaner

2015-11-23 15:07 - 2015-11-23 15:06 - 01599080 _____ (Malwarebytes) C:\Users\Denise\Desktop\JRT.exe

2015-11-23 15:05 - 2015-11-23 15:05 - 22908888 _____ (Malwarebytes ) C:\Users\Denise\Desktop\mbam-setup-2.2.0.1024.exe

2015-11-23 15:03 - 2015-11-23 15:04 - 01733632 _____ C:\Users\Denise\Desktop\AdwCleaner_5.022.exe

2015-11-23 13:19 - 2015-11-23 13:20 - 04397752 _____ (Kaspersky Lab ZAO) C:\Users\Denise\Desktop\tdsskiller.exe

2015-11-22 13:11 - 2015-11-23 15:35 - 00000000 ____D C:\FRST

2015-11-22 13:09 - 2015-11-22 13:09 - 01716736 _____ (Farbar) C:\Users\Denise\Desktop\FRST.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-23 15:25 - 2009-12-05 00:54 - 01631126 _____ C:\windows\WindowsUpdate.log

2015-11-23 15:23 - 2009-07-26 21:06 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI

2015-11-23 15:16 - 2010-03-13 13:44 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite

2015-11-23 15:15 - 2015-08-27 12:34 - 00005083 _____ C:\windows\setupact.log

2015-11-23 15:15 - 2015-08-27 12:33 - 00032624 _____ C:\windows\PFRO.log

2015-11-23 15:15 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT

2015-11-23 15:13 - 2009-07-14 05:34 - 00023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-11-23 15:13 - 2009-07-14 05:34 - 00023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-11-23 15:08 - 2012-04-09 11:28 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2015-11-22 14:37 - 2010-07-23 15:40 - 00000000 ____D C:\Users\Denise\AppData\Local\CrashDumps

2015-11-22 12:55 - 2010-03-13 13:45 - 00000000 ____D C:\Program Files\Adobe

2015-11-22 12:52 - 2013-04-08 08:30 - 00000000 ____D C:\Program Files\Common Files\Skype

2015-11-22 12:52 - 2012-11-22 14:34 - 00000000 ___RD C:\Program Files\Skype

2015-11-22 12:52 - 2010-08-05 14:06 - 00000000 ____D C:\ProgramData\Skype
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2010-04-18 11:02 - 2009-09-24 08:55 - 1454213 _____ () C:\Program Files\wrar390d.exe

2011-11-01 17:10 - 2012-03-11 11:47 - 0005264 _____ () C:\Users\Denise\AppData\Roaming\mobile.trf

2011-06-21 09:52 - 2011-07-11 10:54 - 0000308 _____ () C:\Users\Denise\AppData\Roaming\Rim.Desktop.Exception.log

2011-05-27 14:12 - 2012-04-17 17:56 - 0003107 _____ () C:\Users\Denise\AppData\Roaming\Rim.Desktop.HttpServerSetup.log

2011-06-21 09:58 - 2012-01-26 12:21 - 0000308 _____ () C:\Users\Denise\AppData\Roaming\Rim.DesktopHelper.Exception.log

2012-01-02 16:38 - 2012-01-02 16:38 - 0000180 _____ () C:\Users\Denise\AppData\Roaming\SMSMMSConfig.txt

2010-04-27 18:36 - 2010-04-27 18:36 - 0000000 _____ () C:\Users\Denise\AppData\Roaming\wklnhst.dat

2011-11-01 17:00 - 2012-03-11 18:06 - 0009608 _____ () C:\Users\Denise\AppData\Roaming\WTGAddresses.dat

2011-11-15 20:47 - 2011-12-15 21:52 - 0000008 _____ () C:\Users\Denise\AppData\Roaming\WTGMMS.dat

2011-11-15 20:47 - 2011-12-15 21:52 - 0000008 _____ () C:\Users\Denise\AppData\Roaming\WTGMMSNotification.dat

2011-11-01 16:15 - 2011-11-01 17:00 - 0006552 _____ () C:\Users\Denise\AppData\Roaming\wtgoverride.wdb

2011-11-01 17:00 - 2012-03-11 18:06 - 0047950 _____ () C:\Users\Denise\AppData\Roaming\WTGSMS.dat

2011-06-21 09:54 - 2013-08-20 11:55 - 0017408 _____ () C:\Users\Denise\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-07-08 12:22 - 2015-07-08 12:22 - 0761791 _____ () C:\Users\Denise\AppData\Local\omesuperv2.exe

2014-11-20 18:28 - 2014-11-20 18:28 - 0000909 _____ () C:\Users\Denise\AppData\Local\recently-used.xbel

2010-08-05 14:32 - 2010-08-05 14:32 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

2010-03-13 13:46 - 2009-08-17 06:54 - 0131368 _____ () C:\ProgramData\FullRemove.exe

2010-07-23 17:23 - 2010-07-23 18:14 - 0006265 _____ () C:\ProgramData\hpzinstall.log

2009-12-05 01:03 - 2009-12-05 01:03 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log

2009-12-05 01:01 - 2009-12-05 01:02 - 0000106 _____ () C:\ProgramData\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}.log

2009-12-05 00:57 - 2009-12-05 00:58 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log

2009-12-05 01:02 - 2009-12-05 01:03 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log

2009-12-05 00:57 - 2009-12-05 00:57 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

2009-12-05 00:58 - 2009-12-05 01:01 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
 

Einige Dateien in TEMP:

====================

C:\Users\Denise\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Denise\AppData\Local\Temp\SpotifyUninstall.exe

C:\Users\Denise\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\windows\explorer.exe => Datei ist digital signiert

C:\windows\system32\winlogon.exe => Datei ist digital signiert

C:\windows\system32\wininit.exe => Datei ist digital signiert

C:\windows\system32\svchost.exe => Datei ist digital signiert

C:\windows\system32\services.exe => Datei ist digital signiert

C:\windows\system32\User32.dll => Datei ist digital signiert

C:\windows\system32\userinit.exe => Datei ist digital signiert

C:\windows\system32\rpcss.dll => Datei ist digital signiert

C:\windows\system32\dnsapi.dll

[2011-04-15 13:56] - [2015-09-18 06:51] - 0270336 ____A () D41D8CD98F00B204E9800998ECF8427E
 

C:\windows\system32\dnsapi.dll => kein Firmenname <===== ACHTUNG
 

C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-11-22 14:10
 

==================== Ende vom FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:20-11-2015

durchgeführt von Denise (2015-11-23 15:37:21)

Gestartet von C:\Users\Denise\Desktop

Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2010-03-13 12:44:43)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1072828290-3828818215-1948454868-500 - Administrator - Disabled)

Denise (S-1-5-21-1072828290-3828818215-1948454868-1000 - Administrator - Enabled) => C:\Users\Denise

fbwuser01C8 (S-1-5-21-1072828290-3828818215-1948454868-1006 - Limited - Enabled)

fbwuserBCE0 (S-1-5-21-1072828290-3828818215-1948454868-1008 - Limited - Enabled)

fbwuserE33E (S-1-5-21-1072828290-3828818215-1948454868-1007 - Limited - Enabled)

Gast (S-1-5-21-1072828290-3828818215-1948454868-501 - Limited - Disabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-1072828290-3828818215-1948454868-1004 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)

Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 2.5.1.369 - Adobe Systems Incorporated)

Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)

Adobe Photoshop CS6 (HKLM\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)

Adobe® Content Viewer (HKLM\...\com.adobe.dmp.contentviewer) (Version: 3.4.2 - Adobe Systems, Incorporated)

Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.1.0805 - Atheros)

Bamboo Dock (Version: 4.1.0 - Wacom Europe GmbH) Hidden

Bamboo Dock 3.3 (HKLM\...\Bamboo Dock) (Version: 3.3 - Wacom Co., Ltd.)

BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung)

CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)

Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.)

CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)

CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.)

CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.)

CyberLink PowerDVD 8 (HKLM\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.)

CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.)

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3304 - CyberLink Corp.)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

Easy Network Manager (HKLM\...\{A5675A9E-F073-414A-9A04-F9BCD50459D7}) (Version: 4.2.6 - Samsung)

Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.)

EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung)

EasyBits GO (HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Game Organizer) (Version:  - EasyBits Media)

Free Audio Converter version 5.0.22.128 (HKLM\...\Free Audio Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)

Free YouTube Download version 3.2.0.128 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.0.128 - DVDVideoSoft Ltd.)

Free YouTube to MP3 Converter version 3.12.0.128 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)

Game Pack (HKLM\...\{63eafc52-b963-4297-a7eb-d412944e7065}_is1) (Version: 5.3.0.10 - Oberon Media, Inc.)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)

Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)

LAME v3.98.2 for Audacity (HKLM\...\LAME for Audacity_is1) (Version:  - )

LPS 2009v 3.0 USB (HKLM\...\{BDBA9828-200B-43A0-AB4F-82DABEE64F94}_is1) (Version: LPS 2009v 3.0 USB - VVR)

Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.22.3.3 - Marvell)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Access 2003 Runtime (HKLM\...\{901C0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 39.0 (x86 de) (HKLM\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 39.0 - Mozilla)

MPEG2 Codec(libmpeg2/mad) (HKLM\...\MPEG2 Codec(libmpeg2/mad)) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Nero 7 Essentials (HKLM\...\{81CD6232-10F5-4832-B3DA-1B88B1571031}) (Version: 7.02.5851 - Nero AG)

NVIDIA GeForce Experience 2.5.15.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.46 - NVIDIA Corporation)

NVIDIA Grafiktreiber 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

OpenMG Secure Module 4.7.00 (HKLM\...\InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}) (Version: 4.7.00.12140 - Sony Corporation)

OpenMG Secure Module 4.7.00 (Version: 4.7.00.12140 - Sony Corporation) Hidden

Origin (HKLM\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)

PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden

QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)

RawTherapee Version 4.0.11 (HKLM\...\{128459AB-59A7-430A-8BD0-3D8803D50400}_is1) (Version: 4.0.11 - rawtherapee.com)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7404 - Realtek Semiconductor Corp.)

Reputation Advisor (HKLM\...\sysTPL 1.4.1.5) (Version: 1.4.1.5 - Tlapia) <==== ACHTUNG

RGSS-RTP Standard (HKLM\...\{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}) (Version: 1.0.0 - Enterbrain)

RTP for RM2K (Png, Wav, Midi, Fonts) (HKLM\...\RTP for RM2K (Png, Wav, Midi, Fonts)) (Version:  - )

SAMSUNG CDMA Modem Driver Set (HKLM\...\SAMSUNG CDMA Modem) (Version:  - )

SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )

SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )

Samsung PC Studio (Version: 3.0.0.60203 - Samsung Electronics Co., Ltd.) Hidden

Samsung PC Studio 3 USB Driver Installer (HKLM\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)

Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung)

Samsung Support Center (HKLM\...\{CCC2B140-B47A-45FA-AAE3-BD60DA41AE00}) (Version: 1.0.21 - Samsung)

Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)

SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.5.15.46 - NVIDIA Corporation) Hidden

SonicStage 4.3 (HKLM\...\{A0EB195B-5876-48E6-879D-33D4B2102610}) (Version: 4.3 - Sony Corporation)

Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)

Steam (HKLM\...\Steam) (Version:  - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

Ubisoft Game Launcher (HKLM\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)

Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )

User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

VLC media player 1.0.3 (HKLM\...\VLC media player) (Version: 1.0.3 - VideoLAN Team)

Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet IE Plugin (HKLM\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.7 - Wacom Technology Corp.)

WebTablet Netscape Plugin (HKLM\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.5 - Wacom Technology Corp.)

Winamp (nur entfernen) (HKLM\...\Winamp) (Version:  - )

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)

WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media)

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{1c492e6a-2803-5ed7-83e1-1b1d4d41eb39}\InprocServer32 -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media)

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{b2b568c8-3712-4a75-b806-4b3c2fdb06d5}\localserver32 -> C:\Users\Denise\AppData\Local\Temp\{e9513610-f218-4dda-b954-2c7e6ba7cabb}\IDriver.NonElevated.exe => (Der Dateneintrag hat 12 mehr Zeichen).
 

==================== Wiederherstellungspunkte =========================
 

22-11-2015 12:49:50 Removed Skype™ 7.8

22-11-2015 12:52:57 Removed Adobe Photoshop Lightroom 5.5.

23-11-2015 15:32:01 JRT Pre-Junkware Removal
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0125262C-427A-4DFE-BB7B-A01F82677284} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] ()

Task: {0C0875BC-0A59-4F6C-845C-E2DCFA46AADC} - System32\Tasks\{77683F70-B2A3-423A-BA32-3539EEFE97FD} => C:\Program Files\Skype\Phone\Skype.exe

Task: {2748628F-A9EB-4010-94C1-1DED464FA34B} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-10-26] (SAMSUNG Electronics)

Task: {28118F91-F1F8-4886-8DDE-FDC81BFD3923} - System32\Tasks\{84B8F68B-3411-4A64-A517-B2D70055DC51} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {2BEE9C2A-EAC7-4CC4-8026-1B7B32F55B48} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.)

Task: {2CC1AEB9-AC28-401D-A101-970B91511899} - System32\Tasks\{B750924D-E105-450D-99A8-262347CA436C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.124/de/go/help.faq.installer?LastError=1604

Task: {3DAFF145-E835-4F26-BF28-BF738E8A67B4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {66D914C6-7066-488B-999A-71725199C662} - System32\Tasks\{944669E5-57EB-4345-8984-E39585338637} => pcalua.exe -a "C:\Users\Denise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A4OKM3FQ\20101130-003-i32[1].exe" -d C:\Users\Denise\Desktop

Task: {6A6CCE9D-4827-41C6-B848-31534D6BF6D4} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-25] (Adobe Systems Incorporated)

Task: {6F306A86-1F31-4DC6-8B55-C2299A584090} - System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => pcalua.exe -a C:\Users\Denise\Downloads\jxpiinstall.exe -d "C:\Program Files\Mozilla Firefox"

Task: {76EE0824-7352-4C6C-ACBB-2CFE1D990277} - System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {77348CC6-E978-4140-BE67-F524EF7499CB} - System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {923AFCCA-19CA-4175-B4A6-0682580544E0} - System32\Tasks\{4C6C12B0-0D3D-4B96-8BD1-E1EC26827F61} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {A8D63F98-436B-4454-8A21-5A41D4DB9BE9} - System32\Tasks\{A185E869-35A1-4000-A707-3E3B3F9A74A0} => pcalua.exe -a "C:\Program Files\EA GAMES\Die Sims 2 Deluxe\EP2\CSBin\PackageInstaller.exe" -d "C:\Program Files\Mozilla Firefox" -c "C:\Users\Denise\AppData\Local\Temp\Victorian Elegance.Sims2Pack"

Task: {AA57E286-DE28-4947-9020-4F898DFF0566} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1072828290-3828818215-1948454868-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

Task: {AC68A262-7B00-44F1-9D7A-D657B4C6FF65} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)

Task: {C5521848-C645-436A-9BCC-46ADB8A42C14} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.)

Task: {CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} - System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => pcalua.exe -a E:\setup.exe -d E:\

Task: {D6323718-D6F4-4835-B531-77E2AF730D98} - System32\Tasks\Trojan Killer => C:\Program Files\GridinSoft Trojan Killer\trojankiller.exe

Task: {DC571846-99C7-433D-BF77-54A9FF587F83} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC)

Task: {EAF88417-F062-4A34-8717-3BED50A2B750} - System32\Tasks\{ED001293-CFE2-44A6-BA5C-848DAB474DD0} => pcalua.exe -a "C:\Program Files\Samsung Casual Games\Go-Go Gourmet\Uninstall.exe" -c "C:\Program Files\Samsung Casual Games\Go-Go Gourmet\install.log"

Task: {F31F4939-9458-4471-8E2B-88C1283793A6} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1072828290-3828818215-1948454868-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2011-04-15 13:56 - 2015-09-18 06:51 - 00270336 _____ () C:\windows\system32\DNSAPI.dll

2011-04-15 13:56 - 2015-09-18 06:51 - 00270336 _____ () c:\windows\system32\DNSAPI.dll

2011-04-15 13:56 - 2015-09-18 06:51 - 00270336 _____ () C:\windows\System32\DNSAPI.dll

2011-06-20 19:34 - 2011-06-12 12:55 - 00073600 _____ () c:\windows\system32\ezgosvc.dll

2010-03-13 13:47 - 2009-08-13 21:58 - 00044312 _____ () C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

2009-12-05 01:00 - 2009-07-07 19:23 - 00247152 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe

2014-05-23 01:10 - 2014-05-23 01:10 - 00693920 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll

2010-04-18 11:05 - 2009-08-16 16:06 - 00141312 _____ () C:\Program Files\WinRAR\rarext.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:373E1720

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54

AlternateDataStreams: C:\ProgramData\Temp:A42A9F39

AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE

AlternateDataStreams: C:\ProgramData\Temp:BC359956

AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1

AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D

AlternateDataStreams: C:\Users\Denise\Desktop\IMG_2589fertig.jpg:com.dropbox.attributes
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: Datenträger ist nicht mit dem Internet verbunden.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{80763932-6272-4EC3-922F-91E8FFCFF411}] => (Allow) C:\Program Files\CyberLink\PowerDirector\PDR.EXE

FirewallRules: [{1B4A8D63-D7D1-415C-803A-98E0DFD28F92}] => (Allow) C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.EXE

FirewallRules: [{2ECD0310-FA77-4FC9-92BA-C88211C2541B}] => (Allow) svchost.exe

FirewallRules: [{633D5160-7155-4043-8CAF-96CB23B39FD2}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

FirewallRules: [{0CE838CB-9BBE-4349-BB06-DFBD6A808828}] => (Allow) LPort=4481

FirewallRules: [{2180A482-9630-4E2F-82DA-5C72699BCE0A}] => (Allow) LPort=4481

FirewallRules: [{9F6E8EB7-6FB3-4A92-9D9C-04EF5914F432}] => (Allow) LPort=4482

FirewallRules: [{B5BE4872-11E6-4E5E-9CA1-7CC6C74C58E5}] => (Allow) LPort=4482

FirewallRules: [{6F909844-BB20-40E0-81B3-4B12C2D0BE54}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{9F246357-8DCE-4BA1-A55E-1EFB85B07125}] => (Allow) LPort=2869

FirewallRules: [{613B0BD8-E42A-4F3B-BBDE-0BEF819D8489}] => (Allow) LPort=1900

FirewallRules: [{E89796A6-38F1-4DBD-819B-2B40F77ED89C}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{6CEB2B97-13EB-467D-B703-628876C9D511}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{527EC58B-EC2B-42AC-94AB-E5A7C276622E}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{444A1476-A7B6-4418-934F-F1D4D8AFE561}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{E1E3BB11-C1FE-4D15-A524-E9D069A3C39E}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F6797D73-4DF6-433B-A766-9C4454B6A975}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F0DE6D99-195B-4344-A991-9DCF02A1F941}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{D09C0081-C6E4-45BA-AA76-58DDFE24CEF2}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{37A97BB5-789D-42AE-A7E0-162FCB81AA0F}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{52638EE3-8914-4932-B0DB-92BBBB3F992C}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{286D7930-A45E-4D5F-BB3F-0771995B825D}] => (Allow) C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{6B4F4303-DA4D-41A1-A52B-B60440E15B31}] => (Allow) C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{417D3A6D-E34D-4A61-A1FB-F5BF712B167C}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{55F4E51F-5690-43EA-BBD1-B5281C832641}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{E722ACE8-371A-4CB6-B6E2-BAA391D37221}] => (Allow) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{B5EB9715-5C0E-4D05-8C4A-24CF26367082}] => (Allow) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{A11B07C1-76D5-4AD6-82E5-EEFF0DA01AA3}C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{2FA9A431-CF1D-47CC-8261-5C664011D66F}C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{014963E3-F16F-44D0-B3CD-097089958639}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{7AC0F6CA-DC84-4356-B3CB-AEE83736B907}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{2AAFA724-3E9C-43EE-A5FB-658C6F7DC093}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{117BFE89-2975-4275-9DCA-5A97932B5A6E}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [TCP Query User{D8AB2B32-B7D7-4970-90B3-F47032151FEB}C:\users\denise\downloads\remotecontrolserver.exe] => (Allow) C:\users\denise\downloads\remotecontrolserver.exe

FirewallRules: [UDP Query User{DBA93071-C46D-4796-AD4F-5FEC4791510E}C:\users\denise\downloads\remotecontrolserver.exe] => (Allow) C:\users\denise\downloads\remotecontrolserver.exe

FirewallRules: [{956267F8-A470-479D-B88B-E895A54337AF}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{2E69A59B-ADB3-4887-B700-4103B19D2786}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{897A7DFF-26A6-4DE8-A55B-4B684D739469}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{FAD963BC-B554-4BB1-910E-FE3BA39522F2}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{84DD2A37-2FC4-4F49-AEC0-FD6013B816EF}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [{AB929B3D-09D2-4DAF-903F-D9D6FCFCF271}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{75D332C6-B7E9-4FEF-AE8B-42A56F5DC98E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{3847EB80-4EB5-472C-B257-7030CF957EEF}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{54806E36-CA94-400C-AC19-201AE17B1DC5}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{0197331E-5166-4E0E-A130-FBCB2BC5965F}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{6538BD51-6C13-49E8-930D-590B218A7025}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{8ACE36A0-D9EA-40AF-B50C-859AA95FE5A6}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{86312056-6F97-49E2-9260-60FD30E8EA4D}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{448DB76F-CA05-472C-8879-AF45B332A7F2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{FCFAB0B9-2DD4-4469-B028-9FABA11B64A0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{C3ED60B3-021A-4C1B-8710-0BF122E69CBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{4DC07AA8-F009-450B-AA74-797C7B3679AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{0B657F6F-74AB-4FB5-BE99-13C500E48232}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (11/22/2015 02:37:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Ausnahmecode: 0x40000015

Fehleroffset: 0x00052d24

ID des fehlerhaften Prozesses: 0x13bc

Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0

Pfad der fehlerhaften Anwendung: jucheck.exe1

Pfad des fehlerhaften Moduls: jucheck.exe2

Berichtskennung: jucheck.exe3
 

Error: (11/22/2015 00:58:36 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: CompatTelRunner.exe, Version: 10.0.10208.0, Zeitstempel: 0x55b60451

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd7a8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00032228

ID des fehlerhaften Prozesses: 0x10c4

Startzeit der fehlerhaften Anwendung: 0xCompatTelRunner.exe0

Pfad der fehlerhaften Anwendung: CompatTelRunner.exe1

Pfad des fehlerhaften Moduls: CompatTelRunner.exe2

Berichtskennung: CompatTelRunner.exe3
 

Error: (10/18/2015 01:44:41 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Ausnahmecode: 0x40000015

Fehleroffset: 0x00052d24

ID des fehlerhaften Prozesses: 0x80c

Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0

Pfad der fehlerhaften Anwendung: jucheck.exe1

Pfad des fehlerhaften Moduls: jucheck.exe2

Berichtskennung: jucheck.exe3
 

Error: (10/18/2015 01:26:22 PM) (Source: WTabletServiceCon) (EventID: 1) (User: )

Description: Prefs: Failed to get user path
 

Error: (10/17/2015 09:20:03 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 

Error: (10/17/2015 09:20:03 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:

0x8007043C
 

Error: (10/17/2015 09:04:12 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Ausnahmecode: 0x40000015

Fehleroffset: 0x00052d24

ID des fehlerhaften Prozesses: 0x948

Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0

Pfad der fehlerhaften Anwendung: jucheck.exe1

Pfad des fehlerhaften Moduls: jucheck.exe2

Berichtskennung: jucheck.exe3
 

Error: (10/17/2015 09:01:10 AM) (Source: WTabletServiceCon) (EventID: 1) (User: )

Description: Prefs: Failed to get user path
 

Error: (10/17/2015 09:00:10 AM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )

Description: Fehler bei der Installation des Kaufnachweises. 0x80070005

Teil-Pkey=2BT4J

ACID=?

Genauer Fehler[?]
 

Error: (10/08/2015 11:46:33 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AitStatic.exe, Version: 10.0.10004.0, Zeitstempel: 0x54c64d23

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xc000000d

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x1988

Startzeit der fehlerhaften Anwendung: 0xAitStatic.exe0

Pfad der fehlerhaften Anwendung: AitStatic.exe1

Pfad des fehlerhaften Moduls: AitStatic.exe2

Berichtskennung: AitStatic.exe3
 
 

Systemfehler:

=============

Error: (11/23/2015 03:32:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (11/23/2015 03:25:35 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 115.25.0.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/23/2015 03:25:35 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.211.526.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/23/2015 03:25:35 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.211.526.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/23/2015 03:25:35 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.211.526.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT59
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\SYSTEM
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/23/2015 03:16:39 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {E72EE7CA-67BB-4402-8220-3A3D574ECE95}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {E72EE7CA-67BB-4402-8220-3A3D574ECE95}1
 

        Aktionsstatus:  {E72EE7CA-67BB-4402-8220-3A3D574ECE95}8
 

        Fehlercode: {E72EE7CA-67BB-4402-8220-3A3D574ECE95}3
 

        Fehlerbeschreibung: {E72EE7CA-67BB-4402-8220-3A3D574ECE95}4
 

        Signaturversion: 2015-11-23T14:16:09.065Z1
 

        Modulversion: 2015-11-23T14:16:09.065Z2
 

Error: (11/23/2015 03:14:19 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "WerSvc" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1352
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (11/23/2015 03:14:09 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (11/23/2015 03:13:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/23/2015 03:13:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

CodeIntegrity:

===================================

  Date: 2014-02-04 23:11:25.411

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-03 10:21:01.710

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-02 13:57:26.418

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-02 13:28:30.840

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 20:34:10.497

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 20:25:55.905

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 10:23:03.700

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 09:40:10.678

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 09:31:11.760

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-29 13:00:46.224

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz

Prozentuale Nutzung des RAM: 29%

Installierter physikalischer RAM: 3036.61 MB

Verfügbarer physikalischer RAM: 2128.14 MB

Summe virtueller Speicher: 6069.48 MB

Verfügbarer virtueller Speicher: 4980.5 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:141.49 GB) (Free:13.49 GB) NTFS

Drive d: () (Fixed) (Total:141.5 GB) (Free:73.16 GB) NTFS

Drive g: (1 GB) (Removable) (Total:0.91 GB) (Free:0.9 GB) FAT
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 298.1 GB) (Disk ID: 711561A4)

Partition 1: (Not Active) - (Size=15 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (Size: 930 MB) (Disk ID: B7B9F347)

Partition 1: (Active) - (Size=930 MB) - (Type=06)
 

==================== Ende vom Addition.txt ============================

M-K-D-B

23.11.2015 18:12

Servus,

nochmal FRST bitte, aber dieses Mal so:

Starte FRST erneut. Kopiere den Inhalt der folgenden Code-Box oben in die Zeile:

Code:

dnsapi.dll
Drücke auf den Button Datei-Suche.
FRST beginnt mit dem Suchlauf und erstellt am Ende eine Textdatei Search.txt.
Poste mir deren Inhalt mit deiner nächsten Antwort.

Denise94

23.11.2015 19:36

Hier die Logdatei

Code:

Farbar Recovery Scan Tool (x86) Version:20-11-2015

durchgeführt von Denise (2015-11-23 19:26:20)

Gestartet von C:\Users\Denise\Desktop

Start-Modus: Normal
 

================== Datei-Suche: "dnsapi.dll" =============
 

C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.21673_none_e431a3c1f9eaaa8f\dnsapi.dll

[2011-04-15 13:56][2011-03-03 06:12] 0270336 ____A (Microsoft Corporation) 1F79F611109C2B97260B68FD6B4FC7DD [Datei ist digital signiert]
 

C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17570_none_e3a50618e0cfbec0\dnsapi.dll

[2011-04-15 13:56][2011-03-03 06:38] 0270336 ____N (Microsoft Corporation) B40420876B9288E0A1C8CCA8A84E5DC9 [Datei ist digital signiert]
 

C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17514_none_e3e9e6c8e09b7c76\dnsapi.dll

[2011-02-26 15:17][2010-11-20 13:18] 0270336 ____A (Microsoft Corporation) 59DF156711A76BCB993253EC6C9BBF41 [Datei ist digital signiert]
 

C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7600.20914_none_e28d2873fc92ad7b\dnsapi.dll

[2011-04-15 13:56][2011-03-03 06:50] 0270336 ____A (Microsoft Corporation) 11DD7EB4446F25C132D0D8527DDCAF4D [Datei ist digital signiert]
 

C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7600.16772_none_e1c0a9a6e3a78582\dnsapi.dll

[2011-04-15 13:56][2011-03-03 06:29] 0269824 ____A (Microsoft Corporation) 62390F4ACE9E2B63E3CA26B7F7497897 [Datei ist digital signiert]
 

C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7600.16385_none_e1b8d300e3acf8dc\dnsapi.dll

[2009-07-14 00:12][2009-07-14 02:15] 0269824 ____A (Microsoft Corporation) 6D5A49D6479EB753C7879F73A4C35E0F [Datei ist digital signiert]
 

C:\Windows\System32\dnsapi.dll

[2011-04-15 13:56][2015-09-18 06:51] 0270336 ____A () D41D8CD98F00B204E9800998ECF8427E [Datei ist nicht signiert]
 

====== Ende von Suche ======

M-K-D-B

23.11.2015 21:26

Servus,

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2013-04-10] <==== ACHTUNG

FF Extension: Kein Name - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\extensions\fg@favgenius.com.xpi [nicht gefunden]

FF Extension: search service - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{bae37ea1-7abb-47f2-8b34-44f0f489f8a2}.xpi [2015-10-05] [ist nicht signiert]

Replace: C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.21673_none_e431a3c1f9eaaa8f\dnsapi.dll C:\Windows\System32\dnsapi.dll

AlternateDataStreams: C:\ProgramData\Temp:373E1720

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54

AlternateDataStreams: C:\ProgramData\Temp:A42A9F39

AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE

AlternateDataStreams: C:\ProgramData\Temp:BC359956

AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1

AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D

RemoveProxy:

CMD: ipconfig /flushdns

CMD: netsh winsock reset

Reboot:

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Kommst du nach dem Neustart wieder ins Internet?

Schritt 2

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Beantwortung der gestellten Frage,
die beiden neuen Logdateien von FRST.

Denise94

24.11.2015 06:37

Erst einmal die Datei vom ersten Schritt

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version:20-11-2015

durchgeführt von Denise (2015-11-24 06:09:28) Run:1

Gestartet von C:\Users\Denise\Desktop

Geladene Profile: Denise (Verfügbare Profile: Denise & Gast)

Start-Modus: Normal
 

==============================================
 

fixlist Inhalt:

*****************

start

FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2013-04-10] <==== ACHTUNG

FF Extension: Kein Name - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\extensions\fg@favgenius.com.xpi [nicht gefunden]

FF Extension: search service - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{bae37ea1-7abb-47f2-8b34-44f0f489f8a2}.xpi [2015-10-05] [ist nicht signiert]

Replace: C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.21673_none_e431a3c1f9eaaa8f\dnsapi.dll C:\Windows\System32\dnsapi.dll

AlternateDataStreams: C:\ProgramData\Temp:373E1720

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54

AlternateDataStreams: C:\ProgramData\Temp:A42A9F39

AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE

AlternateDataStreams: C:\ProgramData\Temp:BC359956

AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1

AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D

RemoveProxy:

CMD: ipconfig /flushdns

CMD: netsh winsock reset

Reboot:

end

         

*****************
 

C:\Program Files\mozilla firefox\firefox.cfg => erfolgreich verschoben

C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\extensions\fg@favgenius.com.xpi => Pfad erfolgreich entfernt

C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{bae37ea1-7abb-47f2-8b34-44f0f489f8a2}.xpi => erfolgreich verschoben

C:\Windows\System32\dnsapi.dll => erfolgreich verschoben

C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.21673_none_e431a3c1f9eaaa8f\dnsapi.dll erfolgreich kopiert zu C:\Windows\System32\dnsapi.dll

C:\ProgramData\Temp => ":373E1720" ADS erfolgreich entfernt.

C:\ProgramData\Temp => ":4CF61E54" ADS erfolgreich entfernt.

C:\ProgramData\Temp => ":A42A9F39" ADS erfolgreich entfernt.

C:\ProgramData\Temp => ":ABE89FFE" ADS erfolgreich entfernt.

C:\ProgramData\Temp => ":BC359956" ADS erfolgreich entfernt.

C:\ProgramData\Temp => ":D1B5B4F1" ADS erfolgreich entfernt.

C:\ProgramData\Temp => ":E1F04E8D" ADS erfolgreich entfernt.
 

========= RemoveProxy: =========
 

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
 
 

========= Ende von RemoveProxy: =========
 
 

=========  ipconfig /flushdns =========
 
 

Windows-IP-Konfiguration
 

Der DNS-Aufl�sungscache wurde geleert.
 

========= Ende von CMD: =========
 
 

=========  netsh winsock reset =========
 
 

Der Winsock-Katalog wurde zur�ckgesetzt.

Sie m�ssen den Computer neu starten, um den Vorgang abzuschlie�en.
 
 

========= Ende von CMD: =========
 
 
 

Das System musste neu gestartet werden.
 

==== Ende vom Fixlog 06:09:31 ====

Komm jetzt auch wieder ins Internet!

Und die beiden Logdateien vom FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:23-11-2015

durchgeführt von Denise (Administrator) auf DENISE-PC (24-11-2015 06:16:21)

Gestartet von C:\Users\Denise\Desktop

Geladene Profile: Denise (Verfügbare Profile: Denise & Gast)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe

(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe

(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

() C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

() C:\Program Files\CyberLink\Shared files\RichVideo.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

() C:\Program Files\Bamboo Dock\BambooCore.exe

() C:\Program Files\Winamp\winampa.exe

(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTLite.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2014-12-11] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated)

HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)

HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)

HKLM\...\Run: [RemoteControl8] => C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)

HKLM\...\Run: [PDVD8LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)

HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] => C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-07-21] (CyberLink Corp.)

HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-02-26] (Nero AG)

HKLM\...\Run: [BambooCore] => C:\Program Files\Bamboo Dock\BambooCore.exe [646744 2014-11-20] ()

HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\Winampa.exe [12288 2003-04-17] ()

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)

HKLM\...\Run: [MouseDriver] => C:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-29] (Microsoft Corporation)

HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2688920 2014-05-26] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)

HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-04] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [3638256 2015-09-11] (Electronic Arts)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: G - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {0afaf239-5233-11e1-9281-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {5c1700f8-0a8e-11e0-89ea-00245467eac5} - F:\Autorun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {88771927-5bca-11e1-9d6d-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {8ed8c5b8-1d1f-11e3-a810-00245467eac5} - G:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {929343ec-dae9-11df-91fe-00245467eac5} - G:\LaunchU3.exe -a

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {98b26fee-6c31-11e1-b6ca-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {98b26ff2-6c31-11e1-b6ca-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {9d0d55be-049b-11e1-b91f-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {9d0d55c7-049b-11e1-b91f-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {a3b0880f-92f1-11e1-92ac-00245467eac5} - G:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {ac8e3a14-72f9-11e0-8ea1-00245467eac5} - F:\Autorun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {df1fb56f-8b3a-11e3-86dc-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {f2592001-7340-11e1-960d-00245467eac5} - H:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\WLXPGSS.SCR [302448 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{6740F581-8B96-4B73-9C1B-74E80ABB4E31}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{89937394-FABE-4827-A000-3CA618D78EDF}: [DhcpNameServer] 139.7.30.126 139.7.30.125

Tcpip\..\Interfaces\{D15BEF43-E20E-4980-8981-90385BBA009A}: [NameServer] 8.8.8.8

Tcpip\..\Interfaces\{FAA164E7-8D0A-412C-BC98-DE239EC26F45}: [DhcpNameServer] 192.168.0.1 192.168.0.2
 

Internet Explorer:

==================

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn

SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-31] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-31] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx

DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-09] (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Keine Datei
 

FireFox:

========

FF ProfilePath: C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018

FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-25] ()

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-31] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-31] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]

FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.5 -> C:\Program Files\TabletPlugins\npwacom.dll [2010-09-02] (Wacom, Inc.)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-05-26] (Adobe Systems)

FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin HKU\S-1-5-21-1072828290-3828818215-1948454868-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-09-27] ()

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-11-18] (Apple Inc.)

FF Extension: YouTube Unblocker - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\youtubeunblocker@unblocker.yt [2015-08-05]

FF Extension: Adblock Plus - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-25]
 

Chrome: 

=======

CHR Profile: C:\Users\Denise\AppData\Local\Google\Chrome\User Data\Default

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <kein Path\update_url>
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ezGOSvc; C:\windows\system32\ezGOSvc.dll [73600 2011-06-12] ()

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921392 2015-10-04] (NVIDIA Corporation)

S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]

S3 MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation) [Datei ist nicht signiert]

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)

S3 npggsvc; C:\windows\system32\GameMon.des [3461904 2010-01-12] (INCA Internet Co., Ltd.) [Datei ist nicht signiert]

R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-10-04] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4325680 2015-10-04] (NVIDIA Corporation)

R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] ()

S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2057736 2015-09-11] (Electronic Arts)

S3 PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] () [Datei ist nicht signiert]

R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()

S3 SonicStage Back-End Service; C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe [112184 2007-02-05] (Sony Corporation)

S3 SPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation) [Datei ist nicht signiert]

S3 SSScsiSV; C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe [75320 2007-02-05] (Sony Corporation)

S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [567064 2014-08-19] (Wacom Technology, Corp.)

S4 Agsvepehe; kein ImagePath

S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [X]

S2 RoxLiveShare9; "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 athr; C:\windows\System32\DRIVERS\athr.sys [2228224 2011-12-13] (Atheros Communications, Inc.) [Datei ist nicht signiert]

R2 atksgt; C:\windows\System32\DRIVERS\atksgt.sys [83872 2011-10-01] ()

S3 hamachi; C:\windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

S3 hidkmdf; C:\windows\System32\DRIVERS\hidkmdf.sys [12088 2014-08-06] (Windows (R) Win 7 DDK provider)

R3 KMWDFILTERx86; C:\windows\System32\DRIVERS\KMWDFILTER.sys [25088 2009-04-29] (Windows (R) Codename Longhorn DDK provider)

R2 lirsgt; C:\windows\System32\DRIVERS\lirsgt.sys [25888 2011-10-01] ()

R3 LVUSBSta; C:\windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)

R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)

R1 MpKsl3625e2bd; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{378E663A-D49E-486C-A32F-4376EC840978}\MpKsl3625e2bd.sys [39168 2015-11-24] (Microsoft Corporation)

S3 Netaapl; C:\windows\System32\DRIVERS\netaapl.sys [18432 2010-04-19] (Apple Inc.) [Datei ist nicht signiert]

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18736 2015-10-04] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [44840 2015-08-11] (NVIDIA Corporation)

S3 pepifilter; C:\windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)

S3 PID_PEPI; C:\windows\System32\DRIVERS\LV302V32.SYS [2570520 2008-07-26] (Logitech Inc.)

R3 seehcri; C:\windows\System32\DRIVERS\seehcri.sys [27632 2010-10-29] (Sony Ericsson Mobile Communications) [Datei ist nicht signiert]

S3 SipIMNDI; C:\windows\System32\DRIVERS\SipIMNDI.sys [24352 2009-10-15] (T-Systems International GmbH)

R0 sptd; C:\windows\System32\Drivers\sptd.sys [691696 2010-12-18] () [Datei ist nicht signiert]

S3 ssm_bus; C:\windows\System32\DRIVERS\ssm_bus.sys [58320 2005-08-30] (MCCI)

S3 ssm_mdfl; C:\windows\System32\DRIVERS\ssm_mdfl.sys [8336 2005-08-30] (MCCI)

S3 ssm_mdm; C:\windows\System32\DRIVERS\ssm_mdm.sys [94000 2005-08-30] (MCCI)

S3 t_mouse.sys; C:\windows\System32\DRIVERS\t_mouse.sys [5120 2012-12-19] ()

S3 USBAAPL; C:\windows\System32\Drivers\usbaapl.sys [41984 2011-02-18] (Apple, Inc.) [Datei ist nicht signiert]

S3 WacHidRouter; C:\windows\System32\DRIVERS\wachidrouter.sys [85304 2014-08-06] (Wacom Technology)

S3 wacomrouterfilter; C:\windows\System32\DRIVERS\wacomrouterfilter.sys [13112 2014-08-06] (Wacom Technology)

R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

U3 abvhvrem; C:\windows\system32\Drivers\abvhvrem.sys [0 ] (Microsoft Corporation) <==== ACHTUNG (Null Byte Datei/Ordner)

S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [X]

S3 GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [X]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S1 mvgordih; \??\C:\windows\system32\drivers\mvgordih.sys [X]

S3 taphss6; system32\DRIVERS\taphss6.sys [X]

S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]

S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]

U2 wuaserv; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

NETSVC: ezGOSvc -> C:\windows\system32\ezGOSvc.dll ()
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-24 06:16 - 2015-11-24 06:16 - 00000000 ____D C:\Users\Denise\Desktop\FRST-OlderVersion

2015-11-23 19:26 - 2015-11-23 19:31 - 00001946 _____ C:\Users\Denise\Desktop\Search.txt

2015-11-23 15:37 - 2015-11-23 15:37 - 00043366 _____ C:\Users\Denise\Desktop\Addition.txt

2015-11-23 15:35 - 2015-11-24 06:20 - 00024705 _____ C:\Users\Denise\Desktop\FRST.txt

2015-11-23 15:34 - 2015-11-23 15:34 - 00092838 _____ C:\Users\Denise\Desktop\JRT.txt

2015-11-23 15:11 - 2015-11-23 15:13 - 00000000 ____D C:\AdwCleaner

2015-11-23 15:07 - 2015-11-23 15:06 - 01599080 _____ (Malwarebytes) C:\Users\Denise\Desktop\JRT.exe

2015-11-23 15:05 - 2015-11-23 15:05 - 22908888 _____ (Malwarebytes ) C:\Users\Denise\Desktop\mbam-setup-2.2.0.1024.exe

2015-11-23 15:03 - 2015-11-23 15:04 - 01733632 _____ C:\Users\Denise\Desktop\AdwCleaner_5.022.exe

2015-11-23 13:19 - 2015-11-23 13:20 - 04397752 _____ (Kaspersky Lab ZAO) C:\Users\Denise\Desktop\tdsskiller.exe

2015-11-22 13:11 - 2015-11-24 06:16 - 00000000 ____D C:\FRST

2015-11-22 13:09 - 2015-11-24 06:16 - 01718784 _____ (Farbar) C:\Users\Denise\Desktop\FRST.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-24 06:16 - 2009-12-05 00:54 - 01646364 _____ C:\windows\WindowsUpdate.log

2015-11-24 06:12 - 2010-03-13 13:44 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite

2015-11-24 06:11 - 2015-08-27 12:34 - 00005139 _____ C:\windows\setupact.log

2015-11-24 06:11 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT

2015-11-24 06:10 - 2009-07-14 05:34 - 00023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-11-24 06:10 - 2009-07-14 05:34 - 00023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-11-24 06:09 - 2015-06-03 20:40 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-11-24 06:08 - 2012-04-09 11:28 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2015-11-23 15:23 - 2009-07-26 21:06 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI

2015-11-23 15:15 - 2015-08-27 12:33 - 00032624 _____ C:\windows\PFRO.log

2015-11-22 14:37 - 2010-07-23 15:40 - 00000000 ____D C:\Users\Denise\AppData\Local\CrashDumps

2015-11-22 12:55 - 2010-03-13 13:45 - 00000000 ____D C:\Program Files\Adobe

2015-11-22 12:52 - 2013-04-08 08:30 - 00000000 ____D C:\Program Files\Common Files\Skype

2015-11-22 12:52 - 2012-11-22 14:34 - 00000000 ___RD C:\Program Files\Skype

2015-11-22 12:52 - 2010-08-05 14:06 - 00000000 ____D C:\ProgramData\Skype
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2010-04-18 11:02 - 2009-09-24 08:55 - 1454213 _____ () C:\Program Files\wrar390d.exe

2011-11-01 17:10 - 2012-03-11 11:47 - 0005264 _____ () C:\Users\Denise\AppData\Roaming\mobile.trf

2011-06-21 09:52 - 2011-07-11 10:54 - 0000308 _____ () C:\Users\Denise\AppData\Roaming\Rim.Desktop.Exception.log

2011-05-27 14:12 - 2012-04-17 17:56 - 0003107 _____ () C:\Users\Denise\AppData\Roaming\Rim.Desktop.HttpServerSetup.log

2011-06-21 09:58 - 2012-01-26 12:21 - 0000308 _____ () C:\Users\Denise\AppData\Roaming\Rim.DesktopHelper.Exception.log

2012-01-02 16:38 - 2012-01-02 16:38 - 0000180 _____ () C:\Users\Denise\AppData\Roaming\SMSMMSConfig.txt

2010-04-27 18:36 - 2010-04-27 18:36 - 0000000 _____ () C:\Users\Denise\AppData\Roaming\wklnhst.dat

2011-11-01 17:00 - 2012-03-11 18:06 - 0009608 _____ () C:\Users\Denise\AppData\Roaming\WTGAddresses.dat

2011-11-15 20:47 - 2011-12-15 21:52 - 0000008 _____ () C:\Users\Denise\AppData\Roaming\WTGMMS.dat

2011-11-15 20:47 - 2011-12-15 21:52 - 0000008 _____ () C:\Users\Denise\AppData\Roaming\WTGMMSNotification.dat

2011-11-01 16:15 - 2011-11-01 17:00 - 0006552 _____ () C:\Users\Denise\AppData\Roaming\wtgoverride.wdb

2011-11-01 17:00 - 2012-03-11 18:06 - 0047950 _____ () C:\Users\Denise\AppData\Roaming\WTGSMS.dat

2011-06-21 09:54 - 2013-08-20 11:55 - 0017408 _____ () C:\Users\Denise\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-07-08 12:22 - 2015-07-08 12:22 - 0761791 _____ () C:\Users\Denise\AppData\Local\omesuperv2.exe

2014-11-20 18:28 - 2014-11-20 18:28 - 0000909 _____ () C:\Users\Denise\AppData\Local\recently-used.xbel

2010-08-05 14:32 - 2010-08-05 14:32 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

2010-03-13 13:46 - 2009-08-17 06:54 - 0131368 _____ () C:\ProgramData\FullRemove.exe

2010-07-23 17:23 - 2010-07-23 18:14 - 0006265 _____ () C:\ProgramData\hpzinstall.log

2009-12-05 01:03 - 2009-12-05 01:03 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log

2009-12-05 01:01 - 2009-12-05 01:02 - 0000106 _____ () C:\ProgramData\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}.log

2009-12-05 00:57 - 2009-12-05 00:58 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log

2009-12-05 01:02 - 2009-12-05 01:03 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log

2009-12-05 00:57 - 2009-12-05 00:57 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

2009-12-05 00:58 - 2009-12-05 01:01 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
 

Einige Dateien in TEMP:

====================

C:\Users\Denise\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Denise\AppData\Local\Temp\SpotifyUninstall.exe

C:\Users\Denise\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\windows\explorer.exe => Datei ist digital signiert

C:\windows\system32\winlogon.exe => Datei ist digital signiert

C:\windows\system32\wininit.exe => Datei ist digital signiert

C:\windows\system32\svchost.exe => Datei ist digital signiert

C:\windows\system32\services.exe => Datei ist digital signiert

C:\windows\system32\User32.dll => Datei ist digital signiert

C:\windows\system32\userinit.exe => Datei ist digital signiert

C:\windows\system32\rpcss.dll => Datei ist digital signiert

C:\windows\system32\dnsapi.dll => Datei ist digital signiert

C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-11-22 14:10
 

==================== Ende vom FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:23-11-2015

durchgeführt von Denise (2015-11-24 06:21:34)

Gestartet von C:\Users\Denise\Desktop

Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2010-03-13 12:44:43)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1072828290-3828818215-1948454868-500 - Administrator - Disabled)

Denise (S-1-5-21-1072828290-3828818215-1948454868-1000 - Administrator - Enabled) => C:\Users\Denise

fbwuser01C8 (S-1-5-21-1072828290-3828818215-1948454868-1006 - Limited - Enabled)

fbwuserBCE0 (S-1-5-21-1072828290-3828818215-1948454868-1008 - Limited - Enabled)

fbwuserE33E (S-1-5-21-1072828290-3828818215-1948454868-1007 - Limited - Enabled)

Gast (S-1-5-21-1072828290-3828818215-1948454868-501 - Limited - Disabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-1072828290-3828818215-1948454868-1004 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)

Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 2.5.1.369 - Adobe Systems Incorporated)

Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)

Adobe Photoshop CS6 (HKLM\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)

Adobe® Content Viewer (HKLM\...\com.adobe.dmp.contentviewer) (Version: 3.4.2 - Adobe Systems, Incorporated)

Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.1.0805 - Atheros)

Bamboo Dock (Version: 4.1.0 - Wacom Europe GmbH) Hidden

Bamboo Dock 3.3 (HKLM\...\Bamboo Dock) (Version: 3.3 - Wacom Co., Ltd.)

BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung)

CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)

Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.)

CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)

CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.)

CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.)

CyberLink PowerDVD 8 (HKLM\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.)

CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.)

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3304 - CyberLink Corp.)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

Easy Network Manager (HKLM\...\{A5675A9E-F073-414A-9A04-F9BCD50459D7}) (Version: 4.2.6 - Samsung)

Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.)

EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung)

EasyBits GO (HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Game Organizer) (Version:  - EasyBits Media)

Free Audio Converter version 5.0.22.128 (HKLM\...\Free Audio Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)

Free YouTube Download version 3.2.0.128 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.0.128 - DVDVideoSoft Ltd.)

Free YouTube to MP3 Converter version 3.12.0.128 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)

Game Pack (HKLM\...\{63eafc52-b963-4297-a7eb-d412944e7065}_is1) (Version: 5.3.0.10 - Oberon Media, Inc.)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)

Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)

LAME v3.98.2 for Audacity (HKLM\...\LAME for Audacity_is1) (Version:  - )

LPS 2009v 3.0 USB (HKLM\...\{BDBA9828-200B-43A0-AB4F-82DABEE64F94}_is1) (Version: LPS 2009v 3.0 USB - VVR)

Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.22.3.3 - Marvell)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Access 2003 Runtime (HKLM\...\{901C0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 39.0 (x86 de) (HKLM\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 39.0 - Mozilla)

MPEG2 Codec(libmpeg2/mad) (HKLM\...\MPEG2 Codec(libmpeg2/mad)) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Nero 7 Essentials (HKLM\...\{81CD6232-10F5-4832-B3DA-1B88B1571031}) (Version: 7.02.5851 - Nero AG)

NVIDIA GeForce Experience 2.5.15.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.46 - NVIDIA Corporation)

NVIDIA Grafiktreiber 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

OpenMG Secure Module 4.7.00 (HKLM\...\InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}) (Version: 4.7.00.12140 - Sony Corporation)

OpenMG Secure Module 4.7.00 (Version: 4.7.00.12140 - Sony Corporation) Hidden

Origin (HKLM\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)

PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden

QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)

RawTherapee Version 4.0.11 (HKLM\...\{128459AB-59A7-430A-8BD0-3D8803D50400}_is1) (Version: 4.0.11 - rawtherapee.com)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7404 - Realtek Semiconductor Corp.)

Reputation Advisor (HKLM\...\sysTPL 1.4.1.5) (Version: 1.4.1.5 - Tlapia) <==== ACHTUNG

RGSS-RTP Standard (HKLM\...\{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}) (Version: 1.0.0 - Enterbrain)

RTP for RM2K (Png, Wav, Midi, Fonts) (HKLM\...\RTP for RM2K (Png, Wav, Midi, Fonts)) (Version:  - )

SAMSUNG CDMA Modem Driver Set (HKLM\...\SAMSUNG CDMA Modem) (Version:  - )

SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )

SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )

Samsung PC Studio (Version: 3.0.0.60203 - Samsung Electronics Co., Ltd.) Hidden

Samsung PC Studio 3 USB Driver Installer (HKLM\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)

Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung)

Samsung Support Center (HKLM\...\{CCC2B140-B47A-45FA-AAE3-BD60DA41AE00}) (Version: 1.0.21 - Samsung)

Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)

SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.5.15.46 - NVIDIA Corporation) Hidden

SonicStage 4.3 (HKLM\...\{A0EB195B-5876-48E6-879D-33D4B2102610}) (Version: 4.3 - Sony Corporation)

Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)

Steam (HKLM\...\Steam) (Version:  - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

Ubisoft Game Launcher (HKLM\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)

Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )

User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

VLC media player 1.0.3 (HKLM\...\VLC media player) (Version: 1.0.3 - VideoLAN Team)

Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet IE Plugin (HKLM\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.7 - Wacom Technology Corp.)

WebTablet Netscape Plugin (HKLM\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.5 - Wacom Technology Corp.)

Winamp (nur entfernen) (HKLM\...\Winamp) (Version:  - )

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)

WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media)

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{1c492e6a-2803-5ed7-83e1-1b1d4d41eb39}\InprocServer32 -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media)

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{b2b568c8-3712-4a75-b806-4b3c2fdb06d5}\localserver32 -> C:\Users\Denise\AppData\Local\Temp\{e9513610-f218-4dda-b954-2c7e6ba7cabb}\IDriver.NonElevated.exe => (Der Dateneintrag hat 12 mehr Zeichen).
 

==================== Wiederherstellungspunkte =========================
 

22-11-2015 12:49:50 Removed Skype™ 7.8

22-11-2015 12:52:57 Removed Adobe Photoshop Lightroom 5.5.

23-11-2015 15:32:01 JRT Pre-Junkware Removal
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0125262C-427A-4DFE-BB7B-A01F82677284} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] ()

Task: {0C0875BC-0A59-4F6C-845C-E2DCFA46AADC} - System32\Tasks\{77683F70-B2A3-423A-BA32-3539EEFE97FD} => C:\Program Files\Skype\Phone\Skype.exe

Task: {2748628F-A9EB-4010-94C1-1DED464FA34B} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-10-26] (SAMSUNG Electronics)

Task: {28118F91-F1F8-4886-8DDE-FDC81BFD3923} - System32\Tasks\{84B8F68B-3411-4A64-A517-B2D70055DC51} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {2BEE9C2A-EAC7-4CC4-8026-1B7B32F55B48} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.)

Task: {2CC1AEB9-AC28-401D-A101-970B91511899} - System32\Tasks\{B750924D-E105-450D-99A8-262347CA436C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.124/de/go/help.faq.installer?LastError=1604

Task: {3DAFF145-E835-4F26-BF28-BF738E8A67B4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {66D914C6-7066-488B-999A-71725199C662} - System32\Tasks\{944669E5-57EB-4345-8984-E39585338637} => pcalua.exe -a "C:\Users\Denise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A4OKM3FQ\20101130-003-i32[1].exe" -d C:\Users\Denise\Desktop

Task: {6A6CCE9D-4827-41C6-B848-31534D6BF6D4} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-25] (Adobe Systems Incorporated)

Task: {6F306A86-1F31-4DC6-8B55-C2299A584090} - System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => pcalua.exe -a C:\Users\Denise\Downloads\jxpiinstall.exe -d "C:\Program Files\Mozilla Firefox"

Task: {76EE0824-7352-4C6C-ACBB-2CFE1D990277} - System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {77348CC6-E978-4140-BE67-F524EF7499CB} - System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {923AFCCA-19CA-4175-B4A6-0682580544E0} - System32\Tasks\{4C6C12B0-0D3D-4B96-8BD1-E1EC26827F61} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {A8D63F98-436B-4454-8A21-5A41D4DB9BE9} - System32\Tasks\{A185E869-35A1-4000-A707-3E3B3F9A74A0} => pcalua.exe -a "C:\Program Files\EA GAMES\Die Sims 2 Deluxe\EP2\CSBin\PackageInstaller.exe" -d "C:\Program Files\Mozilla Firefox" -c "C:\Users\Denise\AppData\Local\Temp\Victorian Elegance.Sims2Pack"

Task: {AA57E286-DE28-4947-9020-4F898DFF0566} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1072828290-3828818215-1948454868-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

Task: {AC68A262-7B00-44F1-9D7A-D657B4C6FF65} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)

Task: {C5521848-C645-436A-9BCC-46ADB8A42C14} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.)

Task: {CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} - System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => pcalua.exe -a E:\setup.exe -d E:\

Task: {D6323718-D6F4-4835-B531-77E2AF730D98} - System32\Tasks\Trojan Killer => C:\Program Files\GridinSoft Trojan Killer\trojankiller.exe

Task: {DC571846-99C7-433D-BF77-54A9FF587F83} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC)

Task: {EAF88417-F062-4A34-8717-3BED50A2B750} - System32\Tasks\{ED001293-CFE2-44A6-BA5C-848DAB474DD0} => pcalua.exe -a "C:\Program Files\Samsung Casual Games\Go-Go Gourmet\Uninstall.exe" -c "C:\Program Files\Samsung Casual Games\Go-Go Gourmet\install.log"

Task: {F31F4939-9458-4471-8E2B-88C1283793A6} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1072828290-3828818215-1948454868-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-02-25 21:14 - 2015-02-04 03:05 - 00106640 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll

2009-12-05 00:56 - 2010-04-20 13:26 - 00300912 _____ () C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe

2009-12-05 00:56 - 2010-04-16 13:11 - 00155648 _____ () C:\Program Files\Samsung\Samsung Update Plus\HMXML.dll

2011-06-20 19:34 - 2011-06-12 12:55 - 00073600 _____ () c:\windows\system32\ezgosvc.dll

2010-03-13 13:47 - 2009-08-13 21:58 - 00044312 _____ () C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

2009-12-05 01:00 - 2009-07-07 19:23 - 00247152 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe

2015-04-01 19:39 - 2015-10-04 09:24 - 00012080 _____ () C:\Program Files\NVIDIA Corporation\Update Core\detoured.dll

2014-05-23 01:10 - 2014-05-23 01:10 - 00693920 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll

2010-04-18 11:05 - 2009-08-16 16:06 - 00141312 _____ () C:\Program Files\WinRAR\rarext.dll

2009-06-03 12:59 - 2009-06-03 12:59 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll

2009-06-03 12:59 - 2009-06-03 12:59 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll

2010-07-28 22:58 - 2014-11-20 09:06 - 00646744 _____ () C:\Program Files\Bamboo Dock\BambooCore.exe

2003-04-17 07:54 - 2003-04-17 07:54 - 00012288 _____ () C:\Program Files\Winamp\winampa.exe

2014-05-26 04:52 - 2014-05-26 04:52 - 32733088 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\HEX\libcef.dll

2011-03-14 13:57 - 2014-08-19 20:12 - 01019672 _____ () C:\Program Files\Tablet\Pen\libxml2.dll

2014-05-23 01:10 - 2014-05-23 01:10 - 05341856 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2014-05-12 21:22 - 2014-05-12 21:22 - 02217128 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\plugins\ExchangePlugin\ExManCoreLib\ExManZxpSign.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\Denise\Desktop\IMG_2589fertig.jpg:com.dropbox.attributes
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: 192.168.0.1 - 192.168.0.2

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{80763932-6272-4EC3-922F-91E8FFCFF411}] => (Allow) C:\Program Files\CyberLink\PowerDirector\PDR.EXE

FirewallRules: [{1B4A8D63-D7D1-415C-803A-98E0DFD28F92}] => (Allow) C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.EXE

FirewallRules: [{2ECD0310-FA77-4FC9-92BA-C88211C2541B}] => (Allow) svchost.exe

FirewallRules: [{633D5160-7155-4043-8CAF-96CB23B39FD2}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

FirewallRules: [{0CE838CB-9BBE-4349-BB06-DFBD6A808828}] => (Allow) LPort=4481

FirewallRules: [{2180A482-9630-4E2F-82DA-5C72699BCE0A}] => (Allow) LPort=4481

FirewallRules: [{9F6E8EB7-6FB3-4A92-9D9C-04EF5914F432}] => (Allow) LPort=4482

FirewallRules: [{B5BE4872-11E6-4E5E-9CA1-7CC6C74C58E5}] => (Allow) LPort=4482

FirewallRules: [{6F909844-BB20-40E0-81B3-4B12C2D0BE54}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{9F246357-8DCE-4BA1-A55E-1EFB85B07125}] => (Allow) LPort=2869

FirewallRules: [{613B0BD8-E42A-4F3B-BBDE-0BEF819D8489}] => (Allow) LPort=1900

FirewallRules: [{E89796A6-38F1-4DBD-819B-2B40F77ED89C}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{6CEB2B97-13EB-467D-B703-628876C9D511}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{527EC58B-EC2B-42AC-94AB-E5A7C276622E}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{444A1476-A7B6-4418-934F-F1D4D8AFE561}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{E1E3BB11-C1FE-4D15-A524-E9D069A3C39E}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F6797D73-4DF6-433B-A766-9C4454B6A975}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F0DE6D99-195B-4344-A991-9DCF02A1F941}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{D09C0081-C6E4-45BA-AA76-58DDFE24CEF2}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{37A97BB5-789D-42AE-A7E0-162FCB81AA0F}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{52638EE3-8914-4932-B0DB-92BBBB3F992C}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{286D7930-A45E-4D5F-BB3F-0771995B825D}] => (Allow) C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{6B4F4303-DA4D-41A1-A52B-B60440E15B31}] => (Allow) C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{417D3A6D-E34D-4A61-A1FB-F5BF712B167C}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{55F4E51F-5690-43EA-BBD1-B5281C832641}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{E722ACE8-371A-4CB6-B6E2-BAA391D37221}] => (Allow) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{B5EB9715-5C0E-4D05-8C4A-24CF26367082}] => (Allow) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{A11B07C1-76D5-4AD6-82E5-EEFF0DA01AA3}C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{2FA9A431-CF1D-47CC-8261-5C664011D66F}C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{014963E3-F16F-44D0-B3CD-097089958639}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{7AC0F6CA-DC84-4356-B3CB-AEE83736B907}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{2AAFA724-3E9C-43EE-A5FB-658C6F7DC093}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{117BFE89-2975-4275-9DCA-5A97932B5A6E}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [TCP Query User{D8AB2B32-B7D7-4970-90B3-F47032151FEB}C:\users\denise\downloads\remotecontrolserver.exe] => (Allow) C:\users\denise\downloads\remotecontrolserver.exe

FirewallRules: [UDP Query User{DBA93071-C46D-4796-AD4F-5FEC4791510E}C:\users\denise\downloads\remotecontrolserver.exe] => (Allow) C:\users\denise\downloads\remotecontrolserver.exe

FirewallRules: [{956267F8-A470-479D-B88B-E895A54337AF}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{2E69A59B-ADB3-4887-B700-4103B19D2786}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{897A7DFF-26A6-4DE8-A55B-4B684D739469}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{FAD963BC-B554-4BB1-910E-FE3BA39522F2}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{84DD2A37-2FC4-4F49-AEC0-FD6013B816EF}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [{AB929B3D-09D2-4DAF-903F-D9D6FCFCF271}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{75D332C6-B7E9-4FEF-AE8B-42A56F5DC98E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{3847EB80-4EB5-472C-B257-7030CF957EEF}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{54806E36-CA94-400C-AC19-201AE17B1DC5}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{0197331E-5166-4E0E-A130-FBCB2BC5965F}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{6538BD51-6C13-49E8-930D-590B218A7025}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{8ACE36A0-D9EA-40AF-B50C-859AA95FE5A6}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{86312056-6F97-49E2-9260-60FD30E8EA4D}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{448DB76F-CA05-472C-8879-AF45B332A7F2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{FCFAB0B9-2DD4-4469-B028-9FABA11B64A0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{C3ED60B3-021A-4C1B-8710-0BF122E69CBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{4DC07AA8-F009-450B-AA74-797C7B3679AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{0B657F6F-74AB-4FB5-BE99-13C500E48232}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (11/22/2015 02:37:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Ausnahmecode: 0x40000015

Fehleroffset: 0x00052d24

ID des fehlerhaften Prozesses: 0x13bc

Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0

Pfad der fehlerhaften Anwendung: jucheck.exe1

Pfad des fehlerhaften Moduls: jucheck.exe2

Berichtskennung: jucheck.exe3
 

Error: (11/22/2015 00:58:36 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: CompatTelRunner.exe, Version: 10.0.10208.0, Zeitstempel: 0x55b60451

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd7a8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00032228

ID des fehlerhaften Prozesses: 0x10c4

Startzeit der fehlerhaften Anwendung: 0xCompatTelRunner.exe0

Pfad der fehlerhaften Anwendung: CompatTelRunner.exe1

Pfad des fehlerhaften Moduls: CompatTelRunner.exe2

Berichtskennung: CompatTelRunner.exe3
 

Error: (10/18/2015 01:44:41 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Ausnahmecode: 0x40000015

Fehleroffset: 0x00052d24

ID des fehlerhaften Prozesses: 0x80c

Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0

Pfad der fehlerhaften Anwendung: jucheck.exe1

Pfad des fehlerhaften Moduls: jucheck.exe2

Berichtskennung: jucheck.exe3
 

Error: (10/18/2015 01:26:22 PM) (Source: WTabletServiceCon) (EventID: 1) (User: )

Description: Prefs: Failed to get user path
 

Error: (10/17/2015 09:20:03 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 

Error: (10/17/2015 09:20:03 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:

0x8007043C
 

Error: (10/17/2015 09:04:12 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1

Ausnahmecode: 0x40000015

Fehleroffset: 0x00052d24

ID des fehlerhaften Prozesses: 0x948

Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0

Pfad der fehlerhaften Anwendung: jucheck.exe1

Pfad des fehlerhaften Moduls: jucheck.exe2

Berichtskennung: jucheck.exe3
 

Error: (10/17/2015 09:01:10 AM) (Source: WTabletServiceCon) (EventID: 1) (User: )

Description: Prefs: Failed to get user path
 

Error: (10/17/2015 09:00:10 AM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )

Description: Fehler bei der Installation des Kaufnachweises. 0x80070005

Teil-Pkey=2BT4J

ACID=?

Genauer Fehler[?]
 

Error: (10/08/2015 11:46:33 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AitStatic.exe, Version: 10.0.10004.0, Zeitstempel: 0x54c64d23

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xc000000d

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x1988

Startzeit der fehlerhaften Anwendung: 0xAitStatic.exe0

Pfad der fehlerhaften Anwendung: AitStatic.exe1

Pfad des fehlerhaften Moduls: AitStatic.exe2

Berichtskennung: AitStatic.exe3
 
 

Systemfehler:

=============

Error: (11/23/2015 03:32:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (11/23/2015 03:25:35 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 115.25.0.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/23/2015 03:25:35 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.211.526.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/23/2015 03:25:35 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.211.526.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/23/2015 03:25:35 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.211.526.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT59
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\SYSTEM
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (11/23/2015 03:16:39 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )

Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %Trojan:Win32/Patched.AO60 ein schwerwiegender Fehler festgestellt.
 

Weitere Informationen finden Sie hier:

%Trojan:Win32/Patched.AO603
 

        Name: Trojan:Win32/Patched.AO
 

        ID: 2147706672
 

        Schweregrad: %Trojan:Win32/Patched.AO600
 

        Kategorie: %Trojan:Win32/Patched.AO602
 

        Pfad: 4.8.0204.02
 

        Ursprung der Erkennung: 4.8.0204.04
 

        Typ der Erkennung: 4.8.0204.08
 

        Quelle der Erkennung: %Trojan:Win32/Patched.AO608
 

        Benutzer: {E72EE7CA-67BB-4402-8220-3A3D574ECE95}9
 

        Prozessname: %Trojan:Win32/Patched.AO609
 

        Aktion: {E72EE7CA-67BB-4402-8220-3A3D574ECE95}1
 

        Aktionsstatus:  {E72EE7CA-67BB-4402-8220-3A3D574ECE95}8
 

        Fehlercode: {E72EE7CA-67BB-4402-8220-3A3D574ECE95}3
 

        Fehlerbeschreibung: {E72EE7CA-67BB-4402-8220-3A3D574ECE95}4
 

        Signaturversion: 2015-11-23T14:16:09.065Z1
 

        Modulversion: 2015-11-23T14:16:09.065Z2
 

Error: (11/23/2015 03:14:19 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "WerSvc" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1352
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (11/23/2015 03:14:09 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (11/23/2015 03:13:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/23/2015 03:13:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

CodeIntegrity:

===================================

  Date: 2014-02-04 23:11:25.411

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-03 10:21:01.710

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-02 13:57:26.418

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-02 13:28:30.840

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 20:34:10.497

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 20:25:55.905

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 10:23:03.700

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 09:40:10.678

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 09:31:11.760

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-29 13:00:46.224

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz

Prozentuale Nutzung des RAM: 49%

Installierter physikalischer RAM: 3036.61 MB

Verfügbarer physikalischer RAM: 1526.71 MB

Summe virtueller Speicher: 6069.48 MB

Verfügbarer virtueller Speicher: 4492.25 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:141.49 GB) (Free:12.72 GB) NTFS

Drive d: () (Fixed) (Total:141.5 GB) (Free:73.16 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 298.1 GB) (Disk ID: 711561A4)

Partition 1: (Not Active) - (Size=15 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)
 

==================== Ende vom Addition.txt ============================

M-K-D-B

24.11.2015 15:23

Servus,

freut mich, dass das Internet wieder geht. :)

Wir müssen aber nochmal ran, zuerst eine kleine Suche und ein Upload:

Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code:

:filefind *Reputation Advisor* *sysTPL* *Tlapia* :folderfind *Reputation Advisor* *sysTPL* *Tlapia* :regfind Reputation Advisor sysTPL Tlapia
Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

Deaktiviere dein Anti-Viren-Programm.
Gehe zum Ordner C:\FRST\Quarantine.
Rechtsklicke auf den Ordner Quarantine und wähle > Senden an > Zip-komprimierter Ordner.
Es wird eine zip-Datei mit dem Namen Quarantine.zip im Ordner FRST erstellt.
Lade die Quarantine.zip im Upload-Channel hoch.
Klicke dazu auf Durchsuchen, navigiere zu der zip-Datei ( C:\FRST\Quarantine.zip ) und klicke auf Öffnen.
Klicke abschließend auf Hochladen.
Vielen Dank für deine Hilfe.
Aktiviere dein Anti-Viren-Programm wieder.

Denise94

24.11.2015 20:32

Die Zip ist hochgeladen.

Hier noch die Datei vom SystemLook

Code:

SystemLook 30.07.11 by jpshortstuff

Log created at 20:18 on 24/11/2015 by Denise

Administrator - Elevation successful
 

========== filefind ==========
 

Searching for "*Reputation Advisor*"

No files found.
 

Searching for "*sysTPL*"

No files found.
 

Searching for "*Tlapia*"

No files found.
 

========== folderfind ==========
 

Searching for "*Reputation Advisor*"

No folders found.
 

Searching for "*sysTPL*"

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_sysTPLMonitor.ex_fa96c651e4a82cc384fb89f5c6e1d1e9dd1747a_044cc255        d----c-        [19:26 02/04/2015]

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_sysTPLService.ex_f8f9d5e8fe57da31e598fcb2a69ce7c78f85b88_044cc457        d----c-        [19:26 02/04/2015]

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_sysTPLService.ex_f8f9d5e8fe57da31e598fcb2a69ce7c78f85b88_047d0f99        d----c-        [05:33 02/09/2015]

C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppHang_sysTPLMonitor.ex_fa96c651e4a82cc384fb89f5c6e1d1e9dd1747a_044cc255        d----c-        [19:26 02/04/2015]

C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppHang_sysTPLService.ex_f8f9d5e8fe57da31e598fcb2a69ce7c78f85b88_044cc457        d----c-        [19:26 02/04/2015]

C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppHang_sysTPLService.ex_f8f9d5e8fe57da31e598fcb2a69ce7c78f85b88_047d0f99        d----c-        [05:33 02/09/2015]
 

Searching for "*Tlapia*"

No folders found.
 

========== regfind ==========
 

Searching for "Reputation Advisor"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5]

"DisplayName"="Reputation Advisor"
 

Searching for "sysTPL"

[HKEY_CURRENT_USER\Software\sysTPL]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C544B09C-D852-3963-AE43-675BCA3BE929}\InprocServer32]

"CodeBase"="file:///C:\Program Files\sysTPL\IDUDll.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C544B09C-D852-3963-AE43-675BCA3BE929}\InprocServer32\1.0.0.0]

"CodeBase"="file:///C:\Program Files\sysTPL\IDUDll.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F]

"ProductName"="sysTPL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F\SourceList]

"PackageName"="sysTPL.msi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\Program Files\sysTPL\updt\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\Program Files\sysTPL\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\Program Files\sysTPL\temp\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\Program Files\sysTPL\data\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0303E50697AD5DF44A3BAE09699E2830]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="C:\Program Files\sysTPL\sysTPLMonitor.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0AA7673E656A29240AA109A66456771C]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="C:\Program Files\sysTPL\sysTPL.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1665CA94B2A6BFF41A879EE32CE73C55]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="C:\Program Files\sysTPL\sysTPLLauncher.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27AF05946CEE22C498D42D5B4D2980D5]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="C:\Program Files\sysTPL\sysTPLUtil.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3614796DD813A374DA85458BF7DB3C69]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="02:\Software\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5\DisplayName"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B7DC3C8673FDB4F93CC1C387BE5707]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="C:\Program Files\sysTPL\sysTPLService.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B264200D279CA146B416C6564911B6E]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="C:\Program Files\sysTPL\IDUDll.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A07F4640DCA77E4586C46F9DD75CFF0]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="02:\Software\Microsoft\Windows\CurrentVersion\Run\sysTPL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B6A7CD9850091C49A8E5BA0B06DF4AD]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="C:\Program Files\sysTPL\sysTPLUninstall.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B29E4B9C25A7272478146A6F9BDB3882]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="01:\Software\sysTPL\Advanced"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B624ACDAAF6B2E04187FFACBD55BC0F4]

"13CB47B4353BF8B4C8EBAD4BFF23F61F"="02:\Software\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5\NoModify"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F\InstallProperties]

"Comments"="This installer database contains the logic and data required to install sysTPL."

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F\InstallProperties]

"InstallLocation"="C:\Program Files\sysTPL\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F\InstallProperties]

"DisplayName"="sysTPL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5]

"Comments"="This installer database contains the logic and data required to install sysTPL."

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5]

"InstallLocation"="C:\Program Files\sysTPL\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog\Application\sysTPLMonitor]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog\Application\sysTPLService]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\eventlog\Application\sysTPLMonitor]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\eventlog\Application\sysTPLService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLMonitor]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLService]

[HKEY_USERS\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\sysTPL]
 

Searching for "Tlapia"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F\InstallProperties]

"Publisher"="Tlapia"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5]

"Publisher"="Tlapia"
 

Searching for "         "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]

"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="2.0"/>                 </InitializationParameters>                 <Resources>                     <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                         <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                         <Capability Type="Shell"/>                     </Resource>                 </Res

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Live\Common]

"PCModel"="R530/R730                  "

[HKEY_LOCAL_MACHINE\SOFTWARE\Sony Corporation\SonicStage\GUI\InternalMS]

"Sony     MSC-U01          "=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Sony Corporation\SonicStage\GUI\InternalMS]

"Sony     MSC-U02          "=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Sony Corporation\SonicStage\GUI\InternalMS]

"Sony     MSC-U03          "=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Sony Corporation\SonicStage\GUI\InternalMS]

"Sony     MSC-U04          "=""

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]

"DriverDesc"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\Settings]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{B7A38058-4061-457C-8BCC-C1EB599D6EDA}\0000]

"DriverDesc"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{B7A38058-4061-457C-8BCC-C1EB599D6EDA}\0000\Settings]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{B7A38058-4061-457C-8BCC-C1EB599D6EDA}\0001]

"DriverDesc"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{B7A38058-4061-457C-8BCC-C1EB599D6EDA}\0001\Settings]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_10DE&DEV_0A75&SUBSYS_C06D144D&REV_A2\4&1b87942&0&0008]

"DeviceDesc"="@oem57.inf,%nvidia_dev.0a75.c06d.144d%;NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_#10111070002323&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_0.00#090212028F3617&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_1100#6&10726D6E&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_1100#6&2699D62B&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_8.07#11082619000411&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERAL&PROD_UDISK&REV_5.00#1107102047565761862511&0#]

"DeviceDesc"="UDisk           "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_INTENSO&PROD_USB&REV_1100#AA04012700008019&0#]

"DeviceDesc"="USB             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_INTENSO&PROD_USB&REV_1100#AA04012900007543&0#]

"DeviceDesc"="USB             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#351624036370940&0#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#351624036370940&1#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#499999390000010&0#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#499999390000010&1#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_OLYMPUS&PROD_SP320&REV_1.00#000J76262775&0#]

"DeviceDesc"="SP320           "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.02#077422052752EA4A&0#]

"DeviceDesc"="Cruzer          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SONY&PROD_PSP&REV_1.00#D0342D2D3AE5A127&0#]

"DeviceDesc"="PSP             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\nvlddmkm\Device0]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\nvlddmkm\Device1]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\nvlddmkm\Device2]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\nvlddmkm\Device3]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]

"DriverDesc"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\Settings]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\PCI\VEN_10DE&DEV_0A75&SUBSYS_C06D144D&REV_A2\4&1b87942&0&0008]

"DeviceDesc"="@oem57.inf,%nvidia_dev.0a75.c06d.144d%;NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_#10111070002323&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_0.00#090212028F3617&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_1100#6&10726D6E&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_1100#6&2699D62B&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_8.07#11082619000411&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERAL&PROD_UDISK&REV_5.00#1107102047565761862511&0#]

"DeviceDesc"="UDisk           "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_INTENSO&PROD_USB&REV_1100#AA04012700008019&0#]

"DeviceDesc"="USB             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_INTENSO&PROD_USB&REV_1100#AA04012900007543&0#]

"DeviceDesc"="USB             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#351624036370940&0#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#351624036370940&1#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#499999390000010&0#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#499999390000010&1#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_OLYMPUS&PROD_SP320&REV_1.00#000J76262775&0#]

"DeviceDesc"="SP320           "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.02#077422052752EA4A&0#]

"DeviceDesc"="Cruzer          "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SONY&PROD_PSP&REV_1.00#D0342D2D3AE5A127&0#]

"DeviceDesc"="PSP             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\nvlddmkm\Device0]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\nvlddmkm\Device1]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\nvlddmkm\Device2]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\nvlddmkm\Device3]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]

"DriverDesc"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\Settings]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{B7A38058-4061-457C-8BCC-C1EB599D6EDA}\0000]

"DriverDesc"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{B7A38058-4061-457C-8BCC-C1EB599D6EDA}\0000\Settings]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{B7A38058-4061-457C-8BCC-C1EB599D6EDA}\0001]

"DriverDesc"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{B7A38058-4061-457C-8BCC-C1EB599D6EDA}\0001\Settings]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\PCI\VEN_10DE&DEV_0A75&SUBSYS_C06D144D&REV_A2\4&1b87942&0&0008]

"DeviceDesc"="@oem57.inf,%nvidia_dev.0a75.c06d.144d%;NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_#10111070002323&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_0.00#090212028F3617&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_1100#6&10726D6E&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_1100#6&2699D62B&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_8.07#11082619000411&0#]

"DeviceDesc"="                "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERAL&PROD_UDISK&REV_5.00#1107102047565761862511&0#]

"DeviceDesc"="UDisk           "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_INTENSO&PROD_USB&REV_1100#AA04012700008019&0#]

"DeviceDesc"="USB             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_INTENSO&PROD_USB&REV_1100#AA04012900007543&0#]

"DeviceDesc"="USB             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#351624036370940&0#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#351624036370940&1#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#499999390000010&0#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_LGE&PROD_MOBILE&REV_1.0#499999390000010&1#]

"DeviceDesc"="mobile          "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_OLYMPUS&PROD_SP320&REV_1.00#000J76262775&0#]

"DeviceDesc"="SP320           "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.02#077422052752EA4A&0#]

"DeviceDesc"="Cruzer          "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SONY&PROD_PSP&REV_1.00#D0342D2D3AE5A127&0#]

"DeviceDesc"="PSP             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\nvlddmkm\Device0]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\nvlddmkm\Device1]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\nvlddmkm\Device2]

"Device Description"="NVIDIA GeForce 310M             "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\nvlddmkm\Device3]

"Device Description"="NVIDIA GeForce 310M             "
 

-= EOF =-

M-K-D-B

24.11.2015 22:00

Servus,

danke für den Upload. :)

Hinweis: Der Suchlauf mit ESET kann länger dauern.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

CloseProcesses:

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [AdobeBridge] => [X]

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <kein Path\update_url>

S4 Agsvepehe; kein ImagePath

Task: {6F306A86-1F31-4DC6-8B55-C2299A584090} - System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => pcalua.exe -a C:\Users\Denise\Downloads\jxpiinstall.exe -d "C:\Program Files\Mozilla Firefox"

Task: {76EE0824-7352-4C6C-ACBB-2CFE1D990277} - System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {77348CC6-E978-4140-BE67-F524EF7499CB} - System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} - System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => pcalua.exe -a E:\setup.exe -d E:\

C:\Program Files\sysTPL

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5

DeleteKey: HKEY_CURRENT_USER\Software\sysTPL

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C544B09C-D852-3963-AE43-675BCA3BE929}

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLMonitor

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLService

EmptyTemp:

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

Starte die HitmanPro.exe
Klicke auf
Entferne den Haken bei
Klicke auf
und
Akzeptiere die Lizenzbedingungen und klicke auf
Klicke auf

und auf
Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
und speichere die Logdatei auf Deinem Desktop.
Schließe HitmanPro und poste mir das Log.

Schritt 3

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Logdatei von HitmanPro,
die Logdatei von ESET,
die beiden neuen Logdateien von FRST.

Denise94

25.11.2015 09:41

Morgen,

kurze Frage. Ist es normal, dass das Entfernen mit FRST mittlerweile mehr als zwei Stunden benötigt? :wtf:

M-K-D-B

25.11.2015 17:07

Zitat:

Zitat von Denise94 (Beitrag 1538439)

kurze Frage. Ist es normal, dass das Entfernen mit FRST mittlerweile mehr als zwei Stunden benötigt? :wtf:

Nein, das ist nicht normal. AV-Programm vorher deaktivieren!

Versuch FRST nochmal, dieses Mal so:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [AdobeBridge] => [X]

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <kein Path\update_url>

S4 Agsvepehe; kein ImagePath

Task: {6F306A86-1F31-4DC6-8B55-C2299A584090} - System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => pcalua.exe -a C:\Users\Denise\Downloads\jxpiinstall.exe -d "C:\Program Files\Mozilla Firefox"

Task: {76EE0824-7352-4C6C-ACBB-2CFE1D990277} - System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {77348CC6-E978-4140-BE67-F524EF7499CB} - System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} - System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => pcalua.exe -a E:\setup.exe -d E:\

C:\Program Files\sysTPL

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5

DeleteKey: HKEY_CURRENT_USER\Software\sysTPL

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C544B09C-D852-3963-AE43-675BCA3BE929}

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLMonitor

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLService

Reboot:

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Denise94

25.11.2015 20:29

Die Datei vom FRST

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version:25-11-2015

durchgeführt von Denise (2015-11-25 20:23:05) Run:4

Gestartet von C:\Users\Denise\Desktop

Geladene Profile: Denise (Verfügbare Profile: Denise & Gast)

Start-Modus: Normal
 

==============================================
 

fixlist Inhalt:

*****************

start

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [AdobeBridge] => [X]

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <kein Path\update_url>

S4 Agsvepehe; kein ImagePath

Task: {6F306A86-1F31-4DC6-8B55-C2299A584090} - System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => pcalua.exe -a C:\Users\Denise\Downloads\jxpiinstall.exe -d "C:\Program Files\Mozilla Firefox"

Task: {76EE0824-7352-4C6C-ACBB-2CFE1D990277} - System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {77348CC6-E978-4140-BE67-F524EF7499CB} - System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} - System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => pcalua.exe -a E:\setup.exe -d E:\

C:\Program Files\sysTPL

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5

DeleteKey: HKEY_CURRENT_USER\Software\sysTPL

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C544B09C-D852-3963-AE43-675BCA3BE929}

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLMonitor

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLService

Reboot:

end

*****************
 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Wert nicht gefunden.

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Wert nicht gefunden.

HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Schlüssel nicht gefunden. 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Wert nicht gefunden.

HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Schlüssel nicht gefunden. 

HKLM\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk => Schlüssel nicht gefunden. 

Agsvepehe => service nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F306A86-1F31-4DC6-8B55-C2299A584090} => Schlüssel nicht gefunden. 

C:\Windows\System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => Schlüssel nicht gefunden. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76EE0824-7352-4C6C-ACBB-2CFE1D990277} => Schlüssel nicht gefunden. 

C:\Windows\System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5A8300FC-306B-42C2-BF92-A08083115555} => Schlüssel nicht gefunden. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77348CC6-E978-4140-BE67-F524EF7499CB} => Schlüssel nicht gefunden. 

C:\Windows\System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4A921841-116D-4180-B7FC-6D378D43E13D} => Schlüssel nicht gefunden. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} => Schlüssel nicht gefunden. 

C:\Windows\System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => Schlüssel nicht gefunden. 

"C:\Program Files\sysTPL" => nicht gefunden.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5 => Schlüssel nicht gefunden. 

HKEY_CURRENT_USER\Software\sysTPL => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C544B09C-D852-3963-AE43-675BCA3BE929} => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLMonitor => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLService => Schlüssel nicht gefunden. 
 
 

Das System musste neu gestartet werden.
 

==== Ende vom Fixlog 20:23:54 ====

M-K-D-B

25.11.2015 21:38

Servus,

ok, dann weiter mit den anderen Schritten bitte.
Wir haben es bald geschafft. :)

Denise94

26.11.2015 07:33

Einmal die Logdatei vom FRST

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version:25-11-2015

durchgeführt von Denise (2015-11-25 20:23:05) Run:4

Gestartet von C:\Users\Denise\Desktop

Geladene Profile: Denise (Verfügbare Profile: Denise & Gast)

Start-Modus: Normal
 

==============================================
 

fixlist Inhalt:

*****************

start

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [AdobeBridge] => [X]

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <kein Path\update_url>

S4 Agsvepehe; kein ImagePath

Task: {6F306A86-1F31-4DC6-8B55-C2299A584090} - System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => pcalua.exe -a C:\Users\Denise\Downloads\jxpiinstall.exe -d "C:\Program Files\Mozilla Firefox"

Task: {76EE0824-7352-4C6C-ACBB-2CFE1D990277} - System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {77348CC6-E978-4140-BE67-F524EF7499CB} - System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => pcalua.exe -a E:\RunSetup.exe -d E:\

Task: {CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} - System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => pcalua.exe -a E:\setup.exe -d E:\

C:\Program Files\sysTPL

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5

DeleteKey: HKEY_CURRENT_USER\Software\sysTPL

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C544B09C-D852-3963-AE43-675BCA3BE929}

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F

DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLMonitor

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLService

Reboot:

end

*****************
 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Wert nicht gefunden.

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Wert nicht gefunden.

HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Schlüssel nicht gefunden. 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Wert nicht gefunden.

HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Schlüssel nicht gefunden. 

HKLM\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk => Schlüssel nicht gefunden. 

Agsvepehe => service nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F306A86-1F31-4DC6-8B55-C2299A584090} => Schlüssel nicht gefunden. 

C:\Windows\System32\Tasks\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3C6B1DA7-FE34-489E-A60C-A4F12465BDD1} => Schlüssel nicht gefunden. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76EE0824-7352-4C6C-ACBB-2CFE1D990277} => Schlüssel nicht gefunden. 

C:\Windows\System32\Tasks\{5A8300FC-306B-42C2-BF92-A08083115555} => nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5A8300FC-306B-42C2-BF92-A08083115555} => Schlüssel nicht gefunden. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77348CC6-E978-4140-BE67-F524EF7499CB} => Schlüssel nicht gefunden. 

C:\Windows\System32\Tasks\{4A921841-116D-4180-B7FC-6D378D43E13D} => nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4A921841-116D-4180-B7FC-6D378D43E13D} => Schlüssel nicht gefunden. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEFF83D6-CCB4-4705-A77E-4F507FAC5A67} => Schlüssel nicht gefunden. 

C:\Windows\System32\Tasks\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => nicht gefunden.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6BE42DC9-379E-4AF9-A326-CFF9D069766A} => Schlüssel nicht gefunden. 

"C:\Program Files\sysTPL" => nicht gefunden.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysTPL 1.4.1.5 => Schlüssel nicht gefunden. 

HKEY_CURRENT_USER\Software\sysTPL => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C544B09C-D852-3963-AE43-675BCA3BE929} => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13CB47B4353BF8B4C8EBAD4BFF23F61F => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLMonitor => Schlüssel nicht gefunden. 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\sysTPLService => Schlüssel nicht gefunden. 
 
 

Das System musste neu gestartet werden.
 

==== Ende vom Fixlog 20:23:54 ====

Nun die von HitmanPro

Code:



        Code:


        
HitmanPro 3.7.10.251

www.hitmanpro.com
 

   Computer name . . . . : DENISE-PC

   Windows . . . . . . . : 6.1.1.7601.X86/2

   User name . . . . . . : Denise-PC\Denise

   UAC . . . . . . . . . : Enabled

   License . . . . . . . : Free
 

   Scan date . . . . . . : 2015-11-25 21:59:12

   Scan mode . . . . . . : Normal

   Scan duration . . . . : 9m 46s

   Disk access mode  . . : Direct disk access (SRB)

   Cloud . . . . . . . . : Internet

   Reboot  . . . . . . . : No
 

   Threats . . . . . . . : 5

   Traces  . . . . . . . : 21
 

   Objects scanned . . . : 1.788.325

   Files scanned . . . . : 60.672

   Remnants scanned  . . : 337.583 files / 1.390.070 keys
 

Malware _____________________________________________________________________
 

   C:\Users\Denise\AppData\Local\omesuperv2.exe

      Size . . . . . . . : 761.791 bytes

      Age  . . . . . . . : 140.4 days (2015-07-08 12:22:20)

      Entropy  . . . . . : 8.0

      SHA-256  . . . . . : 48DFC9B477E470E8FE9A95511A404E9BDD7482FE930AA0DD1C5556ECA49C0710

    > Bitdefender  . . . : Application.Agent.KH

    > Kaspersky  . . . . : not-a-virus:AdWare.JS.Znoozer.c

      Fuzzy  . . . . . . : 114.0
 

   C:\Users\Denise\Downloads\ADLSoft_UnCompressor_triple_2nd_offer_0412_s.exe

      Size . . . . . . . : 560.136 bytes

      Age  . . . . . . . : 1397.3 days (2012-01-28 14:07:00)

      Entropy  . . . . . : 7.9

      SHA-256  . . . . . : 726160BDBF6F19E65C3DFD232318545A2EBD2243A8DC9166A17BB9797F0EE0DC

      RSA Key Size . . . : 2048

      Authenticode . . . : Valid

    > HitmanPro  . . . . : Malware

      Fuzzy  . . . . . . : 107.0
 

   C:\Users\Denise\Downloads\MozillaFirefox-Setup-Yahoo!Edition.exe

      Size . . . . . . . : 1.152.920 bytes

      Age  . . . . . . . : 1158.1 days (2012-09-23 20:02:40)

      Entropy  . . . . . : 7.0

      SHA-256  . . . . . : A4E6524163CE8AAA22D6A7CB94484F66A1F4BB0A8000CEBF6193EE2836CCDB3C

    > Bitdefender  . . . : Adware.Generic.457199

      Fuzzy  . . . . . . : 106.0
 

   C:\Users\Denise\Downloads\PDFCreatorSetup.exe

      Size . . . . . . . : 1.099.144 bytes

      Age  . . . . . . . : 1314.1 days (2012-04-20 19:30:00)

      Entropy  . . . . . : 6.8

      SHA-256  . . . . . : 9E0F4BB449A4CF8A4AF2EB6F37A12EE5D8EA086CBABEE995CF72021DA97D38CD

    > Bitdefender  . . . : Gen:Variant.Adware.Graftor.27502

      Fuzzy  . . . . . . : 106.0
 

   C:\Users\Denise\Downloads\USB-Fehlerbehebung.exe

      Size . . . . . . . : 224.576 bytes

      Age  . . . . . . . : 524.1 days (2014-06-19 19:30:02)

      Entropy  . . . . . : 7.5

      SHA-256  . . . . . : 92A0D3A11435001841A5687E1B7B36920AE8FD4A7BE1FB226CDE22F6B0AC1272

      Product  . . . . . : 1.3.9.0.140504.01

      Publisher

      Description  . . . : Setup.exe

      Version  . . . . . : 1.3.9.0

      RSA Key Size . . . : 2048

      LanguageID . . . . : 0

      Authenticode . . . : Valid

    > Kaspersky  . . . . : not-a-virus:WebToolbar.Win32.Agent.ajf

      Fuzzy  . . . . . . : 100.0
 
 

Suspicious files ____________________________________________________________
 

   C:\Users\Denise\Desktop\FRST.exe

      Size . . . . . . . : 1.719.296 bytes

      Age  . . . . . . . : 3.4 days (2015-11-22 13:09:10)

      Entropy  . . . . . : 7.5

      SHA-256  . . . . . : 184EA21D6C480389CC08295B1AFD698921E0C39A79D1ED22D9FAF46CDFF094F1

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.

      References

         HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Denise\Desktop\FRST.exe

      Forensic Cluster

          0.0s C:\Users\Denise\Desktop\FRST.exe

          0.0s C:\Users\Denise\Desktop\tojaboarddateien\FRST-OlderVersion\FRST.exe
 

   C:\Users\Denise\Desktop\tojaboarddateien\FRST-OlderVersion\FRST.exe

      Size . . . . . . . : 1.718.784 bytes

      Age  . . . . . . . : 3.4 days (2015-11-22 13:09:10)

      Entropy  . . . . . : 7.5

      SHA-256  . . . . . : C9B7E1300B47A5888313283F2982280AA951E794599827A52A0B3A1116C7D30A

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.

      Forensic Cluster

          0.0s C:\Users\Denise\Desktop\FRST.exe

          0.0s C:\Users\Denise\Desktop\tojaboarddateien\FRST-OlderVersion\FRST.exe
 

   C:\windows\system32\GameMon.des

      Size . . . . . . . : 3.461.904 bytes

      Age  . . . . . . . : 2005.9 days (2010-05-29 23:44:51)

      Entropy  . . . . . : 7.9

      SHA-256  . . . . . : 41CCAD53A7A331C2580042828E4DF32B225E3FD3B0198BB41B8F02576ED19EB4

      Product  . . . . . : nProtect Game Monitor

      Publisher  . . . . : INCA Internet Co., Ltd.

      Description  . . . : nProtect Game Monitor Rev 1447

      Version  . . . . . : 2009.12.16.1

      Service  . . . . . : npggsvc

      LanguageID . . . . : 1042

      Fuzzy  . . . . . . : 36.0

         The file name extension of this program is not common.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Starts automatically as a service during system bootup.

         The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.

      Startup

         HKLM\SYSTEM\CurrentControlSet\Services\npggsvc\
 

   C:\windows\system32\RGSS100J.dll

      Size . . . . . . . : 771.584 bytes

      Age  . . . . . . . : 2047.4 days (2010-04-18 11:13:05)

      Entropy  . . . . . : 7.7

      SHA-256  . . . . . : F646E0B2DB58D8FA881DFDE3002B736DC374ECAAAB15852B91EC719DA7D3B90B

      Fuzzy  . . . . . . : 24.0

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         The .rsrc (resources) section in this program is set to executable. This is an indication of malware infection.

         Program contains PE structure anomalies. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
 

   C:\windows\system32\RGSS102E.dll

      Size . . . . . . . : 778.752 bytes

      Age  . . . . . . . : 2047.4 days (2010-04-18 11:13:07)

      Entropy  . . . . . : 7.7

      SHA-256  . . . . . : F079A18C0ABC9569429D402357E2DAA4FE2AF4CDBE3C002A5F05A70D33E7BFFB

      Fuzzy  . . . . . . : 24.0

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         The .rsrc (resources) section in this program is set to executable. This is an indication of malware infection.

         Program contains PE structure anomalies. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
 

   C:\windows\system32\RGSS102J.dll

      Size . . . . . . . : 781.312 bytes

      Age  . . . . . . . : 2047.4 days (2010-04-18 11:13:06)

      Entropy  . . . . . : 7.7

      SHA-256  . . . . . : AB4F7CCC49D56161B38E0DA0DEBB05B6F522B00B1C48356F776910934122278F

      Fuzzy  . . . . . . : 24.0

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         The .rsrc (resources) section in this program is set to executable. This is an indication of malware infection.

         Program contains PE structure anomalies. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
 
 

Potential Unwanted Programs _________________________________________________
 

   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro\ (SearchQU)

   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera\ (SearchQU)

   HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622\ (Linkey)

   HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622\ (Linkey)

   HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622\ (Linkey)

   HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\AppDataLow\Software\Smartbar\ (Conduit)

   HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} (Babylon)

   HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Smartbar\ (Conduit)

Die ESETS Datei

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=01d6f133af4afd47a3ce4c05d94db153

# end=init

# utc_time=2015-11-25 09:11:11

# local_time=2015-11-25 10:11:11 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 26898

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=01d6f133af4afd47a3ce4c05d94db153

# end=updated

# utc_time=2015-11-25 09:13:05

# local_time=2015-11-25 10:13:05 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=01d6f133af4afd47a3ce4c05d94db153

# engine=26898

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-11-26 12:23:54

# local_time=2015-11-26 01:23:54 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Microsoft Security Essentials'

# compatibility_mode=5895 16777213 100 100 16520212 71477828 0 0

# scanned=222305

# found=49

# cleaned=0

# scan_time=11448

sh=CE319E0C89B49BBFB86CB35B99D7285010399388 ft=1 fh=4f1cb13a80a48361 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF10.dll"

sh=E052E74688395EFDEE6599B364DE0F8515A28C4B ft=1 fh=40b1758ba044682c vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF11.dll"

sh=2110F801FA88EEEC8D01F63F9A2783D3BEA29086 ft=1 fh=45641b4061d5b8ed vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF12.dll"

sh=655DFB6ACA3FBB9498B5CDE3070A5B5AD63C3F9D ft=1 fh=8e1b4fdbecc7c92c vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF13.dll"

sh=C500498236486DE9302E854DA3F14D43ABDB8289 ft=1 fh=16a102d6936a0dbf vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF14.dll"

sh=197007BEAC194BD59B0BFBB363166EDD2BB3622F ft=1 fh=b1fa4345597e4b95 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF15.dll"

sh=8FF5D06386B4C8CA59A2072854ED814BD877A817 ft=1 fh=3f9bfce8e0e3e4bc vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF16.dll"

sh=62DED82824605C3A23B29D3E93816EFEEEF1720F ft=1 fh=6745ad30f1ac9fdc vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF17.dll"

sh=7F2251FCC5069A785918D8DC63702357398EF923 ft=1 fh=9140341d95799125 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF18.dll"

sh=452A55D15F34E73AB47FEAE178AA5FA6274F8385 ft=1 fh=0532f98d94edb5a9 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF19.dll"

sh=25C35AC4EB64AFD9789A9C5A8639E1A7C283EFB3 ft=1 fh=5282b30ec55a5c65 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF2.dll"

sh=87E5A12573F45E6020A2261DAAA0548593CE49FB ft=1 fh=27d660d8e3d0987e vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF20.dll"

sh=9D95705B9D42EB565E189B40F9F4A8BFFAFB4FCC ft=1 fh=4ebf007076735cbe vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF21.dll"

sh=EAC97B626C6445F531DDC6C3A7AD516268DE93FF ft=1 fh=3690320a2f67093b vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF22.dll"

sh=CD104484F1346830964F6C9F3B881B8D525B36D6 ft=1 fh=b95ea07c89a0434b vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF23.dll"

sh=A3CBEF7BBAFF1B5F6C3B9027F37A39EF56E0D9C4 ft=1 fh=4b9daf84f0891330 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF24.dll"

sh=71EF22BA6EEE61610952F1FC0A7A2692C0C5B931 ft=1 fh=64e6c917000e0fdb vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF25.dll"

sh=9B10790EDDE217061ECB184CD36887FDEA47B688 ft=1 fh=01247588a82e5e18 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF26.dll"

sh=6072061ECB21B9060CD7C754D32D71670B0A9809 ft=1 fh=75591633caf38a6f vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF27.dll"

sh=89139A9312492AA287C01F72E9E1FC022DC6F76E ft=1 fh=bf002ceb4e67465b vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF4.dll"

sh=D93DF88B133AAE3B9C7357B175CC0AEE13174E10 ft=1 fh=3060a942cce2c77c vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF5.dll"

sh=8009E3DDA90C9CBB1DBC734B2B58C0A771978B13 ft=1 fh=102d893396e96fef vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF6.dll"

sh=4185392B31474480A3AA51F2AE825E746BFBCA76 ft=1 fh=52995e729c2ca4a4 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF7.dll"

sh=431E426EEEE1412EF8DAF5B204FB9D8319B106E8 ft=1 fh=96830cb98eeec989 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF8.dll"

sh=3E450C209A7490107D2BADDA2E03B101B17DAF03 ft=1 fh=7d491791a97f975e vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\extensions\{9473F86A-8CD2-0C01-CF9E-946854F63D87}\components\SafetyNutHlpFF9.dll"

sh=CAAAE755E341401C570AEB011F5DC5B6D8F1458D ft=1 fh=920f660a958f2cb6 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Denise\AppData\Local\omesuperv2.exe"

sh=894D413CCB58223FF6C99C01ECF6524F886738F5 ft=1 fh=483ab3832d808c98 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Documents\Downloads\Integrated_BrotherSoft_TB.exe"

sh=C7D391FDB91DCADD57FCEAB174939E6905096A2D ft=1 fh=7580807d41528e45 vn="Variante von Win32/InstallCore.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\ADLSoft_UnCompressor_triple_2nd_offer_0412_s.exe"

sh=B84676762980EFB66FD0D0E4D4ADFC7CAF7D2B44 ft=1 fh=09067fec91dc7a87 vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\Babylon9_setup.exe"

sh=5E65D78CFB045147794F2F1600FF1E9C4C58170A ft=1 fh=cc88732e16b334ca vn="Variante von Win32/DownloadSponsor.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\CCleaner - CHIP-Downloader.exe"

sh=CA029BE7CAFED2EB6CD2C812A3EC30A7E24C67DA ft=1 fh=ce2b5b75349426b1 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\DirectX - CHIP-Installer.exe"

sh=2EAF6144788CE68CA8E57969A417E94E13A29A13 ft=1 fh=c28d430db6a1cf69 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\FreeStudio.exe"

sh=450E98CEF1C57DAE78B637FF4E1961B1B08B6F8E ft=1 fh=9d496fc5e3ad6bdc vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\FreeYouTubeDownload.exe"

sh=660DBBCCB3CECB907102247E33A2763B885BC22F ft=1 fh=08d795d06aaee6ee vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\FreeYouTubeToMP3Converter.exe"

sh=348797353CCFA7150BAC1A69BEBC2398383A9A8B ft=1 fh=9ff2e5caaf3b42d5 vn="Win32/Toolbar.Conduit evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\HSS-3.42-install-hss-561-conduit.exe"

sh=F9467F64BA86B48A01165743E0189F1FFB345CB8 ft=1 fh=c71c0011b4997ac0 vn="Variante von Win32/Kryptik.BWJC Trojaner" ac=I fn="C:\Users\Denise\Downloads\installer_minecraft_Deutsch.exe"

sh=DEF8346F1593697F344FF0379ADF12A4FEE938DF ft=1 fh=edeaf15d3070a205 vn="Variante von Win32/InstallCore.AU evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\MozillaFirefox-Setup-Yahoo!Edition.exe"

sh=EEE9320CCDDF03D15B85E8096064F69E8F335CFE ft=1 fh=44ab79bef07d6b3c vn="Variante von Win32/InstallCore.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\PDFCreatorSetup.exe"

sh=A3E5BF2ED5DF86047FBBF830238722D1B1BF2410 ft=1 fh=51f5ceadc05dce60 vn="Win32/DomaIQ.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\Picasa.exe"

sh=3415D4E26469E86192E90ABC39A523B5EC1A2776 ft=1 fh=2acd527632ac288e vn="Variante von Win32/Systweak evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\rcpsetup_marim_mapp.exe"

sh=1F0AA80F999F0FFB16F586E53AC052B6E193911E ft=1 fh=fbeeda1f86099cdc vn="Variante von Win32/InstallCore.ACZ evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\setup(1).exe"

sh=2A68BC91B89DD092CDD08977527CC13A45061395 ft=1 fh=6a3a58a9bfbbfcd5 vn="Variante von Win32/SoftonicDownloader.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\SoftonicDownloader_for_photoscape.exe"

sh=A5668B1B10EA0D442C95297048AA7A98AD4E2374 ft=1 fh=57222fa95da59869 vn="Win32/SoftonicDownloader.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\SoftonicDownloader_fuer_barcode-scanner.exe"

sh=DE020CF286CC771B53A1D499625AE282B55B6CCD ft=1 fh=e96c4d73af782830 vn="Win32/SoftonicDownloader.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\SoftonicDownloader_fuer_minecraft.exe"

sh=2F71D8E3A171AC853E983D4F77605828B4350428 ft=1 fh=1f9b7f3ca52eb8e3 vn="Win32/SoftonicDownloader.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\SoftonicDownloader_fuer_vegas-pro.exe"

sh=E7A6814D124036B3886B21CE307B68DCBA144EA9 ft=1 fh=311748874277622c vn="Variante von Win32/ClientConnect.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Denise\Downloads\USB-Fehlerbehebung.exe"

sh=3C3D05F1F7FABEE1C8DC900573F8483755CAEE37 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Montiera.T evtl. unerwÃ¼nschte Anwendung" ac=I fn="D:\DENISE-PC\Backup Set 2010-10-26 175624\Backup Files 2010-10-29 202006\Backup files 47.zip"

sh=33E22BBCB403AEB539CE554BEF9739D1546436AE ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon evtl. unerwÃ¼nschte Anwendung" ac=I fn="D:\DENISE-PC\Backup Set 2010-10-26 175624\Backup Files 2010-10-29 202006\Backup files 48.zip"

sh=E762518528BBB6594248494B743DFDC2C11FF3D9 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="D:\DENISE-PC\Backup Set 2010-10-26 175624\Backup Files 2010-10-29 202006\Backup files 49.zip"

Und zum Schluss noch beide Dateien vom FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:25-11-2015

durchgeführt von Denise (Administrator) auf DENISE-PC (26-11-2015 07:26:54)

Gestartet von C:\Users\Denise\Desktop

Geladene Profile: Denise & Gast (Verfügbare Profile: Denise & Gast)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

() C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe

(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

() C:\Program Files\CyberLink\Shared files\RichVideo.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

() C:\Program Files\Bamboo Dock\BambooCore.exe

() C:\Program Files\Winamp\winampa.exe

(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTLite.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2014-12-11] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated)

HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)

HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)

HKLM\...\Run: [RemoteControl8] => C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)

HKLM\...\Run: [PDVD8LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)

HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] => C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-07-21] (CyberLink Corp.)

HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-02-26] (Nero AG)

HKLM\...\Run: [BambooCore] => C:\Program Files\Bamboo Dock\BambooCore.exe [646744 2014-11-20] ()

HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\Winampa.exe [12288 2003-04-17] ()

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)

HKLM\...\Run: [MouseDriver] => C:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-29] (Microsoft Corporation)

HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2688920 2014-05-26] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)

HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-04] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [3638256 2015-09-11] (Electronic Arts)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: G - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {0afaf239-5233-11e1-9281-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {5c1700f8-0a8e-11e0-89ea-00245467eac5} - F:\Autorun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {88771927-5bca-11e1-9d6d-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {8ed8c5b8-1d1f-11e3-a810-00245467eac5} - G:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {929343ec-dae9-11df-91fe-00245467eac5} - G:\LaunchU3.exe -a

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {98b26fee-6c31-11e1-b6ca-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {98b26ff2-6c31-11e1-b6ca-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {9d0d55be-049b-11e1-b91f-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {9d0d55c7-049b-11e1-b91f-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {a3b0880f-92f1-11e1-92ac-00245467eac5} - G:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {ac8e3a14-72f9-11e0-8ea1-00245467eac5} - F:\Autorun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {df1fb56f-8b3a-11e3-86dc-00245467eac5} - G:\AutoRun.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\MountPoints2: {f2592001-7340-11e1-960d-00245467eac5} - H:\Startme.exe

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\WLXPGSS.SCR [302448 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\...\Run: [msnmsgr] => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\...\Run: [Skype] => "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\...\Run: [ICQ] => "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\Control Panel\Desktop\\SCRNSAVE.EXE -> 

HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{6740F581-8B96-4B73-9C1B-74E80ABB4E31}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{89937394-FABE-4827-A000-3CA618D78EDF}: [DhcpNameServer] 139.7.30.126 139.7.30.125

Tcpip\..\Interfaces\{D15BEF43-E20E-4980-8981-90385BBA009A}: [NameServer] 8.8.8.8

Tcpip\..\Interfaces\{FAA164E7-8D0A-412C-BC98-DE239EC26F45}: [DhcpNameServer] 192.168.0.1 192.168.0.2
 

Internet Explorer:

==================

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=0003295F&OHP=http%3A%2F%2Fwww.google.com%2Fig%2Fredirectdomain%3Fbrand%3Dsmsn%26bmod%3Dsmsn&OSP=http%3A%2F%2Fwww.google.com%2Fsearch%3Fsourceid%3Die7%26q%3D%7BsearchTerms%7D%26rls%3Dcom.microsoft%3A%7Blanguage%7D%3A%7Breferrer%3Asource%3F%7D%26ie%3D%7BinputEncoding%7D%26oe%3D%7BoutputEncoding%7D%26rlz%3D1I7SMSN%5Fde

URLSearchHook: HKU\S-1-5-21-1072828290-3828818215-1948454868-501 -> Standard = {855F3B16-6D32-4fe6-8A56-BBB695989046}

URLSearchHook: HKU\S-1-5-21-1072828290-3828818215-1948454868-501 - (Kein Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} -  Keine Datei

SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-501 -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-501 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-501 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN_de

SearchScopes: HKU\S-1-5-21-1072828290-3828818215-1948454868-501 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-31] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-31] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-1072828290-3828818215-1948454868-501 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx

DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-09] (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Keine Datei
 

FireFox:

========

FF ProfilePath: C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018

FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-24] ()

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-31] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-31] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]

FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.5 -> C:\Program Files\TabletPlugins\npwacom.dll [2010-09-02] (Wacom, Inc.)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-10-23] (Adobe Systems Inc.)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-05-26] (Adobe Systems)

FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin HKU\S-1-5-21-1072828290-3828818215-1948454868-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-09-27] ()

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-10-23] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-11-18] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-11-18] (Apple Inc.)

FF Extension: YouTube Unblocker - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\youtubeunblocker@unblocker.yt [2015-11-25]

FF Extension: Adblock Plus - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xsixmqdl.default-1418637142018\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-25]
 

Chrome: 

=======

CHR Profile: C:\Users\Denise\AppData\Local\Google\Chrome\User Data\Default
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ezGOSvc; C:\windows\system32\ezGOSvc.dll [73600 2011-06-12] ()

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921392 2015-10-04] (NVIDIA Corporation)

S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]

S3 MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation) [Datei ist nicht signiert]

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)

S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)

S3 npggsvc; C:\windows\system32\GameMon.des [3461904 2010-01-12] (INCA Internet Co., Ltd.) [Datei ist nicht signiert]

R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-10-04] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4325680 2015-10-04] (NVIDIA Corporation)

R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] ()

S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2057736 2015-09-11] (Electronic Arts)

S3 PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] () [Datei ist nicht signiert]

R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()

S3 SonicStage Back-End Service; C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe [112184 2007-02-05] (Sony Corporation)

S3 SPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation) [Datei ist nicht signiert]

S3 SSScsiSV; C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe [75320 2007-02-05] (Sony Corporation)

S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [567064 2014-08-19] (Wacom Technology, Corp.)

S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [X]

S2 RoxLiveShare9; "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 athr; C:\windows\System32\DRIVERS\athr.sys [2228224 2011-12-13] (Atheros Communications, Inc.) [Datei ist nicht signiert]

R2 atksgt; C:\windows\System32\DRIVERS\atksgt.sys [83872 2011-10-01] ()

R3 eapihdrv; C:\Users\Denise\AppData\Local\Temp\ehdrv.sys [135760 2015-11-25] (ESET)

S3 hamachi; C:\windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

S3 hidkmdf; C:\windows\System32\DRIVERS\hidkmdf.sys [12088 2014-08-06] (Windows (R) Win 7 DDK provider)

R3 KMWDFILTERx86; C:\windows\System32\DRIVERS\KMWDFILTER.sys [25088 2009-04-29] (Windows (R) Codename Longhorn DDK provider)

R2 lirsgt; C:\windows\System32\DRIVERS\lirsgt.sys [25888 2011-10-01] ()

R3 LVUSBSta; C:\windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)

R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)

S3 Netaapl; C:\windows\System32\DRIVERS\netaapl.sys [18432 2010-04-19] (Apple Inc.) [Datei ist nicht signiert]

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18736 2015-10-04] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [44840 2015-08-11] (NVIDIA Corporation)

S3 pepifilter; C:\windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)

S3 PID_PEPI; C:\windows\System32\DRIVERS\LV302V32.SYS [2570520 2008-07-26] (Logitech Inc.)

R3 seehcri; C:\windows\System32\DRIVERS\seehcri.sys [27632 2010-10-29] (Sony Ericsson Mobile Communications) [Datei ist nicht signiert]

S3 SipIMNDI; C:\windows\System32\DRIVERS\SipIMNDI.sys [24352 2009-10-15] (T-Systems International GmbH)

R0 sptd; C:\windows\System32\Drivers\sptd.sys [691696 2010-12-18] () [Datei ist nicht signiert]

S3 ssm_bus; C:\windows\System32\DRIVERS\ssm_bus.sys [58320 2005-08-30] (MCCI)

S3 ssm_mdfl; C:\windows\System32\DRIVERS\ssm_mdfl.sys [8336 2005-08-30] (MCCI)

S3 ssm_mdm; C:\windows\System32\DRIVERS\ssm_mdm.sys [94000 2005-08-30] (MCCI)

S3 t_mouse.sys; C:\windows\System32\DRIVERS\t_mouse.sys [5120 2012-12-19] ()

S3 USBAAPL; C:\windows\System32\Drivers\usbaapl.sys [41984 2011-02-18] (Apple, Inc.) [Datei ist nicht signiert]

S3 WacHidRouter; C:\windows\System32\DRIVERS\wachidrouter.sys [85304 2014-08-06] (Wacom Technology)

S3 wacomrouterfilter; C:\windows\System32\DRIVERS\wacomrouterfilter.sys [13112 2014-08-06] (Wacom Technology)

R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

U3 as3arkc0; C:\windows\system32\Drivers\as3arkc0.sys [0 ] (Microsoft Corporation) <==== ACHTUNG (Null Byte Datei/Ordner)

S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [X]

S3 GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [X]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S1 mvgordih; \??\C:\windows\system32\drivers\mvgordih.sys [X]

S3 taphss6; system32\DRIVERS\taphss6.sys [X]

S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]

S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]

U2 wuaserv; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

NETSVC: ezGOSvc -> C:\windows\system32\ezGOSvc.dll ()
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-26 07:26 - 2015-11-26 07:27 - 00026816 _____ C:\Users\Denise\Desktop\FRST.txt

2015-11-25 22:13 - 2015-11-25 22:13 - 00000000 ____D C:\Users\Denise\Desktop\neuedateien

2015-11-25 22:09 - 2015-11-25 22:10 - 02870984 _____ (ESET) C:\Users\Denise\Desktop\esetsmartinstaller_deu.exe

2015-11-25 21:57 - 2015-11-25 22:09 - 00000000 ____D C:\ProgramData\HitmanPro

2015-11-25 21:57 - 2015-11-25 21:57 - 10358080 _____ (SurfRight B.V.) C:\Users\Denise\Desktop\HitmanPro.exe

2015-11-25 20:23 - 2015-11-25 20:23 - 00005412 _____ C:\Users\Denise\Desktop\Fixlog.txt

2015-11-25 20:19 - 2015-11-25 20:22 - 00000000 ____D C:\Users\Denise\Desktop\tojaboarddateien

2015-11-23 15:11 - 2015-11-23 15:13 - 00000000 ____D C:\AdwCleaner

2015-11-23 15:05 - 2015-11-23 15:05 - 22908888 _____ (Malwarebytes ) C:\Users\Denise\Desktop\mbam-setup-2.2.0.1024.exe

2015-11-22 13:11 - 2015-11-26 07:26 - 00000000 ____D C:\FRST

2015-11-22 13:09 - 2015-11-25 20:12 - 01719296 _____ (Farbar) C:\Users\Denise\Desktop\FRST.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-26 07:08 - 2012-04-09 11:28 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2015-11-26 01:57 - 2009-07-14 05:34 - 00023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-11-26 01:57 - 2009-07-14 05:34 - 00023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-11-25 20:32 - 2009-12-05 18:37 - 00699682 _____ C:\windows\system32\perfh007.dat

2015-11-25 20:32 - 2009-12-05 18:37 - 00149790 _____ C:\windows\system32\perfc007.dat

2015-11-25 20:32 - 2009-07-26 21:06 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI

2015-11-25 20:32 - 2009-07-14 03:37 - 00000000 ____D C:\windows\inf

2015-11-25 20:25 - 2010-03-13 13:44 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite

2015-11-25 20:25 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT

2015-11-25 07:41 - 2010-06-25 22:33 - 00000000 ____D C:\Users\Denise\AppData\LocalLow\Temp

2015-11-24 16:08 - 2012-04-09 11:28 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe

2015-11-24 16:08 - 2011-05-28 14:32 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl

2015-11-24 06:25 - 2015-07-08 18:34 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2015-11-24 06:09 - 2015-06-03 20:40 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-11-22 14:37 - 2010-07-23 15:40 - 00000000 ____D C:\Users\Denise\AppData\Local\CrashDumps

2015-11-22 13:11 - 2009-07-14 03:37 - 00000000 ____D C:\Windows

2015-11-22 12:55 - 2010-03-13 13:45 - 00000000 ____D C:\Program Files\Adobe

2015-11-22 12:52 - 2013-04-08 08:30 - 00000000 ____D C:\Program Files\Common Files\Skype

2015-11-22 12:52 - 2012-11-22 14:34 - 00000000 ___RD C:\Program Files\Skype

2015-11-22 12:52 - 2010-08-05 14:06 - 00000000 ____D C:\ProgramData\Skype
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2010-04-18 11:02 - 2009-09-24 08:55 - 1454213 _____ () C:\Program Files\wrar390d.exe

2011-11-01 17:10 - 2012-03-11 11:47 - 0005264 _____ () C:\Users\Denise\AppData\Roaming\mobile.trf

2011-06-21 09:52 - 2011-07-11 10:54 - 0000308 _____ () C:\Users\Denise\AppData\Roaming\Rim.Desktop.Exception.log

2011-05-27 14:12 - 2012-04-17 17:56 - 0003107 _____ () C:\Users\Denise\AppData\Roaming\Rim.Desktop.HttpServerSetup.log

2011-06-21 09:58 - 2012-01-26 12:21 - 0000308 _____ () C:\Users\Denise\AppData\Roaming\Rim.DesktopHelper.Exception.log

2012-01-02 16:38 - 2012-01-02 16:38 - 0000180 _____ () C:\Users\Denise\AppData\Roaming\SMSMMSConfig.txt

2010-04-27 18:36 - 2010-04-27 18:36 - 0000000 _____ () C:\Users\Denise\AppData\Roaming\wklnhst.dat

2011-11-01 17:00 - 2012-03-11 18:06 - 0009608 _____ () C:\Users\Denise\AppData\Roaming\WTGAddresses.dat

2011-11-15 20:47 - 2011-12-15 21:52 - 0000008 _____ () C:\Users\Denise\AppData\Roaming\WTGMMS.dat

2011-11-15 20:47 - 2011-12-15 21:52 - 0000008 _____ () C:\Users\Denise\AppData\Roaming\WTGMMSNotification.dat

2011-11-01 16:15 - 2011-11-01 17:00 - 0006552 _____ () C:\Users\Denise\AppData\Roaming\wtgoverride.wdb

2011-11-01 17:00 - 2012-03-11 18:06 - 0047950 _____ () C:\Users\Denise\AppData\Roaming\WTGSMS.dat

2011-06-21 09:54 - 2013-08-20 11:55 - 0017408 _____ () C:\Users\Denise\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-07-08 12:22 - 2015-07-08 12:22 - 0761791 _____ () C:\Users\Denise\AppData\Local\omesuperv2.exe

2014-11-20 18:28 - 2014-11-20 18:28 - 0000909 _____ () C:\Users\Denise\AppData\Local\recently-used.xbel

2010-08-05 14:32 - 2010-08-05 14:32 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

2010-03-13 13:46 - 2009-08-17 06:54 - 0131368 _____ () C:\ProgramData\FullRemove.exe

2010-07-23 17:23 - 2010-07-23 18:14 - 0006265 _____ () C:\ProgramData\hpzinstall.log

2009-12-05 01:03 - 2009-12-05 01:03 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log

2009-12-05 01:01 - 2009-12-05 01:02 - 0000106 _____ () C:\ProgramData\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}.log

2009-12-05 00:57 - 2009-12-05 00:58 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log

2009-12-05 01:02 - 2009-12-05 01:03 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log

2009-12-05 00:57 - 2009-12-05 00:57 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

2009-12-05 00:58 - 2009-12-05 01:01 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\windows\explorer.exe => Datei ist digital signiert

C:\windows\system32\winlogon.exe => Datei ist digital signiert

C:\windows\system32\wininit.exe => Datei ist digital signiert

C:\windows\system32\svchost.exe => Datei ist digital signiert

C:\windows\system32\services.exe => Datei ist digital signiert

C:\windows\system32\User32.dll => Datei ist digital signiert

C:\windows\system32\userinit.exe => Datei ist digital signiert

C:\windows\system32\rpcss.dll => Datei ist digital signiert

C:\windows\system32\dnsapi.dll => Datei ist digital signiert

C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-11-22 14:10
 

==================== Ende vom FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:25-11-2015

durchgeführt von Denise (2015-11-26 07:27:57)

Gestartet von C:\Users\Denise\Desktop

Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2010-03-13 12:44:43)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1072828290-3828818215-1948454868-500 - Administrator - Disabled)

Denise (S-1-5-21-1072828290-3828818215-1948454868-1000 - Administrator - Enabled) => C:\Users\Denise

fbwuser01C8 (S-1-5-21-1072828290-3828818215-1948454868-1006 - Limited - Enabled)

fbwuserBCE0 (S-1-5-21-1072828290-3828818215-1948454868-1008 - Limited - Enabled)

fbwuserE33E (S-1-5-21-1072828290-3828818215-1948454868-1007 - Limited - Enabled)

Gast (S-1-5-21-1072828290-3828818215-1948454868-501 - Limited - Disabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-1072828290-3828818215-1948454868-1004 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Microsoft Security Essentials (Disabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Disabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)

Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 2.5.1.369 - Adobe Systems Incorporated)

Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)

Adobe Photoshop CS6 (HKLM\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)

Adobe® Content Viewer (HKLM\...\com.adobe.dmp.contentviewer) (Version: 3.4.2 - Adobe Systems, Incorporated)

Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.1.0805 - Atheros)

Bamboo Dock (Version: 4.1.0 - Wacom Europe GmbH) Hidden

Bamboo Dock 3.3 (HKLM\...\Bamboo Dock) (Version: 3.3 - Wacom Co., Ltd.)

BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung)

CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)

Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.)

CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)

CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.)

CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.)

CyberLink PowerDVD 8 (HKLM\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.)

CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.)

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3304 - CyberLink Corp.)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

Easy Network Manager (HKLM\...\{A5675A9E-F073-414A-9A04-F9BCD50459D7}) (Version: 4.2.6 - Samsung)

Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.)

EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung)

EasyBits GO (HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\...\Game Organizer) (Version:  - EasyBits Media)

Free Audio Converter version 5.0.22.128 (HKLM\...\Free Audio Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)

Free YouTube Download version 3.2.0.128 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.0.128 - DVDVideoSoft Ltd.)

Free YouTube to MP3 Converter version 3.12.0.128 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)

Game Pack (HKLM\...\{63eafc52-b963-4297-a7eb-d412944e7065}_is1) (Version: 5.3.0.10 - Oberon Media, Inc.)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)

Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)

LAME v3.98.2 for Audacity (HKLM\...\LAME for Audacity_is1) (Version:  - )

LPS 2009v 3.0 USB (HKLM\...\{BDBA9828-200B-43A0-AB4F-82DABEE64F94}_is1) (Version: LPS 2009v 3.0 USB - VVR)

Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.22.3.3 - Marvell)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Access 2003 Runtime (HKLM\...\{901C0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 39.0 (x86 de) (HKLM\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 39.0 - Mozilla)

MPEG2 Codec(libmpeg2/mad) (HKLM\...\MPEG2 Codec(libmpeg2/mad)) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Nero 7 Essentials (HKLM\...\{81CD6232-10F5-4832-B3DA-1B88B1571031}) (Version: 7.02.5851 - Nero AG)

NVIDIA GeForce Experience 2.5.15.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.46 - NVIDIA Corporation)

NVIDIA Grafiktreiber 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

OpenMG Secure Module 4.7.00 (HKLM\...\InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}) (Version: 4.7.00.12140 - Sony Corporation)

OpenMG Secure Module 4.7.00 (Version: 4.7.00.12140 - Sony Corporation) Hidden

Origin (HKLM\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)

PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden

QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)

RawTherapee Version 4.0.11 (HKLM\...\{128459AB-59A7-430A-8BD0-3D8803D50400}_is1) (Version: 4.0.11 - rawtherapee.com)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7404 - Realtek Semiconductor Corp.)

RGSS-RTP Standard (HKLM\...\{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}) (Version: 1.0.0 - Enterbrain)

RTP for RM2K (Png, Wav, Midi, Fonts) (HKLM\...\RTP for RM2K (Png, Wav, Midi, Fonts)) (Version:  - )

SAMSUNG CDMA Modem Driver Set (HKLM\...\SAMSUNG CDMA Modem) (Version:  - )

SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )

SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )

Samsung PC Studio (Version: 3.0.0.60203 - Samsung Electronics Co., Ltd.) Hidden

Samsung PC Studio 3 USB Driver Installer (HKLM\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)

Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung)

Samsung Support Center (HKLM\...\{CCC2B140-B47A-45FA-AAE3-BD60DA41AE00}) (Version: 1.0.21 - Samsung)

Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)

SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.5.15.46 - NVIDIA Corporation) Hidden

SonicStage 4.3 (HKLM\...\{A0EB195B-5876-48E6-879D-33D4B2102610}) (Version: 4.3 - Sony Corporation)

Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)

Steam (HKLM\...\Steam) (Version:  - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

Ubisoft Game Launcher (HKLM\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)

Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )

User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

VLC media player 1.0.3 (HKLM\...\VLC media player) (Version: 1.0.3 - VideoLAN Team)

Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet IE Plugin (HKLM\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.7 - Wacom Technology Corp.)

WebTablet Netscape Plugin (HKLM\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.5 - Wacom Technology Corp.)

Winamp (nur entfernen) (HKLM\...\Winamp) (Version:  - )

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)

WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media)

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{1c492e6a-2803-5ed7-83e1-1b1d4d41eb39}\InprocServer32 -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll (EasyBits Media)

CustomCLSID: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000_Classes\CLSID\{b2b568c8-3712-4a75-b806-4b3c2fdb06d5}\localserver32 -> C:\Users\Denise\AppData\Local\Temp\{e9513610-f218-4dda-b954-2c7e6ba7cabb}\IDriver.NonElevated.exe => (Der Dateneintrag hat 12 mehr Zeichen).
 

==================== Wiederherstellungspunkte =========================
 

26-11-2015 02:02:37 Geplanter Prüfpunkt
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0125262C-427A-4DFE-BB7B-A01F82677284} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] ()

Task: {0C0875BC-0A59-4F6C-845C-E2DCFA46AADC} - System32\Tasks\{77683F70-B2A3-423A-BA32-3539EEFE97FD} => C:\Program Files\Skype\Phone\Skype.exe

Task: {14C813C2-B303-4AB6-B821-47EA69A50B33} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

Task: {2748628F-A9EB-4010-94C1-1DED464FA34B} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-10-26] (SAMSUNG Electronics)

Task: {28118F91-F1F8-4886-8DDE-FDC81BFD3923} - System32\Tasks\{84B8F68B-3411-4A64-A517-B2D70055DC51} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {2BEE9C2A-EAC7-4CC4-8026-1B7B32F55B48} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-10-16] (SAMSUNG Electronics co., LTD.)

Task: {2CC1AEB9-AC28-401D-A101-970B91511899} - System32\Tasks\{B750924D-E105-450D-99A8-262347CA436C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.124/de/go/help.faq.installer?LastError=1604

Task: {66D914C6-7066-488B-999A-71725199C662} - System32\Tasks\{944669E5-57EB-4345-8984-E39585338637} => pcalua.exe -a "C:\Users\Denise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A4OKM3FQ\20101130-003-i32[1].exe" -d C:\Users\Denise\Desktop

Task: {6A6CCE9D-4827-41C6-B848-31534D6BF6D4} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-24] (Adobe Systems Incorporated)

Task: {923AFCCA-19CA-4175-B4A6-0682580544E0} - System32\Tasks\{4C6C12B0-0D3D-4B96-8BD1-E1EC26827F61} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {A8D63F98-436B-4454-8A21-5A41D4DB9BE9} - System32\Tasks\{A185E869-35A1-4000-A707-3E3B3F9A74A0} => pcalua.exe -a "C:\Program Files\EA GAMES\Die Sims 2 Deluxe\EP2\CSBin\PackageInstaller.exe" -d "C:\Program Files\Mozilla Firefox" -c "C:\Users\Denise\AppData\Local\Temp\Victorian Elegance.Sims2Pack"

Task: {AA57E286-DE28-4947-9020-4F898DFF0566} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1072828290-3828818215-1948454868-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

Task: {AC68A262-7B00-44F1-9D7A-D657B4C6FF65} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)

Task: {C5521848-C645-436A-9BCC-46ADB8A42C14} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.)

Task: {D6323718-D6F4-4835-B531-77E2AF730D98} - System32\Tasks\Trojan Killer => C:\Program Files\GridinSoft Trojan Killer\trojankiller.exe

Task: {DC571846-99C7-433D-BF77-54A9FF587F83} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC)

Task: {EAF88417-F062-4A34-8717-3BED50A2B750} - System32\Tasks\{ED001293-CFE2-44A6-BA5C-848DAB474DD0} => pcalua.exe -a "C:\Program Files\Samsung Casual Games\Go-Go Gourmet\Uninstall.exe" -c "C:\Program Files\Samsung Casual Games\Go-Go Gourmet\install.log"

Task: {F31F4939-9458-4471-8E2B-88C1283793A6} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1072828290-3828818215-1948454868-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-02-25 21:14 - 2015-02-04 03:05 - 00106640 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll

2011-06-20 19:34 - 2011-06-12 12:55 - 00073600 _____ () c:\windows\system32\ezgosvc.dll

2010-03-13 13:47 - 2009-08-13 21:58 - 00044312 _____ () C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

2014-05-23 01:10 - 2014-05-23 01:10 - 00693920 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll

2010-04-18 11:05 - 2009-08-16 16:06 - 00141312 _____ () C:\Program Files\WinRAR\rarext.dll

2009-12-05 01:00 - 2009-07-07 19:23 - 00247152 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe

2009-06-03 12:59 - 2009-06-03 12:59 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll

2009-06-03 12:59 - 2009-06-03 12:59 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll

2010-07-28 22:58 - 2014-11-20 09:06 - 00646744 _____ () C:\Program Files\Bamboo Dock\BambooCore.exe

2003-04-17 07:54 - 2003-04-17 07:54 - 00012288 _____ () C:\Program Files\Winamp\winampa.exe

2014-05-26 04:52 - 2014-05-26 04:52 - 32733088 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\HEX\libcef.dll

2015-04-01 19:39 - 2015-10-04 09:24 - 00012080 _____ () C:\Program Files\NVIDIA Corporation\Update Core\detoured.dll

2011-03-14 13:57 - 2014-08-19 20:12 - 01019672 _____ () C:\Program Files\Tablet\Pen\libxml2.dll

2014-05-23 01:10 - 2014-05-23 01:10 - 05341856 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2014-05-12 21:22 - 2014-05-12 21:22 - 02217128 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\plugins\ExchangePlugin\ExManCoreLib\ExManZxpSign.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\Denise\Desktop\IMG_2589fertig.jpg:com.dropbox.attributes
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Control Panel\Desktop\\Wallpaper -> 

HKU\S-1-5-21-1072828290-3828818215-1948454868-501\Control Panel\Desktop\\Wallpaper -> C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.0.1 - 192.168.0.2

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{80763932-6272-4EC3-922F-91E8FFCFF411}] => (Allow) C:\Program Files\CyberLink\PowerDirector\PDR.EXE

FirewallRules: [{1B4A8D63-D7D1-415C-803A-98E0DFD28F92}] => (Allow) C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.EXE

FirewallRules: [{2ECD0310-FA77-4FC9-92BA-C88211C2541B}] => (Allow) svchost.exe

FirewallRules: [{633D5160-7155-4043-8CAF-96CB23B39FD2}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

FirewallRules: [{0CE838CB-9BBE-4349-BB06-DFBD6A808828}] => (Allow) LPort=4481

FirewallRules: [{2180A482-9630-4E2F-82DA-5C72699BCE0A}] => (Allow) LPort=4481

FirewallRules: [{9F6E8EB7-6FB3-4A92-9D9C-04EF5914F432}] => (Allow) LPort=4482

FirewallRules: [{B5BE4872-11E6-4E5E-9CA1-7CC6C74C58E5}] => (Allow) LPort=4482

FirewallRules: [{6F909844-BB20-40E0-81B3-4B12C2D0BE54}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{9F246357-8DCE-4BA1-A55E-1EFB85B07125}] => (Allow) LPort=2869

FirewallRules: [{613B0BD8-E42A-4F3B-BBDE-0BEF819D8489}] => (Allow) LPort=1900

FirewallRules: [{E89796A6-38F1-4DBD-819B-2B40F77ED89C}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{6CEB2B97-13EB-467D-B703-628876C9D511}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{527EC58B-EC2B-42AC-94AB-E5A7C276622E}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{444A1476-A7B6-4418-934F-F1D4D8AFE561}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{E1E3BB11-C1FE-4D15-A524-E9D069A3C39E}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F6797D73-4DF6-433B-A766-9C4454B6A975}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F0DE6D99-195B-4344-A991-9DCF02A1F941}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{D09C0081-C6E4-45BA-AA76-58DDFE24CEF2}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{37A97BB5-789D-42AE-A7E0-162FCB81AA0F}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{52638EE3-8914-4932-B0DB-92BBBB3F992C}] => (Allow) C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe

FirewallRules: [{286D7930-A45E-4D5F-BB3F-0771995B825D}] => (Allow) C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{6B4F4303-DA4D-41A1-A52B-B60440E15B31}] => (Allow) C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{417D3A6D-E34D-4A61-A1FB-F5BF712B167C}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{55F4E51F-5690-43EA-BBD1-B5281C832641}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{E722ACE8-371A-4CB6-B6E2-BAA391D37221}] => (Allow) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{B5EB9715-5C0E-4D05-8C4A-24CF26367082}] => (Allow) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{A11B07C1-76D5-4AD6-82E5-EEFF0DA01AA3}C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{2FA9A431-CF1D-47CC-8261-5C664011D66F}C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\denise\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{014963E3-F16F-44D0-B3CD-097089958639}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{7AC0F6CA-DC84-4356-B3CB-AEE83736B907}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{2AAFA724-3E9C-43EE-A5FB-658C6F7DC093}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{117BFE89-2975-4275-9DCA-5A97932B5A6E}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [TCP Query User{D8AB2B32-B7D7-4970-90B3-F47032151FEB}C:\users\denise\downloads\remotecontrolserver.exe] => (Allow) C:\users\denise\downloads\remotecontrolserver.exe

FirewallRules: [UDP Query User{DBA93071-C46D-4796-AD4F-5FEC4791510E}C:\users\denise\downloads\remotecontrolserver.exe] => (Allow) C:\users\denise\downloads\remotecontrolserver.exe

FirewallRules: [{956267F8-A470-479D-B88B-E895A54337AF}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{2E69A59B-ADB3-4887-B700-4103B19D2786}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{897A7DFF-26A6-4DE8-A55B-4B684D739469}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{FAD963BC-B554-4BB1-910E-FE3BA39522F2}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{84DD2A37-2FC4-4F49-AEC0-FD6013B816EF}C:\users\denise\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\denise\appdata\roaming\spotify\spotify.exe

FirewallRules: [{AB929B3D-09D2-4DAF-903F-D9D6FCFCF271}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{75D332C6-B7E9-4FEF-AE8B-42A56F5DC98E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{3847EB80-4EB5-472C-B257-7030CF957EEF}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{54806E36-CA94-400C-AC19-201AE17B1DC5}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{0197331E-5166-4E0E-A130-FBCB2BC5965F}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{6538BD51-6C13-49E8-930D-590B218A7025}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{8ACE36A0-D9EA-40AF-B50C-859AA95FE5A6}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{86312056-6F97-49E2-9260-60FD30E8EA4D}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{448DB76F-CA05-472C-8879-AF45B332A7F2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{FCFAB0B9-2DD4-4469-B028-9FABA11B64A0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{C3ED60B3-021A-4C1B-8710-0BF122E69CBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{4DC07AA8-F009-450B-AA74-797C7B3679AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{0B657F6F-74AB-4FB5-BE99-13C500E48232}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (11/26/2015 02:00:57 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AitStatic.exe, Version: 10.0.10004.0, Zeitstempel: 0x54c64d23

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xc000000d

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x3d4

Startzeit der fehlerhaften Anwendung: 0xAitStatic.exe0

Pfad der fehlerhaften Anwendung: AitStatic.exe1

Pfad des fehlerhaften Moduls: AitStatic.exe2

Berichtskennung: AitStatic.exe3
 

Error: (11/26/2015 02:00:56 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AitStatic.exe, Version: 10.0.10004.0, Zeitstempel: 0x54c64d23

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xc000000d

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x1788

Startzeit der fehlerhaften Anwendung: 0xAitStatic.exe0

Pfad der fehlerhaften Anwendung: AitStatic.exe1

Pfad des fehlerhaften Moduls: AitStatic.exe2

Berichtskennung: AitStatic.exe3
 

Error: (11/26/2015 02:00:54 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AitStatic.exe, Version: 10.0.10004.0, Zeitstempel: 0x54c64d23

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xc000000d

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x5b0

Startzeit der fehlerhaften Anwendung: 0xAitStatic.exe0

Pfad der fehlerhaften Anwendung: AitStatic.exe1

Pfad des fehlerhaften Moduls: AitStatic.exe2

Berichtskennung: AitStatic.exe3
 

Error: (11/26/2015 02:00:53 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AitStatic.exe, Version: 10.0.10004.0, Zeitstempel: 0x54c64d23

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xc000000d

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xee0

Startzeit der fehlerhaften Anwendung: 0xAitStatic.exe0

Pfad der fehlerhaften Anwendung: AitStatic.exe1

Pfad des fehlerhaften Moduls: AitStatic.exe2

Berichtskennung: AitStatic.exe3
 

Error: (11/26/2015 02:00:17 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (11/26/2015 02:00:17 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (11/26/2015 02:00:15 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (11/26/2015 02:00:15 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (11/26/2015 01:59:17 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (11/26/2015 01:58:21 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 
 

Systemfehler:

=============

Error: (11/25/2015 08:12:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/25/2015 08:12:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/25/2015 08:12:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/25/2015 08:12:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/25/2015 07:42:23 AM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (11/25/2015 07:41:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/25/2015 07:41:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/25/2015 07:41:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (11/25/2015 07:41:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/25/2015 07:41:52 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Oberon Media Game Console service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

CodeIntegrity:

===================================

  Date: 2014-02-04 23:11:25.411

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-03 10:21:01.710

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-02 13:57:26.418

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-02 13:28:30.840

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 20:34:10.497

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 20:25:55.905

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 10:23:03.700

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 09:40:10.678

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-31 09:31:11.760

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-01-29 13:00:46.224

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz

Prozentuale Nutzung des RAM: 58%

Installierter physikalischer RAM: 3036.61 MB

Verfügbarer physikalischer RAM: 1248.74 MB

Summe virtueller Speicher: 6069.48 MB

Verfügbarer virtueller Speicher: 4092.61 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:141.49 GB) (Free:14.37 GB) NTFS

Drive d: () (Fixed) (Total:141.5 GB) (Free:73.16 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 298.1 GB) (Disk ID: 711561A4)

Partition 1: (Not Active) - (Size=15 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)
 

==================== Ende vom Addition.txt ============================

M-K-D-B

26.11.2015 21:25

Servus,

sei mir bitte nicht böse, aber wenn ich nur im Downloadordner schon sehe, was du dir alles für Müll heruntergeladen hast, dann wundert mich nichts mehr... :blabla:

Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

CloseProcesses:

FirewallRules: [{E1E3BB11-C1FE-4D15-A524-E9D069A3C39E}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F6797D73-4DF6-433B-A766-9C4454B6A975}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F0DE6D99-195B-4344-A991-9DCF02A1F941}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{D09C0081-C6E4-45BA-AA76-58DDFE24CEF2}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{014963E3-F16F-44D0-B3CD-097089958639}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{7AC0F6CA-DC84-4356-B3CB-AEE83736B907}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{2AAFA724-3E9C-43EE-A5FB-658C6F7DC093}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{117BFE89-2975-4275-9DCA-5A97932B5A6E}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

C:\Users\Denise\AppData\Local\omesuperv2.exe

C:\Users\Denise\Downloads\ADLSoft_UnCompressor_triple_2nd_offer_0412_s.exe

C:\Users\Denise\Downloads\MozillaFirefox-Setup-Yahoo!Edition.exe

C:\Users\Denise\Downloads\PDFCreatorSetup.exe

C:\Users\Denise\Downloads\USB-Fehlerbehebung.exe

C:\extensions

C:\Users\Denise\Downloads\SoftonicDownloader*.exe

C:\Users\Denise\Downloads\setup(1).exe

C:\Users\Denise\Downloads\rcpsetup_marim_mapp.exe

C:\Users\Denise\Downloads\Picasa.exe

C:\Users\Denise\Downloads\installer_minecraft_Deutsch.exe

C:\Users\Denise\Downloads\HSS-3.42-install-hss-561-conduit.exe

C:\Users\Denise\Downloads\FreeYouTubeToMP3Converter.exe

C:\Users\Denise\Downloads\FreeYouTubeDownload.exe

C:\Users\Denise\Downloads\FreeStudio.exe

C:\Users\Denise\Downloads\*CHIP-Installer.exe

C:\Users\Denise\Downloads\Babylon9_setup.exe

DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro

DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera

DeleteKey: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\AppDataLow\Software\Smartbar

DeleteKey: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478}

DeleteKey: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Smartbar

EmptyTemp:

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird!

Hinweis: Registry Cleaner

Ich sehe, dass du sogenannte Registry Cleaner installiert hast.
In deinem Fall CCleaner.

Wir raten von der Verwendung jeglicher Art von Registry Cleaner ab.

Der Grund ist ganz einfach:
Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Man sollte nicht unnötigerweise an der Registry rumbasteln. Schon ein kleiner Fehler kann gravierende Folgen haben und auch Programme machen manchmal Fehler.
Zerstörst du die Registry, zerstörst du Windows.

Zudem ist der Nutzen zur Performancesteigerung umstritten und meist kaum im wahrnehmbaren Bereich.

Ich würde dir empfehlen, Registry Cleaner nicht weiterhin zu verwenden und über

Start --> Systemsteuerung --> Software (bei Windows XP)
Start --> Systemsteuerung --> Programme und Funktionen (bei Vista / Win 7)

zu deinstallieren.

Selbst Microsoft unterstützt sog. Registry-Cleaner nicht.

Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. :daumenhoc
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

	Emsisoft	MSE
	http://filepony.de/icon/emsisoft_anti_malware.png	http://filepony.de/icon/microsoft_se...essentials.png

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/adblock_firefox.pngAdblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
http://filepony.de/icon/noscript.png NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:

Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Denise94

27.11.2015 08:53

Dann einmal noch die FRST Datei

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version:26-11-2015

durchgeführt von Denise (2015-11-27 08:24:37) Run:5

Gestartet von C:\Users\Denise\Desktop

Geladene Profile: Denise & Gast (Verfügbare Profile: Denise & Gast)

Start-Modus: Normal
 

==============================================
 

fixlist Inhalt:

*****************

start

CloseProcesses:

FirewallRules: [{E1E3BB11-C1FE-4D15-A524-E9D069A3C39E}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F6797D73-4DF6-433B-A766-9C4454B6A975}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{F0DE6D99-195B-4344-A991-9DCF02A1F941}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{D09C0081-C6E4-45BA-AA76-58DDFE24CEF2}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{014963E3-F16F-44D0-B3CD-097089958639}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{7AC0F6CA-DC84-4356-B3CB-AEE83736B907}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{2AAFA724-3E9C-43EE-A5FB-658C6F7DC093}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{117BFE89-2975-4275-9DCA-5A97932B5A6E}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

C:\Users\Denise\AppData\Local\omesuperv2.exe

C:\Users\Denise\Downloads\ADLSoft_UnCompressor_triple_2nd_offer_0412_s.exe

C:\Users\Denise\Downloads\MozillaFirefox-Setup-Yahoo!Edition.exe

C:\Users\Denise\Downloads\PDFCreatorSetup.exe

C:\Users\Denise\Downloads\USB-Fehlerbehebung.exe

C:\extensions

C:\Users\Denise\Downloads\SoftonicDownloader*.exe

C:\Users\Denise\Downloads\setup(1).exe

C:\Users\Denise\Downloads\rcpsetup_marim_mapp.exe

C:\Users\Denise\Downloads\Picasa.exe

C:\Users\Denise\Downloads\installer_minecraft_Deutsch.exe

C:\Users\Denise\Downloads\HSS-3.42-install-hss-561-conduit.exe

C:\Users\Denise\Downloads\FreeYouTubeToMP3Converter.exe

C:\Users\Denise\Downloads\FreeYouTubeDownload.exe

C:\Users\Denise\Downloads\FreeStudio.exe

C:\Users\Denise\Downloads\*CHIP-Installer.exe

C:\Users\Denise\Downloads\Babylon9_setup.exe

DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro

DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera

DeleteKey: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\AppDataLow\Software\Smartbar

DeleteKey: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478}

DeleteKey: HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Smartbar

EmptyTemp:

end

*****************
 

Prozess erfolgreich geschlossen.

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E1E3BB11-C1FE-4D15-A524-E9D069A3C39E} => Wert erfolgreich entfernt

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F6797D73-4DF6-433B-A766-9C4454B6A975} => Wert erfolgreich entfernt

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F0DE6D99-195B-4344-A991-9DCF02A1F941} => Wert erfolgreich entfernt

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D09C0081-C6E4-45BA-AA76-58DDFE24CEF2} => Wert erfolgreich entfernt

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{014963E3-F16F-44D0-B3CD-097089958639} => Wert erfolgreich entfernt

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7AC0F6CA-DC84-4356-B3CB-AEE83736B907} => Wert erfolgreich entfernt

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2AAFA724-3E9C-43EE-A5FB-658C6F7DC093} => Wert erfolgreich entfernt

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{117BFE89-2975-4275-9DCA-5A97932B5A6E} => Wert erfolgreich entfernt

C:\Users\Denise\AppData\Local\omesuperv2.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\ADLSoft_UnCompressor_triple_2nd_offer_0412_s.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\MozillaFirefox-Setup-Yahoo!Edition.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\PDFCreatorSetup.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\USB-Fehlerbehebung.exe => erfolgreich verschoben

C:\extensions => erfolgreich verschoben
 

=========== "C:\Users\Denise\Downloads\SoftonicDownloader*.exe" ==========
 

C:\Users\Denise\Downloads\SoftonicDownloader_for_photoscape.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\SoftonicDownloader_fuer_barcode-scanner.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\SoftonicDownloader_fuer_minecraft.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\SoftonicDownloader_fuer_vegas-pro.exe => erfolgreich verschoben
 

========= Ende -> "C:\Users\Denise\Downloads\SoftonicDownloader*.exe" ========
 

C:\Users\Denise\Downloads\setup(1).exe => erfolgreich verschoben

C:\Users\Denise\Downloads\rcpsetup_marim_mapp.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\Picasa.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\installer_minecraft_Deutsch.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\HSS-3.42-install-hss-561-conduit.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\FreeYouTubeToMP3Converter.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\FreeYouTubeDownload.exe => erfolgreich verschoben

C:\Users\Denise\Downloads\FreeStudio.exe => erfolgreich verschoben
 

=========== "C:\Users\Denise\Downloads\*CHIP-Installer.exe" ==========
 

C:\Users\Denise\Downloads\DirectX - CHIP-Installer.exe => erfolgreich verschoben
 

========= Ende -> "C:\Users\Denise\Downloads\*CHIP-Installer.exe" ========
 

C:\Users\Denise\Downloads\Babylon9_setup.exe => erfolgreich verschoben

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro => Schlüssel erfolgreich entfernt

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera => Schlüssel erfolgreich entfernt

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\AppDataLow\Software\Smartbar => Schlüssel erfolgreich entfernt

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} => Schlüssel nicht gefunden. 

HKU\S-1-5-21-1072828290-3828818215-1948454868-1000\Software\Smartbar => Schlüssel erfolgreich entfernt

EmptyTemp: => 27.8 MB temporäre Dateien entfernt.
 
 

Das System musste neu gestartet werden.
 

==== Ende vom Fixlog 08:24:47 ====

Da sonst keine weiteren Probleme mehr sind, wars das denk ich :abklatsch:

M-K-D-B

27.11.2015 17:54

Ich bin froh, dass wir helfen konnten :abklatsch:

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! :)

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

Alle Zeitangaben in WEZ +1. Es ist jetzt 19:54 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131